# Flog Txt Version 1 # Analyzer Version: 3.1.2 # Analyzer Build Date: Oct 28 2019 11:51:53 # Log Creation Date: 30.12.2019 17:39:07.782 Process: id = "1" image_name = "c0hen locker.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c0hen locker.exe" page_root = "0x518e6000" os_pid = "0x94c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c0hen locker.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x950 [0023.226] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0024.217] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x1eed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0024.231] IsAppThemed () returned 0x1 [0024.234] CoTaskMemAlloc (cb=0xf0) returned 0x384260 [0024.234] CreateActCtxA (pActCtx=0x1ef258) returned 0x384454 [0024.290] CoTaskMemFree (pv=0x384260) [0024.301] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc13e [0024.301] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc13c [0024.367] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0024.370] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x73e80000 [0024.784] AdjustWindowRectEx (in: lpRect=0x1ef2b4, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x1ef2b4) returned 1 [0024.786] GetCurrentProcess () returned 0xffffffff [0024.787] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1ef1cc, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1ef1cc*=0x1e4) returned 1 [0024.799] GetCurrentActCtx (in: lphActCtx=0x1ef12c | out: lphActCtx=0x1ef12c*=0x0) returned 1 [0024.799] ActivateActCtx (in: hActCtx=0x384454, lpCookie=0x1ef13c | out: hActCtx=0x384454, lpCookie=0x1ef13c) returned 1 [0024.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0024.801] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x73ce0000 [0025.295] GetModuleHandleW (lpModuleName="user32.dll") returned 0x74f40000 [0025.295] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0025.296] GetStockObject (i=5) returned 0x1900015 [0025.314] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0025.316] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0025.316] RegisterClassW (lpWndClass=0x1eefe4) returned 0xc13d [0025.316] CoTaskMemFree (pv=0x390ae8) [0025.316] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0025.317] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x301b6 [0025.317] SetWindowLongW (hWnd=0x301b6, nIndex=-4, dwNewLong=1997940189) returned 79300582 [0025.318] GetWindowLongW (hWnd=0x301b6, nIndex=-4) returned 1997940189 [0025.384] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ee8f4 | out: phkResult=0x1ee8f4*=0x204) returned 0x0 [0025.384] RegQueryValueExW (in: hKey=0x204, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x1ee914, lpData=0x0, lpcbData=0x1ee910*=0x0 | out: lpType=0x1ee914*=0x0, lpData=0x0, lpcbData=0x1ee910*=0x0) returned 0x2 [0025.385] RegQueryValueExW (in: hKey=0x204, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x1ee914, lpData=0x0, lpcbData=0x1ee910*=0x0 | out: lpType=0x1ee914*=0x0, lpData=0x0, lpcbData=0x1ee910*=0x0) returned 0x2 [0025.385] RegCloseKey (hKey=0x204) returned 0x0 [0025.390] SetWindowLongW (hWnd=0x301b6, nIndex=-4, dwNewLong=79300622) returned 1997940189 [0025.390] GetWindowLongW (hWnd=0x301b6, nIndex=-4) returned 79300622 [0025.390] GetWindowLongW (hWnd=0x301b6, nIndex=-16) returned 113311744 [0025.391] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc134 [0025.391] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc13a [0025.391] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301b6, Msg=0x81, wParam=0x0, lParam=0x1eebc0) returned 0x1 [0025.392] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301b6, Msg=0x83, wParam=0x0, lParam=0x1eebac) returned 0x0 [0025.392] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301b6, Msg=0x1, wParam=0x0, lParam=0x1eebc0) returned 0x0 [0025.392] GetClientRect (in: hWnd=0x301b6, lpRect=0x1ee928 | out: lpRect=0x1ee928) returned 1 [0025.392] GetWindowRect (in: hWnd=0x301b6, lpRect=0x1ee928 | out: lpRect=0x1ee928) returned 1 [0025.393] GetParent (hWnd=0x301b6) returned 0x0 [0025.393] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1c680001) returned 1 [0025.487] EtwEventRegister () returned 0x0 [0025.491] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.491] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.491] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.491] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.491] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.491] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.492] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.492] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.493] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.493] AdjustWindowRectEx (in: lpRect=0x1eeecc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeecc) returned 1 [0025.498] GetSystemDefaultLCID () returned 0x409 [0025.498] GetStockObject (i=17) returned 0x18a0025 [0025.500] GetObjectW (in: h=0x18a0025, c=92, pv=0x1eec8c | out: pv=0x1eec8c) returned 92 [0025.501] GetDC (hWnd=0x0) returned 0x601084f [0025.543] GdiplusStartup (in: token=0x1f5e60, input=0x1ee258, output=0x1ee2a8 | out: token=0x1f5e60, output=0x1ee2a8) returned 0x0 [0025.558] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0025.559] GdipCreateFontFromLogfontW (hdc=0x601084f, logfont=0x390ae8, font=0x1eed54) returned 0x0 [0025.644] CoTaskMemFree (pv=0x390ae8) [0025.645] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0025.645] CoTaskMemFree (pv=0x390ae8) [0025.645] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0025.645] CoTaskMemFree (pv=0x390ae8) [0025.646] GdipGetFontUnit (font=0x552230, unit=0x1eed20) returned 0x0 [0025.646] GdipGetFontSize (font=0x552230, size=0x1eed24) returned 0x0 [0025.646] GdipGetFontStyle (font=0x552230, style=0x1eed1c) returned 0x0 [0025.646] GdipGetFamily (font=0x552230, family=0x1eed18) returned 0x0 [0025.646] GdipGetFontSize (font=0x552230, size=0x2519b68) returned 0x0 [0025.647] ReleaseDC (hWnd=0x0, hDC=0x601084f) returned 1 [0025.647] GetDC (hWnd=0x0) returned 0x601084f [0025.648] GdipCreateFromHDC (hdc=0x601084f, graphics=0x1eed40) returned 0x0 [0025.649] GdipGetDpiY (graphics=0x456fcf0, dpi=0x2519c70) returned 0x0 [0025.649] GdipGetFontHeight (font=0x552230, graphics=0x456fcf0, height=0x1eed38) returned 0x0 [0025.649] GdipGetEmHeight (family=0x55f6b8, style=0, EmHeight=0x1eed40) returned 0x0 [0025.649] GdipGetLineSpacing (family=0x55f6b8, style=0, LineSpacing=0x1eed40) returned 0x0 [0025.649] GdipDeleteGraphics (graphics=0x456fcf0) returned 0x0 [0025.649] ReleaseDC (hWnd=0x0, hDC=0x601084f) returned 1 [0025.650] GdipCreateFont (fontFamily=0x55f6b8, emSize=0x41040000, style=0, unit=0x3, font=0x2519c30) returned 0x0 [0025.650] GdipGetFontSize (font=0x45c2940, size=0x2519c34) returned 0x0 [0025.650] GdipDeleteFont (font=0x552230) returned 0x0 [0025.651] GetDC (hWnd=0x0) returned 0x601084f [0025.651] GdipCreateFromHDC (hdc=0x601084f, graphics=0x1eeda4) returned 0x0 [0025.651] GdipGetFontHeight (font=0x45c2940, graphics=0x456fcf0, height=0x1eed9c) returned 0x0 [0025.651] GdipDeleteGraphics (graphics=0x456fcf0) returned 0x0 [0025.651] ReleaseDC (hWnd=0x0, hDC=0x601084f) returned 1 [0025.652] GetSystemMetrics (nIndex=5) returned 1 [0025.652] GetSystemMetrics (nIndex=6) returned 1 [0025.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.653] AdjustWindowRectEx (in: lpRect=0x1eeecc, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1eeecc) returned 1 [0025.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.653] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.654] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.654] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.654] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.654] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.654] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.654] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.654] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.654] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.655] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.655] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.655] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.655] AdjustWindowRectEx (in: lpRect=0x1eeed0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed0) returned 1 [0025.656] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.656] AdjustWindowRectEx (in: lpRect=0x1eeed4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed4) returned 1 [0025.656] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.656] AdjustWindowRectEx (in: lpRect=0x1eeed4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed4) returned 1 [0025.657] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.657] AdjustWindowRectEx (in: lpRect=0x1eeed4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed4) returned 1 [0025.657] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.657] AdjustWindowRectEx (in: lpRect=0x1eeed4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed4) returned 1 [0025.657] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.657] AdjustWindowRectEx (in: lpRect=0x1eeed4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed4) returned 1 [0025.657] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.657] AdjustWindowRectEx (in: lpRect=0x1eeed4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeed4) returned 1 [0025.661] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.661] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251b9f0) returned 0x0 [0025.680] GdipGetFontSize (font=0x552230, size=0x251b9f4) returned 0x0 [0025.684] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.684] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.696] GetUserObjectInformationA (in: hObj=0x5c, nIndex=1, pvInfo=0x251c15c, nLength=0xc, lpnLengthNeeded=0x1eed0c | out: pvInfo=0x251c15c, lpnLengthNeeded=0x1eed0c) returned 1 [0025.698] SetConsoleCtrlHandler (HandlerRoutine=0x4ba085e, Add=1) returned 1 [0025.699] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0025.699] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0025.700] GetClassInfoW (in: hInstance=0x1090000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x251c1c0 | out: lpWndClass=0x251c1c0) returned 0 [0025.702] CoTaskMemAlloc (cb=0x58) returned 0x36fd70 [0025.702] RegisterClassW (lpWndClass=0x1eec5c) returned 0xc138 [0025.702] CoTaskMemFree (pv=0x36fd70) [0025.703] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x301bc [0025.704] NtdllDefWindowProc_W () returned 0x0 [0025.704] NtdllDefWindowProc_W () returned 0x0 [0025.704] NtdllDefWindowProc_W () returned 0x0 [0025.704] NtdllDefWindowProc_W () returned 0x0 [0025.709] GetSysColor (nIndex=10) returned 0xb4b4b4 [0025.709] GetSysColor (nIndex=2) returned 0xd1b499 [0025.709] GetSysColor (nIndex=9) returned 0x0 [0025.709] GetSysColor (nIndex=12) returned 0xababab [0025.709] GetSysColor (nIndex=15) returned 0xf0f0f0 [0025.709] GetSysColor (nIndex=20) returned 0xffffff [0025.709] GetSysColor (nIndex=16) returned 0xa0a0a0 [0025.709] GetSysColor (nIndex=15) returned 0xf0f0f0 [0025.709] GetSysColor (nIndex=16) returned 0xa0a0a0 [0025.709] GetSysColor (nIndex=21) returned 0x696969 [0025.709] GetSysColor (nIndex=22) returned 0xe3e3e3 [0025.709] GetSysColor (nIndex=20) returned 0xffffff [0025.709] GetSysColor (nIndex=18) returned 0x0 [0025.709] GetSysColor (nIndex=1) returned 0x0 [0025.709] GetSysColor (nIndex=27) returned 0xead1b9 [0025.709] GetSysColor (nIndex=28) returned 0xf2e4d7 [0025.709] GetSysColor (nIndex=17) returned 0x6d6d6d [0025.709] GetSysColor (nIndex=13) returned 0xff9933 [0025.709] GetSysColor (nIndex=14) returned 0xffffff [0025.709] GetSysColor (nIndex=26) returned 0xcc6600 [0025.709] GetSysColor (nIndex=11) returned 0xfcf7f4 [0025.709] GetSysColor (nIndex=3) returned 0xdbcdbf [0025.709] GetSysColor (nIndex=19) returned 0x544e43 [0025.710] GetSysColor (nIndex=24) returned 0xe1ffff [0025.710] GetSysColor (nIndex=23) returned 0x0 [0025.710] GetSysColor (nIndex=4) returned 0xf0f0f0 [0025.710] GetSysColor (nIndex=30) returned 0xf0f0f0 [0025.710] GetSysColor (nIndex=29) returned 0xff9933 [0025.710] GetSysColor (nIndex=7) returned 0x0 [0025.710] GetSysColor (nIndex=0) returned 0xc8c8c8 [0025.710] GetSysColor (nIndex=5) returned 0xffffff [0025.710] GetSysColor (nIndex=6) returned 0x646464 [0025.710] GetSysColor (nIndex=8) returned 0x0 [0025.710] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.710] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.710] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.710] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251c68c) returned 0x0 [0025.710] GdipGetFontSize (font=0x452e978, size=0x251c690) returned 0x0 [0025.711] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.711] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.711] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.711] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.711] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.711] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251c83c) returned 0x0 [0025.711] GdipGetFontSize (font=0x452e9a0, size=0x251c840) returned 0x0 [0025.711] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.711] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.711] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.711] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.711] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.711] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251c9ec) returned 0x0 [0025.711] GdipGetFontSize (font=0x4570000, size=0x251c9f0) returned 0x0 [0025.712] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.712] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.712] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.712] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.712] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.712] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0025.712] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.712] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0025.713] GetSystemMetrics (nIndex=5) returned 1 [0025.713] GetSystemMetrics (nIndex=6) returned 1 [0025.713] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.713] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1eee30) returned 1 [0025.713] GetSystemMetrics (nIndex=5) returned 1 [0025.713] GetSystemMetrics (nIndex=6) returned 1 [0025.714] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.714] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1eee30) returned 1 [0025.714] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.714] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251ccb8) returned 0x0 [0025.714] GdipGetFontSize (font=0x4570028, size=0x251ccbc) returned 0x0 [0025.714] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.714] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.714] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.714] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.714] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.715] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251ce68) returned 0x0 [0025.715] GdipGetFontSize (font=0x4570050, size=0x251ce6c) returned 0x0 [0025.715] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.715] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.715] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.715] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.715] GdipCreateFontFamilyFromName (name="Segoe UI", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.715] GdipCreateFont (fontFamily=0x452cdf0, emSize=0x41340000, style=0, unit=0x3, font=0x251d018) returned 0x0 [0025.725] GdipGetFontSize (font=0x45f83d0, size=0x251d01c) returned 0x0 [0025.725] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.725] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.726] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.726] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.726] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.726] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251d1c8) returned 0x0 [0025.726] GdipGetFontSize (font=0x5022848, size=0x251d1cc) returned 0x0 [0025.726] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.726] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.726] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.726] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.726] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.726] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251d378) returned 0x0 [0025.726] GdipGetFontSize (font=0x5022870, size=0x251d37c) returned 0x0 [0025.726] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.726] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.727] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.727] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.727] GdipCreateFontFamilyFromName (name="Segoe UI", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.727] GdipCreateFont (fontFamily=0x452cdf0, emSize=0x41340000, style=0, unit=0x3, font=0x251d528) returned 0x0 [0025.727] GdipGetFontSize (font=0x5022898, size=0x251d52c) returned 0x0 [0025.727] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.727] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.727] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.727] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.727] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.727] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251d6d8) returned 0x0 [0025.727] GdipGetFontSize (font=0x50228c0, size=0x251d6dc) returned 0x0 [0025.727] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.727] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.728] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.728] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.728] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.728] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251d888) returned 0x0 [0025.728] GdipGetFontSize (font=0x50228e8, size=0x251d88c) returned 0x0 [0025.728] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.728] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.728] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.728] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.728] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.728] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251da38) returned 0x0 [0025.728] GdipGetFontSize (font=0x5022910, size=0x251da3c) returned 0x0 [0025.728] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.728] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.729] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.729] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.729] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.729] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251dbe8) returned 0x0 [0025.729] GdipGetFontSize (font=0x5022938, size=0x251dbec) returned 0x0 [0025.729] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.729] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.729] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.729] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.729] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.729] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251dd98) returned 0x0 [0025.729] GdipGetFontSize (font=0x5022960, size=0x251dd9c) returned 0x0 [0025.729] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.729] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.729] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.729] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.730] GdipCreateFontFamilyFromName (name="Microsoft YaHei", fontCollection=0x0, fontFamily=0x1eeeac) returned 0x0 [0025.730] GdipCreateFont (fontFamily=0x55f7a8, emSize=0x41040000, style=0, unit=0x3, font=0x251df48) returned 0x0 [0025.730] GdipGetFontSize (font=0x5022988, size=0x251df4c) returned 0x0 [0025.730] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.730] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.730] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0025.730] AdjustWindowRectEx (in: lpRect=0x1eee30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee30) returned 1 [0025.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c0hen locker.exe.config", nBufferLength=0x105, lpBuffer=0x1ee784, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c0hen locker.exe.config", lpFilePart=0x0) returned 0x3d [0025.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1eec18) returned 1 [0025.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c0hen locker.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c0hen locker.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1eec94 | out: lpFileInformation=0x1eec94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0025.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1eec14) returned 1 [0026.178] GdipLoadImageFromStream (stream=0x4e0030, image=0x1ee910) returned 0x0 [0026.438] GdipImageForceValidation (image=0x455f080) returned 0x0 [0026.444] GdipGetImageType (image=0x455f080, type=0x1ee90c) returned 0x0 [0026.445] GdipGetImageRawFormat (image=0x455f080, format=0x1ee890*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0026.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.449] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.449] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.458] GdipLoadImageFromStream (stream=0x4e0010, image=0x1ee910) returned 0x0 [0026.459] GdipImageForceValidation (image=0x455fc90) returned 0x0 [0026.461] GdipGetImageType (image=0x455fc90, type=0x1ee90c) returned 0x0 [0026.461] GdipGetImageRawFormat (image=0x455fc90, format=0x1ee890*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0026.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.461] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.462] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.473] GdipLoadImageFromStream (stream=0x4efff0, image=0x1ee910) returned 0x0 [0026.474] GdipImageForceValidation (image=0x4560250) returned 0x0 [0026.482] GdipGetImageType (image=0x4560250, type=0x1ee90c) returned 0x0 [0026.483] GdipGetImageRawFormat (image=0x4560250, format=0x1ee890*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0026.483] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.483] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.483] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.483] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.494] GdipLoadImageFromStream (stream=0x4effd0, image=0x1ee910) returned 0x0 [0026.497] GdipImageForceValidation (image=0x4560810) returned 0x0 [0026.501] GdipGetImageType (image=0x4560810, type=0x1ee90c) returned 0x0 [0026.501] GdipGetImageRawFormat (image=0x4560810, format=0x1ee890*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0026.501] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.501] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.501] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.501] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.512] GdipLoadImageFromStream (stream=0x4effb0, image=0x1ee910) returned 0x0 [0026.515] GdipImageForceValidation (image=0x5078df0) returned 0x0 [0026.519] GdipGetImageType (image=0x5078df0, type=0x1ee90c) returned 0x0 [0026.519] GdipGetImageRawFormat (image=0x5078df0, format=0x1ee890*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0026.520] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.520] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.520] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.520] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.534] GdipLoadImageFromStream (stream=0x4eff90, image=0x1ee910) returned 0x0 [0026.535] GdipImageForceValidation (image=0x5079320) returned 0x0 [0026.543] GdipGetImageType (image=0x5079320, type=0x1ee90c) returned 0x0 [0026.543] GdipGetImageRawFormat (image=0x5079320, format=0x1ee890*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0026.543] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.543] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.543] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.544] AdjustWindowRectEx (in: lpRect=0x1eee5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eee5c) returned 1 [0026.548] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.548] AdjustWindowRectEx (in: lpRect=0x1eee90, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1eee90) returned 1 [0026.548] GetSystemMetrics (nIndex=59) returned 1460 [0026.548] GetSystemMetrics (nIndex=60) returned 920 [0026.548] GetSystemMetrics (nIndex=34) returned 132 [0026.548] GetSystemMetrics (nIndex=35) returned 38 [0026.549] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.549] AdjustWindowRectEx (in: lpRect=0x1eed90, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1eed90) returned 1 [0026.549] GetCurrentThreadId () returned 0x950 [0026.549] GetCurrentThreadId () returned 0x950 [0026.550] GetCurrentThreadId () returned 0x950 [0026.550] GetCurrentThreadId () returned 0x950 [0026.551] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.551] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.556] GdipGetFamilyName (in: family=0x55f7a8, name=0x1eeb7c, language=0x409 | out: name="Microsoft YaHei") returned 0x0 [0026.557] CreateCompatibleDC (hdc=0x0) returned 0x17010869 [0026.557] GetCurrentObject (hdc=0x17010869, type=0x1) returned 0x1b00017 [0026.557] GetCurrentObject (hdc=0x17010869, type=0x2) returned 0x1900010 [0026.557] GetCurrentObject (hdc=0x17010869, type=0x7) returned 0x185000f [0026.557] GetCurrentObject (hdc=0x17010869, type=0x6) returned 0x18a002e [0026.559] SaveDC (hdc=0x17010869) returned 1 [0026.559] GetDeviceCaps (hdc=0x17010869, index=90) returned 96 [0026.560] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0026.560] CreateFontIndirectW (lplf=0x390ae8) returned 0x290a01d6 [0026.560] CoTaskMemFree (pv=0x390ae8) [0026.560] GetObjectW (in: h=0x290a01d6, c=92, pv=0x1eeb54 | out: pv=0x1eeb54) returned 92 [0026.561] GetCurrentObject (hdc=0x17010869, type=0x6) returned 0x18a002e [0026.561] GetObjectW (in: h=0x18a002e, c=92, pv=0x1eeaac | out: pv=0x1eeaac) returned 92 [0026.561] SelectObject (hdc=0x17010869, h=0x290a01d6) returned 0x18a002e [0026.561] GetMapMode (hdc=0x17010869) returned 1 [0026.561] GetTextMetricsW (in: hdc=0x17010869, lptm=0x1eeb60 | out: lptm=0x1eeb60) returned 1 [0026.565] DrawTextExW (in: hdc=0x17010869, lpchText="BTC wallet:", cchText=11, lprc=0x1eec74, format=0x2400, lpdtp=0x255fa20 | out: lpchText="BTC wallet:", lprc=0x1eec74) returned 16 [0026.590] GetCurrentThreadId () returned 0x950 [0026.590] GetCurrentThreadId () returned 0x950 [0026.590] GetCurrentThreadId () returned 0x950 [0026.590] GetCurrentThreadId () returned 0x950 [0026.590] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.590] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.591] DrawTextExW (in: hdc=0x17010869, lpchText="Or:", cchText=3, lprc=0x1eec74, format=0x2400, lpdtp=0x255fb58 | out: lpchText="Or:", lprc=0x1eec74) returned 16 [0026.591] GetCurrentThreadId () returned 0x950 [0026.591] GetCurrentThreadId () returned 0x950 [0026.591] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.591] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.591] DrawTextExW (in: hdc=0x17010869, lpchText="18Fh68NJrMZCiTqq1VoWaQsSb8pxDjEw6N", cchText=34, lprc=0x1eec74, format=0x2400, lpdtp=0x255fc60 | out: lpchText="18Fh68NJrMZCiTqq1VoWaQsSb8pxDjEw6N", lprc=0x1eec74) returned 16 [0026.591] GetCurrentThreadId () returned 0x950 [0026.591] GetCurrentThreadId () returned 0x950 [0026.591] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.591] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.591] DrawTextExW (in: hdc=0x17010869, lpchText="Donate 0.15 BTC to this wallet", cchText=30, lprc=0x1eec74, format=0x2400, lpdtp=0x255fd3c | out: lpchText="Donate 0.15 BTC to this wallet", lprc=0x1eec74) returned 16 [0026.591] GetCurrentThreadId () returned 0x950 [0026.591] GetCurrentThreadId () returned 0x950 [0026.591] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.592] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.592] DrawTextExW (in: hdc=0x17010869, lpchText="WARNING: If you turn your PC off you will not get your files back!!!", cchText=68, lprc=0x1eec74, format=0x2400, lpdtp=0x255fe18 | out: lpchText="WARNING: If you turn your PC off you will not get your files back!!!", lprc=0x1eec74) returned 16 [0026.592] GetCurrentThreadId () returned 0x950 [0026.592] GetCurrentThreadId () returned 0x950 [0026.592] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.592] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.592] DrawTextExW (in: hdc=0x17010869, lpchText="have been infected", cchText=18, lprc=0x1eec74, format=0x2400, lpdtp=0x255fef4 | out: lpchText="have been infected", lprc=0x1eec74) returned 16 [0026.592] GetCurrentThreadId () returned 0x950 [0026.592] GetCurrentThreadId () returned 0x950 [0026.592] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.592] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.592] GdipGetFamilyName (in: family=0x452cdf0, name=0x1eeb7c, language=0x409 | out: name="Segoe UI") returned 0x0 [0026.592] GetDeviceCaps (hdc=0x17010869, index=90) returned 96 [0026.592] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0026.592] CreateFontIndirectW (lplf=0x390ae8) returned 0x400a085c [0026.592] CoTaskMemFree (pv=0x390ae8) [0026.594] GetObjectW (in: h=0x400a085c, c=92, pv=0x1eeb54 | out: pv=0x1eeb54) returned 92 [0026.594] SelectObject (hdc=0x17010869, h=0x400a085c) returned 0x290a01d6 [0026.594] GetMapMode (hdc=0x17010869) returned 1 [0026.594] GetTextMetricsW (in: hdc=0x17010869, lptm=0x1eeb60 | out: lptm=0x1eeb60) returned 1 [0026.594] DrawTextExW (in: hdc=0x17010869, lpchText="infected your PC", cchText=16, lprc=0x1eec74, format=0x2400, lpdtp=0x2560198 | out: lpchText="infected your PC", lprc=0x1eec74) returned 20 [0026.602] GetCurrentThreadId () returned 0x950 [0026.602] GetCurrentThreadId () returned 0x950 [0026.603] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.603] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.603] SelectObject (hdc=0x17010869, h=0x290a01d6) returned 0x400a085c [0026.603] DrawTextExW (in: hdc=0x17010869, lpchText="to get your files back.", cchText=23, lprc=0x1eec74, format=0x2400, lpdtp=0x2560290 | out: lpchText="to get your files back.", lprc=0x1eec74) returned 16 [0026.603] GetCurrentThreadId () returned 0x950 [0026.603] GetCurrentThreadId () returned 0x950 [0026.603] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.603] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.603] DrawTextExW (in: hdc=0x17010869, lpchText="Your computer has been infected. You must do as instructed", cchText=58, lprc=0x1eec74, format=0x2400, lpdtp=0x2560388 | out: lpchText="Your computer has been infected. You must do as instructed", lprc=0x1eec74) returned 16 [0026.603] GetCurrentThreadId () returned 0x950 [0026.603] GetCurrentThreadId () returned 0x950 [0026.603] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.603] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.603] SelectObject (hdc=0x17010869, h=0x400a085c) returned 0x290a01d6 [0026.603] DrawTextExW (in: hdc=0x17010869, lpchText="c0hen locker has", cchText=16, lprc=0x1eec74, format=0x2400, lpdtp=0x2560480 | out: lpchText="c0hen locker has", lprc=0x1eec74) returned 20 [0026.604] GetCurrentThreadId () returned 0x950 [0026.604] GetCurrentThreadId () returned 0x950 [0026.604] GetCurrentThreadId () returned 0x950 [0026.604] GetCurrentThreadId () returned 0x950 [0026.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.604] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.604] SelectObject (hdc=0x17010869, h=0x290a01d6) returned 0x400a085c [0026.604] DrawTextExW (in: hdc=0x17010869, lpchText="discord.com/download", cchText=20, lprc=0x1eec74, format=0x2400, lpdtp=0x25605c4 | out: lpchText="discord.com/download", lprc=0x1eec74) returned 16 [0026.604] GetCurrentThreadId () returned 0x950 [0026.604] GetCurrentThreadId () returned 0x950 [0026.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.604] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.604] DrawTextExW (in: hdc=0x17010869, lpchText="Download discord and add c0hen#7722 for decryption key", cchText=54, lprc=0x1eec74, format=0x2400, lpdtp=0x25606bc | out: lpchText="Download discord and add c0hen#7722 for decryption key", lprc=0x1eec74) returned 16 [0026.604] GetCurrentThreadId () returned 0x950 [0026.604] GetCurrentThreadId () returned 0x950 [0026.605] GetCurrentThreadId () returned 0x950 [0026.605] GetCurrentThreadId () returned 0x950 [0026.605] GetCurrentThreadId () returned 0x950 [0026.605] GetCurrentThreadId () returned 0x950 [0026.605] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.605] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.605] DrawTextExW (in: hdc=0x17010869, lpchText="Whats happening?", cchText=16, lprc=0x1eec74, format=0x2400, lpdtp=0x25608bc | out: lpchText="Whats happening?", lprc=0x1eec74) returned 16 [0026.605] GetCurrentThreadId () returned 0x950 [0026.605] GetCurrentThreadId () returned 0x950 [0026.605] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.605] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.605] DrawTextExW (in: hdc=0x17010869, lpchText="All devices on your network", cchText=27, lprc=0x1eec74, format=0x2400, lpdtp=0x2560998 | out: lpchText="All devices on your network", lprc=0x1eec74) returned 16 [0026.605] GetCurrentThreadId () returned 0x950 [0026.605] GetCurrentThreadId () returned 0x950 [0026.605] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.605] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.605] DrawTextExW (in: hdc=0x17010869, lpchText="encrypted with ransomware", cchText=25, lprc=0x1eec74, format=0x2400, lpdtp=0x2560a74 | out: lpchText="encrypted with ransomware", lprc=0x1eec74) returned 16 [0026.606] GetCurrentThreadId () returned 0x950 [0026.606] GetCurrentThreadId () returned 0x950 [0026.606] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.606] AdjustWindowRectEx (in: lpRect=0x1eec8c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eec8c) returned 1 [0026.606] DrawTextExW (in: hdc=0x17010869, lpchText="All of your computers files have been ", cchText=38, lprc=0x1eec74, format=0x2400, lpdtp=0x2560b50 | out: lpchText="All of your computers files have been ", lprc=0x1eec74) returned 16 [0026.606] GetCurrentThreadId () returned 0x950 [0026.606] GetCurrentThreadId () returned 0x950 [0026.606] GetCurrentThreadId () returned 0x950 [0026.606] GetCurrentThreadId () returned 0x950 [0026.606] GetCurrentThreadId () returned 0x950 [0026.606] GetCurrentThreadId () returned 0x950 [0026.683] GetSystemMetrics (nIndex=11) returned 32 [0026.683] GetSystemMetrics (nIndex=12) returned 32 [0026.683] GetDC (hWnd=0x0) returned 0x601084f [0026.684] GetDeviceCaps (hdc=0x601084f, index=12) returned 32 [0026.684] GetDeviceCaps (hdc=0x601084f, index=14) returned 1 [0026.684] ReleaseDC (hWnd=0x0, hDC=0x601084f) returned 1 [0026.684] CreateIconFromResourceEx (presbits=0x2568cdc, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x8016d [0026.685] CreateCompatibleDC (hdc=0x0) returned 0x19010865 [0026.686] GetDC (hWnd=0x0) returned 0x601084f [0026.686] GdipCreateFromHDC (hdc=0x601084f, graphics=0x1eeccc) returned 0x0 [0026.686] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0026.686] GdipGetLogFontW (font=0x45c2940, graphics=0x507a0e0, logfontW=0x390ae8) returned 0x0 [0026.686] CoTaskMemFree (pv=0x390ae8) [0026.686] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0026.686] CoTaskMemFree (pv=0x390ae8) [0026.687] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0026.687] CoTaskMemFree (pv=0x390ae8) [0026.687] GdipDeleteGraphics (graphics=0x507a0e0) returned 0x0 [0026.687] ReleaseDC (hWnd=0x0, hDC=0x601084f) returned 1 [0026.687] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0026.687] CreateFontIndirectW (lplf=0x390ae8) returned 0xe20a0830 [0026.687] CoTaskMemFree (pv=0x390ae8) [0026.687] SelectObject (hdc=0x19010865, h=0xe20a0830) returned 0x18a002e [0026.688] GetTextMetricsW (in: hdc=0x19010865, lptm=0x1eedd8 | out: lptm=0x1eedd8) returned 1 [0026.688] GetTextExtentPoint32W (in: hdc=0x19010865, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x256a960 | out: psizl=0x256a960) returned 1 [0026.688] SelectObject (hdc=0x19010865, h=0x18a002e) returned 0xe20a0830 [0026.689] DeleteDC (hdc=0x19010865) returned 1 [0026.690] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.690] AdjustWindowRectEx (in: lpRect=0x1eeb44, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1eeb44) returned 1 [0026.690] GetCursorPos (in: lpPoint=0x256a980 | out: lpPoint=0x256a980*(x=812, y=452)) returned 1 [0026.691] GetSystemMetrics (nIndex=80) returned 1 [0026.693] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1eea20 | out: lpmi=0x1eea20) returned 1 [0026.694] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1b010865 [0026.694] GetDeviceCaps (hdc=0x1b010865, index=12) returned 32 [0026.694] GetDeviceCaps (hdc=0x1b010865, index=14) returned 1 [0026.694] DeleteDC (hdc=0x1b010865) returned 1 [0026.694] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1eea74 | out: lpmi=0x1eea74) returned 1 [0026.694] AdjustWindowRectEx (in: lpRect=0x1eed64, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1eed64) returned 1 [0026.694] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.694] AdjustWindowRectEx (in: lpRect=0x1eeabc, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1eeabc) returned 1 [0026.694] GetCursorPos (in: lpPoint=0x256acb4 | out: lpPoint=0x256acb4*(x=812, y=452)) returned 1 [0026.694] MonitorFromPoint (pt=0x32a, dwFlags=0x1c1) returned 0x10001 [0026.695] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ee998 | out: lpmi=0x1ee998) returned 1 [0026.695] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1c010865 [0026.695] GetDeviceCaps (hdc=0x1c010865, index=12) returned 32 [0026.695] GetDeviceCaps (hdc=0x1c010865, index=14) returned 1 [0026.695] DeleteDC (hdc=0x1c010865) returned 1 [0026.695] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ee9ec | out: lpmi=0x1ee9ec) returned 1 [0026.695] AdjustWindowRectEx (in: lpRect=0x1eeb9c, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1eeb9c) returned 1 [0026.695] GetSystemMetrics (nIndex=34) returned 132 [0026.695] GetSystemMetrics (nIndex=35) returned 38 [0026.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.695] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.695] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.696] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.696] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.696] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.696] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.696] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.696] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.697] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.697] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.697] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.697] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.697] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.697] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.697] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.698] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.698] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.698] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.698] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.698] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.698] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.699] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.699] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.699] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.699] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.699] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.699] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.699] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.700] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.700] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.700] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.700] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.700] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.700] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.700] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.701] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.701] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.701] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.701] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.701] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.701] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.701] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.702] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1eed5c) returned 1 [0026.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.702] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1eebc0) returned 1 [0026.702] GetSystemMetrics (nIndex=5) returned 1 [0026.702] GetSystemMetrics (nIndex=6) returned 1 [0026.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.702] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.702] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.702] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.702] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.703] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.703] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.703] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.703] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.703] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.703] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.703] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.704] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.704] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.704] AdjustWindowRectEx (in: lpRect=0x1eea1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eea1c) returned 1 [0026.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.704] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.704] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.704] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.704] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.705] AdjustWindowRectEx (in: lpRect=0x1eed5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eed5c) returned 1 [0026.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.705] AdjustWindowRectEx (in: lpRect=0x1eebc0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eebc0) returned 1 [0026.709] GetCurrentActCtx (in: lphActCtx=0x1ef1dc | out: lphActCtx=0x1ef1dc*=0x0) returned 1 [0026.709] ActivateActCtx (in: hActCtx=0x384454, lpCookie=0x1ef1ec | out: hActCtx=0x384454, lpCookie=0x1ef1ec) returned 1 [0026.709] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0026.709] AdjustWindowRectEx (in: lpRect=0x1ef140, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ef140) returned 1 [0026.709] GetCursorPos (in: lpPoint=0x256b588 | out: lpPoint=0x256b588*(x=812, y=452)) returned 1 [0026.709] MonitorFromPoint (pt=0x32c, dwFlags=0x1c4) returned 0x10001 [0026.709] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ef01c | out: lpmi=0x1ef01c) returned 1 [0026.710] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1d010865 [0026.710] GetDeviceCaps (hdc=0x1d010865, index=12) returned 32 [0026.710] GetDeviceCaps (hdc=0x1d010865, index=14) returned 1 [0026.710] DeleteDC (hdc=0x1d010865) returned 1 [0026.710] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ef070 | out: lpmi=0x1ef070) returned 1 [0026.710] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0026.710] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName="c0hen@admin", dwStyle=0x2cf0000, X=317, Y=147, nWidth=806, nHeight=565, hWndParent=0x0, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x301ba [0026.710] SetWindowLongW (hWnd=0x301ba, nIndex=-4, dwNewLong=1997940189) returned 79300582 [0026.710] GetWindowLongW (hWnd=0x301ba, nIndex=-4) returned 1997940189 [0026.710] SetWindowLongW (hWnd=0x301ba, nIndex=-4, dwNewLong=79301470) returned 1997940189 [0026.710] GetWindowLongW (hWnd=0x301ba, nIndex=-4) returned 79301470 [0026.710] GetWindowLongW (hWnd=0x301ba, nIndex=-16) returned 114229248 [0026.711] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x81, wParam=0x0, lParam=0x1eec70) returned 0x1 [0026.711] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x83, wParam=0x0, lParam=0x1eec5c) returned 0x0 [0026.813] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x1, wParam=0x0, lParam=0x1eec70) returned 0x0 [0026.813] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee9a8 | out: lpRect=0x1ee9a8) returned 1 [0026.813] GetWindowRect (in: hWnd=0x301ba, lpRect=0x1ee9a8 | out: lpRect=0x1ee9a8) returned 1 [0026.813] SetWindowTextW (hWnd=0x301ba, lpString="c0hen@admin") returned 1 [0026.813] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xc, wParam=0x0, lParam=0x2518730) returned 0x1 [0026.814] GetStartupInfoW (in: lpStartupInfo=0x256b8c4 | out: lpStartupInfo=0x256b8c4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c0hen locker.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0026.815] GetParent (hWnd=0x301ba) returned 0x0 [0026.815] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1c680002) returned 1 [0026.815] GetStockObject (i=5) returned 0x1900015 [0026.815] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0026.815] CoTaskMemAlloc (cb=0x5c) returned 0x390ae8 [0026.815] RegisterClassW (lpWndClass=0x1ef0bc) returned 0xc137 [0026.816] CoTaskMemFree (pv=0x390ae8) [0026.816] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0026.816] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x40122 [0026.816] SetWindowLongW (hWnd=0x40122, nIndex=-4, dwNewLong=1997940189) returned 79301510 [0026.816] GetWindowLongW (hWnd=0x40122, nIndex=-4) returned 1997940189 [0026.816] SetWindowLongW (hWnd=0x40122, nIndex=-4, dwNewLong=79301550) returned 1997940189 [0026.816] GetWindowLongW (hWnd=0x40122, nIndex=-4) returned 79301550 [0026.816] GetWindowLongW (hWnd=0x40122, nIndex=-16) returned 79691776 [0026.816] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x24, wParam=0x0, lParam=0x1eeca4) returned 0x0 [0026.816] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x81, wParam=0x0, lParam=0x1eec98) returned 0x1 [0026.816] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x83, wParam=0x0, lParam=0x1eec84) returned 0x0 [0026.817] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x1, wParam=0x0, lParam=0x1eec98) returned 0x0 [0026.817] SetWindowLongW (hWnd=0x301ba, nIndex=-8, dwNewLong=262434) returned 0 [0026.818] GetSystemMetrics (nIndex=49) returned 16 [0026.818] GetSystemMetrics (nIndex=50) returned 16 [0026.818] CreateIconFromResourceEx (presbits=0x256bc64, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xb0117 [0026.818] SendMessageW (hWnd=0x301ba, Msg=0x80, wParam=0x0, lParam=0xb0117) returned 0x0 [0026.818] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x80, wParam=0x0, lParam=0xb0117) returned 0x0 [0026.819] SendMessageW (hWnd=0x301ba, Msg=0x80, wParam=0x1, lParam=0x8016d) returned 0x0 [0026.819] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x80, wParam=0x1, lParam=0x8016d) returned 0x0 [0026.819] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xb0117 [0026.821] GetSystemMenu (hWnd=0x301ba, bRevert=0) returned 0x401cb [0026.822] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ef1ec | out: lpwndpl=0x1ef1ec) returned 1 [0026.822] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0026.822] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0026.822] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0026.823] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0026.823] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0026.823] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ef230 | out: lpRect=0x1ef230) returned 1 [0026.823] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ef190 | out: lpRect=0x1ef190) returned 1 [0026.823] GetWindowRect (in: hWnd=0x301ba, lpRect=0x1ef190 | out: lpRect=0x1ef190) returned 1 [0026.823] SetWindowLongW (hWnd=0x301ba, nIndex=-8, dwNewLong=262434) returned 262434 [0026.823] SendMessageW (hWnd=0x40122, Msg=0x80, wParam=0x1, lParam=0x8016d) returned 0x0 [0026.823] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x80, wParam=0x1, lParam=0x8016d) returned 0x0 [0026.824] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0xd, wParam=0x104, lParam=0xddc658) returned 0x0 [0026.824] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0xd, wParam=0x104, lParam=0xddc670) returned 0x0 [0026.824] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.824] GetWindowLongW (hWnd=0x301ba, nIndex=-16) returned 114229248 [0026.824] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0026.824] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0026.825] GetSystemMetrics (nIndex=42) returned 0 [0026.825] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ef128, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0026.825] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ef128) returned 0xb [0026.825] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0026.825] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0026.825] GetSystemMetrics (nIndex=42) returned 0 [0026.825] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ef128, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0026.825] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ef128) returned 0xb [0026.825] GetCursorPos (in: lpPoint=0x256c218 | out: lpPoint=0x256c218*(x=812, y=452)) returned 1 [0026.826] MonitorFromPoint (pt=0x32e, dwFlags=0x1c6) returned 0x10001 [0026.826] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ef05c | out: lpmi=0x1ef05c) returned 1 [0026.826] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xda010826 [0026.826] GetDeviceCaps (hdc=0xda010826, index=12) returned 32 [0026.826] GetDeviceCaps (hdc=0xda010826, index=14) returned 1 [0026.826] DeleteDC (hdc=0xda010826) returned 1 [0026.826] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ef0b0 | out: lpmi=0x1ef0b0) returned 1 [0026.826] GetWindowLongW (hWnd=0x301ba, nIndex=-16) returned 114229248 [0026.826] GetWindowLongW (hWnd=0x301ba, nIndex=-20) returned 65792 [0026.826] SetWindowLongW (hWnd=0x301ba, nIndex=-16, dwNewLong=47120384) returned 114229248 [0026.826] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7c, wParam=0xfffffff0, lParam=0x1ef184) returned 0x0 [0026.826] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7d, wParam=0xfffffff0, lParam=0x1ef184) returned 0x0 [0026.826] SetWindowLongW (hWnd=0x301ba, nIndex=-20, dwNewLong=65536) returned 65792 [0026.827] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7c, wParam=0xffffffec, lParam=0x1ef184) returned 0x0 [0026.827] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7d, wParam=0xffffffec, lParam=0x1ef184) returned 0x0 [0026.827] SetWindowPos (hWnd=0x301ba, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0026.827] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x46, wParam=0x0, lParam=0x1ef1a4) returned 0x0 [0026.827] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x83, wParam=0x1, lParam=0x1ef17c) returned 0x0 [0026.828] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1eef54 | out: lpwndpl=0x1eef54) returned 1 [0026.828] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x47, wParam=0x0, lParam=0x1ef1a4) returned 0x0 [0026.828] GetClientRect (in: hWnd=0x301ba, lpRect=0x1eef04 | out: lpRect=0x1eef04) returned 1 [0026.828] GetWindowRect (in: hWnd=0x301ba, lpRect=0x1eef04 | out: lpRect=0x1eef04) returned 1 [0026.829] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x83, wParam=0x1, lParam=0x1eed88) returned 0x0 [0026.829] RedrawWindow (hWnd=0x301ba, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0026.829] GetSystemMenu (hWnd=0x301ba, bRevert=0) returned 0x401cb [0026.829] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ef1dc | out: lpwndpl=0x1ef1dc) returned 1 [0026.829] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0026.829] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0026.829] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0026.829] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0026.829] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0026.829] GetWindowLongW (hWnd=0x301ba, nIndex=-20) returned 65792 [0026.829] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.830] GetWindowLongW (hWnd=0x301ba, nIndex=-16) returned 114229248 [0026.830] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0026.830] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0026.830] GetSystemMetrics (nIndex=42) returned 0 [0026.830] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ef1a8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0026.830] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ef1a8) returned 0xb [0026.830] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0026.830] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0026.830] GetSystemMetrics (nIndex=42) returned 0 [0026.830] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ef1a8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0026.830] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ef1a8) returned 0xb [0026.830] GetCursorPos (in: lpPoint=0x256c5c4 | out: lpPoint=0x256c5c4*(x=812, y=452)) returned 1 [0026.830] MonitorFromPoint (pt=0x29, dwFlags=0x7d) returned 0x10001 [0026.830] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ef0dc | out: lpmi=0x1ef0dc) returned 1 [0026.830] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x23010255 [0026.830] GetDeviceCaps (hdc=0x23010255, index=12) returned 32 [0026.830] GetDeviceCaps (hdc=0x23010255, index=14) returned 1 [0026.830] DeleteDC (hdc=0x23010255) returned 1 [0026.830] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ef130 | out: lpmi=0x1ef130) returned 1 [0026.830] SetWindowLongW (hWnd=0x301ba, nIndex=-20, dwNewLong=65536) returned 65792 [0026.830] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7c, wParam=0xffffffec, lParam=0x1ef200) returned 0x0 [0026.831] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7d, wParam=0xffffffec, lParam=0x1ef200) returned 0x0 [0026.831] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e80000 [0026.831] GetWindowLongW (hWnd=0x301ba, nIndex=-16) returned 114229248 [0026.831] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0026.831] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0026.831] GetSystemMetrics (nIndex=42) returned 0 [0026.831] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ef1c4, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0026.831] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ef1c4) returned 0xb [0026.831] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0026.831] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0026.831] GetSystemMetrics (nIndex=42) returned 0 [0026.831] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ef1c4, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0026.831] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ef1c4) returned 0xb [0026.831] GetCursorPos (in: lpPoint=0x256c958 | out: lpPoint=0x256c958*(x=812, y=452)) returned 1 [0026.831] MonitorFromPoint (pt=0x32c, dwFlags=0x1c4) returned 0x10001 [0026.831] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ef0f8 | out: lpmi=0x1ef0f8) returned 1 [0026.832] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x25010255 [0026.832] GetDeviceCaps (hdc=0x25010255, index=12) returned 32 [0026.832] GetDeviceCaps (hdc=0x25010255, index=14) returned 1 [0026.832] DeleteDC (hdc=0x25010255) returned 1 [0026.832] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ef14c | out: lpmi=0x1ef14c) returned 1 [0026.832] GetWindowLongW (hWnd=0x301ba, nIndex=-16) returned 114229248 [0026.832] GetWindowLongW (hWnd=0x301ba, nIndex=-20) returned 65792 [0026.832] SetWindowLongW (hWnd=0x301ba, nIndex=-16, dwNewLong=46596096) returned 114229248 [0026.832] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7c, wParam=0xfffffff0, lParam=0x1ef220) returned 0x0 [0026.832] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7d, wParam=0xfffffff0, lParam=0x1ef220) returned 0x0 [0026.832] SetWindowLongW (hWnd=0x301ba, nIndex=-20, dwNewLong=65536) returned 65792 [0026.832] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7c, wParam=0xffffffec, lParam=0x1ef220) returned 0x0 [0026.832] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x7d, wParam=0xffffffec, lParam=0x1ef220) returned 0x0 [0026.833] SetWindowPos (hWnd=0x301ba, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0026.833] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x46, wParam=0x0, lParam=0x1ef240) returned 0x0 [0026.833] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x83, wParam=0x1, lParam=0x1ef218) returned 0x0 [0026.833] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1eeff0 | out: lpwndpl=0x1eeff0) returned 1 [0026.833] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x47, wParam=0x0, lParam=0x1ef240) returned 0x0 [0026.833] GetClientRect (in: hWnd=0x301ba, lpRect=0x1eefa0 | out: lpRect=0x1eefa0) returned 1 [0026.833] GetWindowRect (in: hWnd=0x301ba, lpRect=0x1eefa0 | out: lpRect=0x1eefa0) returned 1 [0026.834] RedrawWindow (hWnd=0x301ba, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0026.834] GetSystemMenu (hWnd=0x301ba, bRevert=0) returned 0x401cb [0026.834] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ef278 | out: lpwndpl=0x1ef278) returned 1 [0026.834] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0026.834] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0026.834] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf060, uEnable=0x1) returned 0 [0026.834] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0026.834] EnableMenuItem (hMenu=0x401cb, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0027.675] CoTaskMemAlloc (cb=0x20c) returned 0x3a6658 [0027.675] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6658 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0027.752] CoTaskMemFree (pv=0x3a6658) [0027.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1eec64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0027.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef1cc) returned 1 [0027.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1eecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0027.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1eeca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0027.756] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x1eeef4 | out: lpFindFileData=0x1eeef4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x10e38e40, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10e38e40, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x374450 [0027.757] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x10e38e40, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10e38e40, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0027.758] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa247ff20, ftCreationTime.dwHighDateTime=0x1d4d2e8, ftLastAccessTime.dwLowDateTime=0x2b5b1ac0, ftLastAccessTime.dwHighDateTime=0x1d4d165, ftLastWriteTime.dwLowDateTime=0x2b5b1ac0, ftLastWriteTime.dwHighDateTime=0x1d4d165, nFileSizeHigh=0x0, nFileSizeLow=0x29d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="-rqBbYT.avi", cAlternateFileName="")) returned 1 [0027.758] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c2c930, ftCreationTime.dwHighDateTime=0x1d4cd4e, ftLastAccessTime.dwLowDateTime=0x701c4eb0, ftLastAccessTime.dwHighDateTime=0x1d4cfc4, ftLastWriteTime.dwLowDateTime=0x701c4eb0, ftLastWriteTime.dwHighDateTime=0x1d4cfc4, nFileSizeHigh=0x0, nFileSizeLow=0x6eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="1453QyYoh8YtCbu.wav", cAlternateFileName="1453QY~1.WAV")) returned 1 [0027.758] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700cd420, ftCreationTime.dwHighDateTime=0x1d4cead, ftLastAccessTime.dwLowDateTime=0x8e3bc300, ftLastAccessTime.dwHighDateTime=0x1d4c54a, ftLastWriteTime.dwLowDateTime=0x8e3bc300, ftLastWriteTime.dwHighDateTime=0x1d4c54a, nFileSizeHigh=0x0, nFileSizeLow=0x6be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="18Nu.odp", cAlternateFileName="")) returned 1 [0027.759] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ffdca0, ftCreationTime.dwHighDateTime=0x1d4c5bc, ftLastAccessTime.dwLowDateTime=0x49d5b20, ftLastAccessTime.dwHighDateTime=0x1d4d2b2, ftLastWriteTime.dwLowDateTime=0x49d5b20, ftLastWriteTime.dwHighDateTime=0x1d4d2b2, nFileSizeHigh=0x0, nFileSizeLow=0x6d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="1cCf7mR0wZr_IXMS.gif", cAlternateFileName="1CCF7M~1.GIF")) returned 1 [0027.759] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf7ca7b0, ftCreationTime.dwHighDateTime=0x1d4cf32, ftLastAccessTime.dwLowDateTime=0xaf4bec0, ftLastAccessTime.dwHighDateTime=0x1d4ccac, ftLastWriteTime.dwLowDateTime=0xaf4bec0, ftLastWriteTime.dwHighDateTime=0x1d4ccac, nFileSizeHigh=0x0, nFileSizeLow=0x1623a, dwReserved0=0x0, dwReserved1=0x0, cFileName="6PArC9.mp3", cAlternateFileName="")) returned 1 [0027.759] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa65d8890, ftCreationTime.dwHighDateTime=0x1d4d302, ftLastAccessTime.dwLowDateTime=0xc970d6d0, ftLastAccessTime.dwHighDateTime=0x1d4d202, ftLastWriteTime.dwLowDateTime=0xc970d6d0, ftLastWriteTime.dwHighDateTime=0x1d4d202, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="80o71GHAzaITULQ", cAlternateFileName="80O71G~1")) returned 1 [0027.759] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd87e0, ftCreationTime.dwHighDateTime=0x1d4c942, ftLastAccessTime.dwLowDateTime=0xda98cae0, ftLastAccessTime.dwHighDateTime=0x1d4d530, ftLastWriteTime.dwLowDateTime=0xda98cae0, ftLastWriteTime.dwHighDateTime=0x1d4d530, nFileSizeHigh=0x0, nFileSizeLow=0xb6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="8DVQo1AMxG.flv", cAlternateFileName="8DVQO1~1.FLV")) returned 1 [0027.759] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd7cd50, ftCreationTime.dwHighDateTime=0x1d4cdb1, ftLastAccessTime.dwLowDateTime=0xdc6b10a0, ftLastAccessTime.dwHighDateTime=0x1d4c78c, ftLastWriteTime.dwLowDateTime=0xdc6b10a0, ftLastWriteTime.dwHighDateTime=0x1d4c78c, nFileSizeHigh=0x0, nFileSizeLow=0x14cf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="8lxOsjLdfI_z6wDzZyb.doc", cAlternateFileName="8LXOSJ~1.DOC")) returned 1 [0027.759] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9daa4e0, ftCreationTime.dwHighDateTime=0x1d4cb13, ftLastAccessTime.dwLowDateTime=0xf5cbe140, ftLastAccessTime.dwHighDateTime=0x1d4c71f, ftLastWriteTime.dwLowDateTime=0xf5cbe140, ftLastWriteTime.dwHighDateTime=0x1d4c71f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BvyR9eNB2M", cAlternateFileName="BVYR9E~1")) returned 1 [0027.760] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f70280, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x88f9900, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x62d3f00, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x7b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0hen locker.exe", cAlternateFileName="C0HENL~1.EXE")) returned 1 [0027.760] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0027.760] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed26a80, ftCreationTime.dwHighDateTime=0x1d4c978, ftLastAccessTime.dwLowDateTime=0xe8ccf870, ftLastAccessTime.dwHighDateTime=0x1d4cb7b, ftLastWriteTime.dwLowDateTime=0xe8ccf870, ftLastWriteTime.dwHighDateTime=0x1d4cb7b, nFileSizeHigh=0x0, nFileSizeLow=0xfbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gAlCj3Ceg3rmmOg4.png", cAlternateFileName="GALCJ3~1.PNG")) returned 1 [0027.760] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e654b0, ftCreationTime.dwHighDateTime=0x1d4d1d9, ftLastAccessTime.dwLowDateTime=0xbacae780, ftLastAccessTime.dwHighDateTime=0x1d4cb57, ftLastWriteTime.dwLowDateTime=0xbacae780, ftLastWriteTime.dwHighDateTime=0x1d4cb57, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="gY1Sw4.mkv", cAlternateFileName="")) returned 1 [0027.760] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x531a4580, ftCreationTime.dwHighDateTime=0x1d4cc8e, ftLastAccessTime.dwLowDateTime=0xb64a7be0, ftLastAccessTime.dwHighDateTime=0x1d4cc7d, ftLastWriteTime.dwLowDateTime=0xb64a7be0, ftLastWriteTime.dwHighDateTime=0x1d4cc7d, nFileSizeHigh=0x0, nFileSizeLow=0xd357, dwReserved0=0x0, dwReserved1=0x0, cFileName="GYhp5VSqkDaEbEs44.rtf", cAlternateFileName="GYHP5V~1.RTF")) returned 1 [0027.760] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1e4d60, ftCreationTime.dwHighDateTime=0x1d4ced7, ftLastAccessTime.dwLowDateTime=0xe5f9740, ftLastAccessTime.dwHighDateTime=0x1d4ce9d, ftLastWriteTime.dwLowDateTime=0xe5f9740, ftLastWriteTime.dwHighDateTime=0x1d4ce9d, nFileSizeHigh=0x0, nFileSizeLow=0xa50f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAaq4t0C.odt", cAlternateFileName="")) returned 1 [0027.760] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eed170, ftCreationTime.dwHighDateTime=0x1d4c725, ftLastAccessTime.dwLowDateTime=0x67ccdf20, ftLastAccessTime.dwHighDateTime=0x1d4cb57, ftLastWriteTime.dwLowDateTime=0x67ccdf20, ftLastWriteTime.dwHighDateTime=0x1d4cb57, nFileSizeHigh=0x0, nFileSizeLow=0x3eed, dwReserved0=0x0, dwReserved1=0x0, cFileName="IcfKmGMarj.pps", cAlternateFileName="ICFKMG~1.PPS")) returned 1 [0027.760] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb096a30, ftCreationTime.dwHighDateTime=0x1d4c926, ftLastAccessTime.dwLowDateTime=0xdec92020, ftLastAccessTime.dwHighDateTime=0x1d4d359, ftLastWriteTime.dwLowDateTime=0xdec92020, ftLastWriteTime.dwHighDateTime=0x1d4d359, nFileSizeHigh=0x0, nFileSizeLow=0xa635, dwReserved0=0x0, dwReserved1=0x0, cFileName="k636yAy.wav", cAlternateFileName="")) returned 1 [0027.761] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f994f0, ftCreationTime.dwHighDateTime=0x1d4cafc, ftLastAccessTime.dwLowDateTime=0x54de1b30, ftLastAccessTime.dwHighDateTime=0x1d4d0e4, ftLastWriteTime.dwLowDateTime=0x54de1b30, ftLastWriteTime.dwHighDateTime=0x1d4d0e4, nFileSizeHigh=0x0, nFileSizeLow=0xff9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NpGu4rSKh.pps", cAlternateFileName="NPGU4R~1.PPS")) returned 1 [0027.761] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30922620, ftCreationTime.dwHighDateTime=0x1d4c9f2, ftLastAccessTime.dwLowDateTime=0xd444d620, ftLastAccessTime.dwHighDateTime=0x1d4ccf2, ftLastWriteTime.dwLowDateTime=0xd444d620, ftLastWriteTime.dwHighDateTime=0x1d4ccf2, nFileSizeHigh=0x0, nFileSizeLow=0x16503, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oa1XCE.rtf", cAlternateFileName="")) returned 1 [0027.761] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdf55a0, ftCreationTime.dwHighDateTime=0x1d4d2be, ftLastAccessTime.dwLowDateTime=0xc12271e0, ftLastAccessTime.dwHighDateTime=0x1d4c925, ftLastWriteTime.dwLowDateTime=0xc12271e0, ftLastWriteTime.dwHighDateTime=0x1d4c925, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P5-1sAvH1hY8QYRAKIh", cAlternateFileName="P5-1SA~1")) returned 1 [0027.761] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2641fc0, ftCreationTime.dwHighDateTime=0x1d4c7f8, ftLastAccessTime.dwLowDateTime=0xb43ae930, ftLastAccessTime.dwHighDateTime=0x1d4c650, ftLastWriteTime.dwLowDateTime=0xb43ae930, ftLastWriteTime.dwHighDateTime=0x1d4c650, nFileSizeHigh=0x0, nFileSizeLow=0x8143, dwReserved0=0x0, dwReserved1=0x0, cFileName="PpMIXlpV2R.pps", cAlternateFileName="PPMIXL~1.PPS")) returned 1 [0027.761] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64c65c50, ftCreationTime.dwHighDateTime=0x1d4cf7d, ftLastAccessTime.dwLowDateTime=0x9ed86d50, ftLastAccessTime.dwHighDateTime=0x1d4c6d3, ftLastWriteTime.dwLowDateTime=0x9ed86d50, ftLastWriteTime.dwHighDateTime=0x1d4c6d3, nFileSizeHigh=0x0, nFileSizeLow=0x13f3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rsgt2sMDq.mkv", cAlternateFileName="RSGT2S~1.MKV")) returned 1 [0027.761] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45adbd0, ftCreationTime.dwHighDateTime=0x1d4d010, ftLastAccessTime.dwLowDateTime=0x5f6b79b0, ftLastAccessTime.dwHighDateTime=0x1d4d168, ftLastWriteTime.dwLowDateTime=0x5f6b79b0, ftLastWriteTime.dwHighDateTime=0x1d4d168, nFileSizeHigh=0x0, nFileSizeLow=0x14147, dwReserved0=0x0, dwReserved1=0x0, cFileName="S93bfLEOoUYRcl-Xar.avi", cAlternateFileName="S93BFL~1.AVI")) returned 1 [0027.761] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66284300, ftCreationTime.dwHighDateTime=0x1d4d46f, ftLastAccessTime.dwLowDateTime=0x8866dc80, ftLastAccessTime.dwHighDateTime=0x1d4c9f5, ftLastWriteTime.dwLowDateTime=0x8866dc80, ftLastWriteTime.dwHighDateTime=0x1d4c9f5, nFileSizeHigh=0x0, nFileSizeLow=0x68ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="u65E6p08.flv", cAlternateFileName="")) returned 1 [0027.761] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92998740, ftCreationTime.dwHighDateTime=0x1d4cb7e, ftLastAccessTime.dwLowDateTime=0xe7b46ea0, ftLastAccessTime.dwHighDateTime=0x1d4d080, ftLastWriteTime.dwLowDateTime=0xe7b46ea0, ftLastWriteTime.dwHighDateTime=0x1d4d080, nFileSizeHigh=0x0, nFileSizeLow=0x10d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsP07_YMcR.mp3", cAlternateFileName="USP07_~1.MP3")) returned 1 [0027.762] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa990ef00, ftCreationTime.dwHighDateTime=0x1d4c90e, ftLastAccessTime.dwLowDateTime=0x5f84f180, ftLastAccessTime.dwHighDateTime=0x1d4d1de, ftLastWriteTime.dwLowDateTime=0x5f84f180, ftLastWriteTime.dwHighDateTime=0x1d4d1de, nFileSizeHigh=0x0, nFileSizeLow=0x14b72, dwReserved0=0x0, dwReserved1=0x0, cFileName="uTBnz-evw.bmp", cAlternateFileName="UTBNZ-~1.BMP")) returned 1 [0027.762] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6768a650, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0xa4185e00, ftLastAccessTime.dwHighDateTime=0x1d4cee5, ftLastWriteTime.dwLowDateTime=0xa4185e00, ftLastWriteTime.dwHighDateTime=0x1d4cee5, nFileSizeHigh=0x0, nFileSizeLow=0xc417, dwReserved0=0x0, dwReserved1=0x0, cFileName="x9-T8mgSTJaomnflMQn8.ppt", cAlternateFileName="X9-T8M~1.PPT")) returned 1 [0027.762] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfb81f0, ftCreationTime.dwHighDateTime=0x1d4cd85, ftLastAccessTime.dwLowDateTime=0xf81a7890, ftLastAccessTime.dwHighDateTime=0x1d4d47a, ftLastWriteTime.dwLowDateTime=0xf81a7890, ftLastWriteTime.dwHighDateTime=0x1d4d47a, nFileSizeHigh=0x0, nFileSizeLow=0x10635, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y-kdihhQNd7t2yHzBawc.mkv", cAlternateFileName="Y-KDIH~1.MKV")) returned 1 [0027.762] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3d7a070, ftCreationTime.dwHighDateTime=0x1d4c96b, ftLastAccessTime.dwLowDateTime=0x6e5c580, ftLastAccessTime.dwHighDateTime=0x1d4c8e3, ftLastWriteTime.dwLowDateTime=0x6e5c580, ftLastWriteTime.dwHighDateTime=0x1d4c8e3, nFileSizeHigh=0x0, nFileSizeLow=0xfb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="YYurk0OynFSLp5Q.odt", cAlternateFileName="YYURK0~1.ODT")) returned 1 [0027.762] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0027.762] FindClose (in: hFindFile=0x374450 | out: hFindFile=0x374450) returned 1 [0027.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef18c) returned 1 [0027.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef198) returned 1 [0027.763] CoTaskMemAlloc (cb=0x20c) returned 0x3a6658 [0027.763] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x3a6658 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 0x0 [0027.764] CoTaskMemFree (pv=0x3a6658) [0027.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1eec64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0027.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef1cc) returned 1 [0027.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1eecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0027.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x1eeca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0027.765] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x1eeef4 | out: lpFindFileData=0x1eeef4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc78e120, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xc78e120, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x374450 [0027.765] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc78e120, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xc78e120, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0027.765] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2faa9f00, ftCreationTime.dwHighDateTime=0x1d4c702, ftLastAccessTime.dwLowDateTime=0xb94ad930, ftLastAccessTime.dwHighDateTime=0x1d4c65f, ftLastWriteTime.dwLowDateTime=0xb94ad930, ftLastWriteTime.dwHighDateTime=0x1d4c65f, nFileSizeHigh=0x0, nFileSizeLow=0xf884, dwReserved0=0x0, dwReserved1=0x0, cFileName="-M6wvJDg0c1p1jdV-F-.docx", cAlternateFileName="-M6WVJ~1.DOC")) returned 1 [0027.765] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12ea81a0, ftCreationTime.dwHighDateTime=0x1d4cfd1, ftLastAccessTime.dwLowDateTime=0x3d627320, ftLastAccessTime.dwHighDateTime=0x1d4ca9f, ftLastWriteTime.dwLowDateTime=0x3d627320, ftLastWriteTime.dwHighDateTime=0x1d4ca9f, nFileSizeHigh=0x0, nFileSizeLow=0x188b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0wkyhpeDhWWc1YnLzK.odt", cAlternateFileName="0WKYHP~1.ODT")) returned 1 [0027.765] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe31f00, ftCreationTime.dwHighDateTime=0x1d5b0b9, ftLastAccessTime.dwLowDateTime=0xa13c96f0, ftLastAccessTime.dwHighDateTime=0x1d54786, ftLastWriteTime.dwLowDateTime=0xa13c96f0, ftLastWriteTime.dwHighDateTime=0x1d54786, nFileSizeHigh=0x0, nFileSizeLow=0x18731, dwReserved0=0x0, dwReserved1=0x0, cFileName="0_JJ4jXs Pd.xlsx", cAlternateFileName="0_JJ4J~1.XLS")) returned 1 [0027.765] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6dc8c0, ftCreationTime.dwHighDateTime=0x1d4c597, ftLastAccessTime.dwLowDateTime=0x92a9ec30, ftLastAccessTime.dwHighDateTime=0x1d4d177, ftLastWriteTime.dwLowDateTime=0x92a9ec30, ftLastWriteTime.dwHighDateTime=0x1d4d177, nFileSizeHigh=0x0, nFileSizeLow=0x581e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2GvFODaJY.xlsx", cAlternateFileName="2GVFOD~1.XLS")) returned 1 [0027.766] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94a6af0, ftCreationTime.dwHighDateTime=0x1d4d57c, ftLastAccessTime.dwLowDateTime=0xe8962720, ftLastAccessTime.dwHighDateTime=0x1d4ccd2, ftLastWriteTime.dwLowDateTime=0xe8962720, ftLastWriteTime.dwHighDateTime=0x1d4ccd2, nFileSizeHigh=0x0, nFileSizeLow=0x813c, dwReserved0=0x0, dwReserved1=0x0, cFileName="2L4y3atEregU.doc", cAlternateFileName="2L4Y3A~1.DOC")) returned 1 [0027.766] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a9a030, ftCreationTime.dwHighDateTime=0x1d4c9ed, ftLastAccessTime.dwLowDateTime=0x1e9b9c30, ftLastAccessTime.dwHighDateTime=0x1d4c72c, ftLastWriteTime.dwLowDateTime=0x1e9b9c30, ftLastWriteTime.dwHighDateTime=0x1d4c72c, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="2oj-3b1DX.pptx", cAlternateFileName="2OJ-3B~1.PPT")) returned 1 [0027.766] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50391390, ftCreationTime.dwHighDateTime=0x1d4cd07, ftLastAccessTime.dwLowDateTime=0xcc820040, ftLastAccessTime.dwHighDateTime=0x1d4d4e8, ftLastWriteTime.dwLowDateTime=0xcc820040, ftLastWriteTime.dwHighDateTime=0x1d4d4e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="322eqGxHHuf7IiOxe0zj.pptx", cAlternateFileName="322EQG~1.PPT")) returned 1 [0027.766] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c8a9c90, ftCreationTime.dwHighDateTime=0x1d4c9cf, ftLastAccessTime.dwLowDateTime=0x7dfbc830, ftLastAccessTime.dwHighDateTime=0x1d4cfb5, ftLastWriteTime.dwLowDateTime=0x7dfbc830, ftLastWriteTime.dwHighDateTime=0x1d4cfb5, nFileSizeHigh=0x0, nFileSizeLow=0x93b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4iDO.ppt", cAlternateFileName="")) returned 1 [0027.766] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x947a5760, ftCreationTime.dwHighDateTime=0x1d4cb8d, ftLastAccessTime.dwLowDateTime=0x57c09c80, ftLastAccessTime.dwHighDateTime=0x1d4d0f6, ftLastWriteTime.dwLowDateTime=0x57c09c80, ftLastWriteTime.dwHighDateTime=0x1d4d0f6, nFileSizeHigh=0x0, nFileSizeLow=0xde89, dwReserved0=0x0, dwReserved1=0x0, cFileName="4JLEiOqMzF57q2lY.doc", cAlternateFileName="4JLEIO~1.DOC")) returned 1 [0027.766] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba194450, ftCreationTime.dwHighDateTime=0x1d4cc13, ftLastAccessTime.dwLowDateTime=0x3f9d04d0, ftLastAccessTime.dwHighDateTime=0x1d4d3ea, ftLastWriteTime.dwLowDateTime=0x3f9d04d0, ftLastWriteTime.dwHighDateTime=0x1d4d3ea, nFileSizeHigh=0x0, nFileSizeLow=0x1248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="58fRrQCmzqx.xlsx", cAlternateFileName="58FRRQ~1.XLS")) returned 1 [0027.767] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b5afe0, ftCreationTime.dwHighDateTime=0x1d5a786, ftLastAccessTime.dwLowDateTime=0x58f643c0, ftLastAccessTime.dwHighDateTime=0x1d5b56b, ftLastWriteTime.dwLowDateTime=0x58f643c0, ftLastWriteTime.dwHighDateTime=0x1d5b56b, nFileSizeHigh=0x0, nFileSizeLow=0x1233e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5i mtNWlsmgQuUCq.xlsx", cAlternateFileName="5IMTNW~1.XLS")) returned 1 [0027.767] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf2de890, ftCreationTime.dwHighDateTime=0x1d4cdcb, ftLastAccessTime.dwLowDateTime=0xff8c76b0, ftLastAccessTime.dwHighDateTime=0x1d4cef2, ftLastWriteTime.dwLowDateTime=0xff8c76b0, ftLastWriteTime.dwHighDateTime=0x1d4cef2, nFileSizeHigh=0x0, nFileSizeLow=0xf60e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ix_.ods", cAlternateFileName="")) returned 1 [0027.767] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f40f010, ftCreationTime.dwHighDateTime=0x1d4ce96, ftLastAccessTime.dwLowDateTime=0x4d8583c0, ftLastAccessTime.dwHighDateTime=0x1d4d443, ftLastWriteTime.dwLowDateTime=0x4d8583c0, ftLastWriteTime.dwHighDateTime=0x1d4d443, nFileSizeHigh=0x0, nFileSizeLow=0x18cb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9ZnOue.docx", cAlternateFileName="9ZNOUE~1.DOC")) returned 1 [0027.767] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f7d20, ftCreationTime.dwHighDateTime=0x1d5952d, ftLastAccessTime.dwLowDateTime=0x9894650, ftLastAccessTime.dwHighDateTime=0x1d5a802, ftLastWriteTime.dwLowDateTime=0x9894650, ftLastWriteTime.dwHighDateTime=0x1d5a802, nFileSizeHigh=0x0, nFileSizeLow=0x11eed, dwReserved0=0x0, dwReserved1=0x0, cFileName="9zTx.docx", cAlternateFileName="9ZTX~1.DOC")) returned 1 [0027.767] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fedf5d0, ftCreationTime.dwHighDateTime=0x1d5b792, ftLastAccessTime.dwLowDateTime=0x435bf40, ftLastAccessTime.dwHighDateTime=0x1d56337, ftLastWriteTime.dwLowDateTime=0x435bf40, ftLastWriteTime.dwHighDateTime=0x1d56337, nFileSizeHigh=0x0, nFileSizeLow=0x134ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Br81ndGpuiZbS.pptx", cAlternateFileName="BR81ND~1.PPT")) returned 1 [0027.767] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e95b350, ftCreationTime.dwHighDateTime=0x1d4cfb8, ftLastAccessTime.dwLowDateTime=0xa2d6add0, ftLastAccessTime.dwHighDateTime=0x1d4d499, ftLastWriteTime.dwLowDateTime=0xa2d6add0, ftLastWriteTime.dwHighDateTime=0x1d4d499, nFileSizeHigh=0x0, nFileSizeLow=0x1d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="c51R3 8.odt", cAlternateFileName="C51R38~1.ODT")) returned 1 [0027.767] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe4dff0, ftCreationTime.dwHighDateTime=0x1d55f54, ftLastAccessTime.dwLowDateTime=0xf33b7230, ftLastAccessTime.dwHighDateTime=0x1d598f0, ftLastWriteTime.dwLowDateTime=0xf33b7230, ftLastWriteTime.dwHighDateTime=0x1d598f0, nFileSizeHigh=0x0, nFileSizeLow=0xfeea, dwReserved0=0x0, dwReserved1=0x0, cFileName="CbB1vyKEos.xlsx", cAlternateFileName="CBB1VY~1.XLS")) returned 1 [0027.768] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9c63950, ftCreationTime.dwHighDateTime=0x1d55c81, ftLastAccessTime.dwLowDateTime=0xfc236dd0, ftLastAccessTime.dwHighDateTime=0x1d574c4, ftLastWriteTime.dwLowDateTime=0xfc236dd0, ftLastWriteTime.dwHighDateTime=0x1d574c4, nFileSizeHigh=0x0, nFileSizeLow=0xb286, dwReserved0=0x0, dwReserved1=0x0, cFileName="cS94_Qi5vMbxo9.docx", cAlternateFileName="CS94_Q~1.DOC")) returned 1 [0027.768] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9686f70, ftCreationTime.dwHighDateTime=0x1d4d15f, ftLastAccessTime.dwLowDateTime=0x34726a80, ftLastAccessTime.dwHighDateTime=0x1d4cd48, ftLastWriteTime.dwLowDateTime=0x34726a80, ftLastWriteTime.dwHighDateTime=0x1d4cd48, nFileSizeHigh=0x0, nFileSizeLow=0x3bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcRsARSR9x.pptx", cAlternateFileName="DCRSAR~1.PPT")) returned 1 [0027.768] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34dcc10, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x923e2150, ftLastAccessTime.dwHighDateTime=0x1d4c55e, ftLastWriteTime.dwLowDateTime=0x923e2150, ftLastWriteTime.dwHighDateTime=0x1d4c55e, nFileSizeHigh=0x0, nFileSizeLow=0x99ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dd38zgiEsfVQ.pps", cAlternateFileName="DD38ZG~1.PPS")) returned 1 [0027.768] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0027.768] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa7e18b0, ftCreationTime.dwHighDateTime=0x1d4c761, ftLastAccessTime.dwLowDateTime=0x4360aa30, ftLastAccessTime.dwHighDateTime=0x1d4c60d, ftLastWriteTime.dwLowDateTime=0x4360aa30, ftLastWriteTime.dwHighDateTime=0x1d4c60d, nFileSizeHigh=0x0, nFileSizeLow=0x10a07, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeSSJ75LCOEFdIdQW.ods", cAlternateFileName="DESSJ7~1.ODS")) returned 1 [0027.768] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa15e3bc0, ftCreationTime.dwHighDateTime=0x1d4c96e, ftLastAccessTime.dwLowDateTime=0x7e359690, ftLastAccessTime.dwHighDateTime=0x1d4cc78, ftLastWriteTime.dwLowDateTime=0x7e359690, ftLastWriteTime.dwHighDateTime=0x1d4cc78, nFileSizeHigh=0x0, nFileSizeLow=0xeb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnkvME.rtf", cAlternateFileName="")) returned 1 [0027.768] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde78f840, ftCreationTime.dwHighDateTime=0x1d4d230, ftLastAccessTime.dwLowDateTime=0x2a8f8020, ftLastAccessTime.dwHighDateTime=0x1d4c65e, ftLastWriteTime.dwLowDateTime=0x2a8f8020, ftLastWriteTime.dwHighDateTime=0x1d4c65e, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x0, dwReserved1=0x0, cFileName="dp_yXN43X6K5RtxgtN3p.docx", cAlternateFileName="DP_YXN~1.DOC")) returned 1 [0027.768] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x882d2790, ftCreationTime.dwHighDateTime=0x1d5593f, ftLastAccessTime.dwLowDateTime=0x5befb150, ftLastAccessTime.dwHighDateTime=0x1d537ae, ftLastWriteTime.dwLowDateTime=0x5befb150, ftLastWriteTime.dwHighDateTime=0x1d537ae, nFileSizeHigh=0x0, nFileSizeLow=0xbca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAATutbUmb_VDJM4KNL.xlsx", cAlternateFileName="EAATUT~1.XLS")) returned 1 [0027.769] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53c677e0, ftCreationTime.dwHighDateTime=0x1d581e4, ftLastAccessTime.dwLowDateTime=0xa54f3400, ftLastAccessTime.dwHighDateTime=0x1d54f10, ftLastWriteTime.dwLowDateTime=0xa54f3400, ftLastWriteTime.dwHighDateTime=0x1d54f10, nFileSizeHigh=0x0, nFileSizeLow=0x16fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fCy-.pptx", cAlternateFileName="FCY-~1.PPT")) returned 1 [0027.769] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9887b0a0, ftCreationTime.dwHighDateTime=0x1d4c65b, ftLastAccessTime.dwLowDateTime=0xe8d2f720, ftLastAccessTime.dwHighDateTime=0x1d4c7f2, ftLastWriteTime.dwLowDateTime=0xe8d2f720, ftLastWriteTime.dwHighDateTime=0x1d4c7f2, nFileSizeHigh=0x0, nFileSizeLow=0x12595, dwReserved0=0x0, dwReserved1=0x0, cFileName="GF4RfFXwP3j_k.odt", cAlternateFileName="GF4RFF~1.ODT")) returned 1 [0027.769] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa20e9370, ftCreationTime.dwHighDateTime=0x1d4cbf4, ftLastAccessTime.dwLowDateTime=0x36ede170, ftLastAccessTime.dwHighDateTime=0x1d4d01f, ftLastWriteTime.dwLowDateTime=0x36ede170, ftLastWriteTime.dwHighDateTime=0x1d4d01f, nFileSizeHigh=0x0, nFileSizeLow=0x171ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="GVBw1GYsWr4dgQN3WfK4.docx", cAlternateFileName="GVBW1G~1.DOC")) returned 1 [0027.769] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46189f80, ftCreationTime.dwHighDateTime=0x1d4c563, ftLastAccessTime.dwLowDateTime=0x422cefd0, ftLastAccessTime.dwHighDateTime=0x1d4c6f7, ftLastWriteTime.dwLowDateTime=0x422cefd0, ftLastWriteTime.dwHighDateTime=0x1d4c6f7, nFileSizeHigh=0x0, nFileSizeLow=0x6dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hb13rDf6MEP.pdf", cAlternateFileName="HB13RD~1.PDF")) returned 1 [0027.769] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6899c20, ftCreationTime.dwHighDateTime=0x1d4d254, ftLastAccessTime.dwLowDateTime=0x1d76d570, ftLastAccessTime.dwHighDateTime=0x1d4ce36, ftLastWriteTime.dwLowDateTime=0x1d76d570, ftLastWriteTime.dwHighDateTime=0x1d4ce36, nFileSizeHigh=0x0, nFileSizeLow=0x11775, dwReserved0=0x0, dwReserved1=0x0, cFileName="IbcTBf.odt", cAlternateFileName="")) returned 1 [0027.769] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6da1f30, ftCreationTime.dwHighDateTime=0x1d538db, ftLastAccessTime.dwLowDateTime=0xa2f11f20, ftLastAccessTime.dwHighDateTime=0x1d545a1, ftLastWriteTime.dwLowDateTime=0xa2f11f20, ftLastWriteTime.dwHighDateTime=0x1d545a1, nFileSizeHigh=0x0, nFileSizeLow=0x1319d, dwReserved0=0x0, dwReserved1=0x0, cFileName="iuw.docx", cAlternateFileName="IUW~1.DOC")) returned 1 [0027.769] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77eb960, ftCreationTime.dwHighDateTime=0x1d5af8e, ftLastAccessTime.dwLowDateTime=0xe86f0e00, ftLastAccessTime.dwHighDateTime=0x1d56d6e, ftLastWriteTime.dwLowDateTime=0xe86f0e00, ftLastWriteTime.dwHighDateTime=0x1d56d6e, nFileSizeHigh=0x0, nFileSizeLow=0x15fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="jiZ31.pptx", cAlternateFileName="JIZ31~1.PPT")) returned 1 [0027.770] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fbb0760, ftCreationTime.dwHighDateTime=0x1d5b9f4, ftLastAccessTime.dwLowDateTime=0xb3e78d10, ftLastAccessTime.dwHighDateTime=0x1d5aec3, ftLastWriteTime.dwLowDateTime=0xb3e78d10, ftLastWriteTime.dwHighDateTime=0x1d5aec3, nFileSizeHigh=0x0, nFileSizeLow=0x1475f, dwReserved0=0x0, dwReserved1=0x0, cFileName="KysDy-X2xmrskAOxQ7Fs.xlsx", cAlternateFileName="KYSDY-~1.XLS")) returned 1 [0027.770] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf0939e0, ftCreationTime.dwHighDateTime=0x1d4cf89, ftLastAccessTime.dwLowDateTime=0xbe095260, ftLastAccessTime.dwHighDateTime=0x1d4c922, ftLastWriteTime.dwLowDateTime=0xbe095260, ftLastWriteTime.dwHighDateTime=0x1d4c922, nFileSizeHigh=0x0, nFileSizeLow=0x104ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="mk6xVSF-P.xlsx", cAlternateFileName="MK6XVS~1.XLS")) returned 1 [0027.770] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0027.770] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0027.770] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0027.770] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0027.770] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0cc920, ftCreationTime.dwHighDateTime=0x1d4d403, ftLastAccessTime.dwLowDateTime=0xbaf91d80, ftLastAccessTime.dwHighDateTime=0x1d4cad5, ftLastWriteTime.dwLowDateTime=0xbaf91d80, ftLastWriteTime.dwHighDateTime=0x1d4cad5, nFileSizeHigh=0x0, nFileSizeLow=0x7a78, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mZo0B.odp", cAlternateFileName="")) returned 1 [0027.771] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0027.771] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbcf20, ftCreationTime.dwHighDateTime=0x1d4c56d, ftLastAccessTime.dwLowDateTime=0x544e1ee0, ftLastAccessTime.dwHighDateTime=0x1d4ca4f, ftLastWriteTime.dwLowDateTime=0x544e1ee0, ftLastWriteTime.dwHighDateTime=0x1d4ca4f, nFileSizeHigh=0x0, nFileSizeLow=0xf07b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pANrRdisjp5GCA.pptx", cAlternateFileName="PANRRD~1.PPT")) returned 1 [0027.771] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62055030, ftCreationTime.dwHighDateTime=0x1d4d2a1, ftLastAccessTime.dwLowDateTime=0x225a3260, ftLastAccessTime.dwHighDateTime=0x1d4c74e, ftLastWriteTime.dwLowDateTime=0x225a3260, ftLastWriteTime.dwHighDateTime=0x1d4c74e, nFileSizeHigh=0x0, nFileSizeLow=0xd8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pJNMb5mC.ppt", cAlternateFileName="")) returned 1 [0027.771] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfba410, ftCreationTime.dwHighDateTime=0x1d4cc5e, ftLastAccessTime.dwLowDateTime=0xab750e80, ftLastAccessTime.dwHighDateTime=0x1d4d0f4, ftLastWriteTime.dwLowDateTime=0xab750e80, ftLastWriteTime.dwHighDateTime=0x1d4d0f4, nFileSizeHigh=0x0, nFileSizeLow=0xf256, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qd 8x7UPpD5TxIRaU.pps", cAlternateFileName="QD8X7U~1.PPS")) returned 1 [0027.771] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6636c0, ftCreationTime.dwHighDateTime=0x1d4d3bd, ftLastAccessTime.dwLowDateTime=0xaf8fdb80, ftLastAccessTime.dwHighDateTime=0x1d4cae1, ftLastWriteTime.dwLowDateTime=0xaf8fdb80, ftLastWriteTime.dwHighDateTime=0x1d4cae1, nFileSizeHigh=0x0, nFileSizeLow=0x1586, dwReserved0=0x0, dwReserved1=0x0, cFileName="qM5o23hghHwx2PWt6O.rtf", cAlternateFileName="QM5O23~1.RTF")) returned 1 [0027.771] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5ba5080, ftCreationTime.dwHighDateTime=0x1d4cafb, ftLastAccessTime.dwLowDateTime=0x55d71330, ftLastAccessTime.dwHighDateTime=0x1d4c7ba, ftLastWriteTime.dwLowDateTime=0x55d71330, ftLastWriteTime.dwHighDateTime=0x1d4c7ba, nFileSizeHigh=0x0, nFileSizeLow=0x12ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sI1vSTU-S.xlsx", cAlternateFileName="SI1VST~1.XLS")) returned 1 [0027.771] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x236ef530, ftCreationTime.dwHighDateTime=0x1d4c737, ftLastAccessTime.dwLowDateTime=0x2957a140, ftLastAccessTime.dwHighDateTime=0x1d4c53e, ftLastWriteTime.dwLowDateTime=0x2957a140, ftLastWriteTime.dwHighDateTime=0x1d4c53e, nFileSizeHigh=0x0, nFileSizeLow=0x49be, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpzULbh4.pdf", cAlternateFileName="")) returned 1 [0027.772] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938f0170, ftCreationTime.dwHighDateTime=0x1d4d079, ftLastAccessTime.dwLowDateTime=0x3ba70440, ftLastAccessTime.dwHighDateTime=0x1d4d523, ftLastWriteTime.dwLowDateTime=0x3ba70440, ftLastWriteTime.dwHighDateTime=0x1d4d523, nFileSizeHigh=0x0, nFileSizeLow=0x11909, dwReserved0=0x0, dwReserved1=0x0, cFileName="TwwZcS5arCMt6POgKbN.xlsx", cAlternateFileName="TWWZCS~1.XLS")) returned 1 [0027.772] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3a8bb0, ftCreationTime.dwHighDateTime=0x1d4cfbd, ftLastAccessTime.dwLowDateTime=0x7965eee0, ftLastAccessTime.dwHighDateTime=0x1d4d0d2, ftLastWriteTime.dwLowDateTime=0x7965eee0, ftLastWriteTime.dwHighDateTime=0x1d4d0d2, nFileSizeHigh=0x0, nFileSizeLow=0x180b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsnlojNPzLPnbY.odp", cAlternateFileName="USNLOJ~1.ODP")) returned 1 [0027.772] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90712ea0, ftCreationTime.dwHighDateTime=0x1d55139, ftLastAccessTime.dwLowDateTime=0x81244080, ftLastAccessTime.dwHighDateTime=0x1d5a12b, ftLastWriteTime.dwLowDateTime=0x81244080, ftLastWriteTime.dwHighDateTime=0x1d5a12b, nFileSizeHigh=0x0, nFileSizeLow=0x153a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="V-U7vxnqSGePzOZZ4V.pptx", cAlternateFileName="V-U7VX~1.PPT")) returned 1 [0027.772] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229bb420, ftCreationTime.dwHighDateTime=0x1d4c78e, ftLastAccessTime.dwLowDateTime=0xd6859150, ftLastAccessTime.dwHighDateTime=0x1d4cbd4, ftLastWriteTime.dwLowDateTime=0xd6859150, ftLastWriteTime.dwHighDateTime=0x1d4cbd4, nFileSizeHigh=0x0, nFileSizeLow=0x60a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCZLGYuc-.docx", cAlternateFileName="VBCZLG~1.DOC")) returned 1 [0027.772] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa20f3810, ftCreationTime.dwHighDateTime=0x1d58090, ftLastAccessTime.dwLowDateTime=0xe73fee0, ftLastAccessTime.dwHighDateTime=0x1d56d28, ftLastWriteTime.dwLowDateTime=0xe73fee0, ftLastWriteTime.dwHighDateTime=0x1d56d28, nFileSizeHigh=0x0, nFileSizeLow=0x7fad, dwReserved0=0x0, dwReserved1=0x0, cFileName="VwE WRO1kt8ge8llu R.docx", cAlternateFileName="VWEWRO~1.DOC")) returned 1 [0027.772] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf06a60, ftCreationTime.dwHighDateTime=0x1d4d4c6, ftLastAccessTime.dwLowDateTime=0x65ec9e00, ftLastAccessTime.dwHighDateTime=0x1d4cc76, ftLastWriteTime.dwLowDateTime=0x65ec9e00, ftLastWriteTime.dwHighDateTime=0x1d4cc76, nFileSizeHigh=0x0, nFileSizeLow=0xf3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wRqjR80CeY.ods", cAlternateFileName="WRQJR8~1.ODS")) returned 1 [0027.773] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7048fcd0, ftCreationTime.dwHighDateTime=0x1d4d4ce, ftLastAccessTime.dwLowDateTime=0xaff50ad0, ftLastAccessTime.dwHighDateTime=0x1d4cc32, ftLastWriteTime.dwLowDateTime=0xaff50ad0, ftLastWriteTime.dwHighDateTime=0x1d4cc32, nFileSizeHigh=0x0, nFileSizeLow=0xf58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="wz0ZP-2.odt", cAlternateFileName="")) returned 1 [0027.773] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd150a00, ftCreationTime.dwHighDateTime=0x1d4d00a, ftLastAccessTime.dwLowDateTime=0xdcc23490, ftLastAccessTime.dwHighDateTime=0x1d4d572, ftLastWriteTime.dwLowDateTime=0xdcc23490, ftLastWriteTime.dwHighDateTime=0x1d4d572, nFileSizeHigh=0x0, nFileSizeLow=0x3345, dwReserved0=0x0, dwReserved1=0x0, cFileName="XKLELTXhAeLDMBm.docx", cAlternateFileName="XKLELT~1.DOC")) returned 1 [0027.773] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295cdf0, ftCreationTime.dwHighDateTime=0x1d581c0, ftLastAccessTime.dwLowDateTime=0x310c0a40, ftLastAccessTime.dwHighDateTime=0x1d57068, ftLastWriteTime.dwLowDateTime=0x310c0a40, ftLastWriteTime.dwHighDateTime=0x1d57068, nFileSizeHigh=0x0, nFileSizeLow=0x26c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="y8PQauwYLDHCF.pptx", cAlternateFileName="Y8PQAU~1.PPT")) returned 1 [0027.773] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97419d20, ftCreationTime.dwHighDateTime=0x1d58189, ftLastAccessTime.dwLowDateTime=0xb80b0220, ftLastAccessTime.dwHighDateTime=0x1d543d2, ftLastWriteTime.dwLowDateTime=0xb80b0220, ftLastWriteTime.dwHighDateTime=0x1d543d2, nFileSizeHigh=0x0, nFileSizeLow=0x58bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="zwwtnNbfZUy.docx", cAlternateFileName="ZWWTNN~1.DOC")) returned 1 [0027.773] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0027.773] FindClose (in: hFindFile=0x374450 | out: hFindFile=0x374450) returned 1 [0027.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef18c) returned 1 [0027.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef198) returned 1 [0027.773] CoTaskMemAlloc (cb=0x20c) returned 0x3a6658 [0027.773] SHGetFolderPathW (in: hwnd=0x0, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0x3a6658 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 0x0 [0027.774] CoTaskMemFree (pv=0x3a6658) [0027.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1eec64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0027.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef1cc) returned 1 [0027.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1eecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0027.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x1eeca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0027.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x1eeef4 | out: lpFindFileData=0x1eeef4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc800540, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xc800540, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x374450 [0027.775] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc800540, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xc800540, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0027.775] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ed9050, ftCreationTime.dwHighDateTime=0x1d4c764, ftLastAccessTime.dwLowDateTime=0x6200a00, ftLastAccessTime.dwHighDateTime=0x1d4c76e, ftLastWriteTime.dwLowDateTime=0x6200a00, ftLastWriteTime.dwHighDateTime=0x1d4c76e, nFileSizeHigh=0x0, nFileSizeLow=0x19a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="0m-n.wav", cAlternateFileName="")) returned 1 [0027.775] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23a8780, ftCreationTime.dwHighDateTime=0x1d4cbb6, ftLastAccessTime.dwLowDateTime=0x6d468f80, ftLastAccessTime.dwHighDateTime=0x1d4ccfd, ftLastWriteTime.dwLowDateTime=0x6d468f80, ftLastWriteTime.dwHighDateTime=0x1d4ccfd, nFileSizeHigh=0x0, nFileSizeLow=0x79fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BNX1zCJzt8B5LNUiTaS.m4a", cAlternateFileName="BNX1ZC~1.M4A")) returned 1 [0027.775] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0027.776] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedd92df0, ftCreationTime.dwHighDateTime=0x1d4ceb6, ftLastAccessTime.dwLowDateTime=0x3f3124d0, ftLastAccessTime.dwHighDateTime=0x1d4d193, ftLastWriteTime.dwLowDateTime=0x3f3124d0, ftLastWriteTime.dwHighDateTime=0x1d4d193, nFileSizeHigh=0x0, nFileSizeLow=0x13856, dwReserved0=0x0, dwReserved1=0x0, cFileName="H-vE8jci7.m4a", cAlternateFileName="H-VE8J~1.M4A")) returned 1 [0027.776] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x592f8e50, ftCreationTime.dwHighDateTime=0x1d4cd9f, ftLastAccessTime.dwLowDateTime=0x20522120, ftLastAccessTime.dwHighDateTime=0x1d4cfc4, ftLastWriteTime.dwLowDateTime=0x20522120, ftLastWriteTime.dwHighDateTime=0x1d4cfc4, nFileSizeHigh=0x0, nFileSizeLow=0x7761, dwReserved0=0x0, dwReserved1=0x0, cFileName="muGf.mp3", cAlternateFileName="")) returned 1 [0027.776] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70dfb320, ftCreationTime.dwHighDateTime=0x1d4d0df, ftLastAccessTime.dwLowDateTime=0xf0fccc80, ftLastAccessTime.dwHighDateTime=0x1d4d492, ftLastWriteTime.dwLowDateTime=0xf0fccc80, ftLastWriteTime.dwHighDateTime=0x1d4d492, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pE56pKTUH0FEI", cAlternateFileName="PE56PK~1")) returned 1 [0027.776] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18d108a0, ftCreationTime.dwHighDateTime=0x1d4c8e7, ftLastAccessTime.dwLowDateTime=0x68b186a0, ftLastAccessTime.dwHighDateTime=0x1d4d0e5, ftLastWriteTime.dwLowDateTime=0x68b186a0, ftLastWriteTime.dwHighDateTime=0x1d4d0e5, nFileSizeHigh=0x0, nFileSizeLow=0x15d17, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyMOUK_pQxYoppwpJ.m4a", cAlternateFileName="SYMOUK~1.M4A")) returned 1 [0027.776] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x837cbb40, ftCreationTime.dwHighDateTime=0x1d4c739, ftLastAccessTime.dwLowDateTime=0x9f95f0b0, ftLastAccessTime.dwHighDateTime=0x1d4cec5, ftLastWriteTime.dwLowDateTime=0x9f95f0b0, ftLastWriteTime.dwHighDateTime=0x1d4cec5, nFileSizeHigh=0x0, nFileSizeLow=0x3d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="vOsdu34wk.wav", cAlternateFileName="VOSDU3~1.WAV")) returned 1 [0027.776] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f19c30, ftCreationTime.dwHighDateTime=0x1d4d56f, ftLastAccessTime.dwLowDateTime=0x10f738c0, ftLastAccessTime.dwHighDateTime=0x1d4d495, ftLastWriteTime.dwLowDateTime=0x10f738c0, ftLastWriteTime.dwHighDateTime=0x1d4d495, nFileSizeHigh=0x0, nFileSizeLow=0x1395b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zL5omI28cVd1pX.mp3", cAlternateFileName="ZL5OMI~1.MP3")) returned 1 [0027.776] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x163b7190, ftCreationTime.dwHighDateTime=0x1d4cbc4, ftLastAccessTime.dwLowDateTime=0x93489ff0, ftLastAccessTime.dwHighDateTime=0x1d4cd13, ftLastWriteTime.dwLowDateTime=0x93489ff0, ftLastWriteTime.dwHighDateTime=0x1d4cd13, nFileSizeHigh=0x0, nFileSizeLow=0xa041, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy122e.m4a", cAlternateFileName="")) returned 1 [0027.776] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0027.777] FindClose (in: hFindFile=0x374450 | out: hFindFile=0x374450) returned 1 [0027.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef18c) returned 1 [0027.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef198) returned 1 [0027.777] CoTaskMemAlloc (cb=0x20c) returned 0x3a6658 [0027.777] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x3a6658 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 0x0 [0027.778] CoTaskMemFree (pv=0x3a6658) [0027.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1eec64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0027.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef1cc) returned 1 [0027.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1eecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0027.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x1eeca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0027.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x1eeef4 | out: lpFindFileData=0x1eeef4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xca61b40, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xca61b40, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x374450 [0027.778] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xca61b40, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xca61b40, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0027.779] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22ceffd0, ftCreationTime.dwHighDateTime=0x1d4c8a4, ftLastAccessTime.dwLowDateTime=0x80aa0810, ftLastAccessTime.dwHighDateTime=0x1d4cee0, ftLastWriteTime.dwLowDateTime=0x80aa0810, ftLastWriteTime.dwHighDateTime=0x1d4cee0, nFileSizeHigh=0x0, nFileSizeLow=0x54f, dwReserved0=0x0, dwReserved1=0x0, cFileName="2DV5h6Bu9Z7DWzc1811y.gif", cAlternateFileName="2DV5H6~1.GIF")) returned 1 [0027.779] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb89f750, ftCreationTime.dwHighDateTime=0x1d4cbb6, ftLastAccessTime.dwLowDateTime=0x82b9d7b0, ftLastAccessTime.dwHighDateTime=0x1d4d332, ftLastWriteTime.dwLowDateTime=0x82b9d7b0, ftLastWriteTime.dwHighDateTime=0x1d4d332, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUShc-", cAlternateFileName="")) returned 1 [0027.779] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0027.779] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffada80, ftCreationTime.dwHighDateTime=0x1d4c6de, ftLastAccessTime.dwLowDateTime=0x91a483c0, ftLastAccessTime.dwHighDateTime=0x1d4c7ab, ftLastWriteTime.dwLowDateTime=0x91a483c0, ftLastWriteTime.dwHighDateTime=0x1d4c7ab, nFileSizeHigh=0x0, nFileSizeLow=0x11491, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6KILj.jpg", cAlternateFileName="")) returned 1 [0027.779] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4fa3790, ftCreationTime.dwHighDateTime=0x1d4c908, ftLastAccessTime.dwLowDateTime=0xaadbff90, ftLastAccessTime.dwHighDateTime=0x1d4d1b4, ftLastWriteTime.dwLowDateTime=0xaadbff90, ftLastWriteTime.dwHighDateTime=0x1d4d1b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FqdKj83ZYlL2BN2VeP", cAlternateFileName="FQDKJ8~1")) returned 1 [0027.779] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab0762c0, ftCreationTime.dwHighDateTime=0x1d4c6e7, ftLastAccessTime.dwLowDateTime=0x91e05a0, ftLastAccessTime.dwHighDateTime=0x1d4cb7d, ftLastWriteTime.dwLowDateTime=0x91e05a0, ftLastWriteTime.dwHighDateTime=0x1d4cb7d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M2d_cc8gnZin7YA-J", cAlternateFileName="M2D_CC~1")) returned 1 [0027.779] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d9e53e0, ftCreationTime.dwHighDateTime=0x1d4c99e, ftLastAccessTime.dwLowDateTime=0x938c2630, ftLastAccessTime.dwHighDateTime=0x1d4cbe2, ftLastWriteTime.dwLowDateTime=0x938c2630, ftLastWriteTime.dwHighDateTime=0x1d4cbe2, nFileSizeHigh=0x0, nFileSizeLow=0x11f5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEGzx.png", cAlternateFileName="")) returned 1 [0027.780] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5b83010, ftCreationTime.dwHighDateTime=0x1d4d20c, ftLastAccessTime.dwLowDateTime=0xfaa56950, ftLastAccessTime.dwHighDateTime=0x1d4ce10, ftLastWriteTime.dwLowDateTime=0xfaa56950, ftLastWriteTime.dwHighDateTime=0x1d4ce10, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XgqMG3afkd5utp55", cAlternateFileName="XGQMG3~1")) returned 1 [0027.780] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa620c0, ftCreationTime.dwHighDateTime=0x1d4ce45, ftLastAccessTime.dwLowDateTime=0x14aa49f0, ftLastAccessTime.dwHighDateTime=0x1d4cf98, ftLastWriteTime.dwLowDateTime=0x14aa49f0, ftLastWriteTime.dwHighDateTime=0x1d4cf98, nFileSizeHigh=0x0, nFileSizeLow=0x8ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="zkNo7lbWd6GX.bmp", cAlternateFileName="ZKNO7L~1.BMP")) returned 1 [0027.780] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0027.780] FindClose (in: hFindFile=0x374450 | out: hFindFile=0x374450) returned 1 [0027.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef18c) returned 1 [0027.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef198) returned 1 [0027.780] CoTaskMemAlloc (cb=0x20c) returned 0x3a6658 [0027.780] SHGetFolderPathW (in: hwnd=0x0, csidl=14, hToken=0x0, dwFlags=0x0, pszPath=0x3a6658 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 0x0 [0027.781] CoTaskMemFree (pv=0x3a6658) [0027.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1eec64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0027.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef1cc) returned 1 [0027.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1eecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0027.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x1eeca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0027.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x1eeef4 | out: lpFindFileData=0x1eeef4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc9ef720, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xc9ef720, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x374450 [0027.782] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc9ef720, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xc9ef720, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0027.782] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cb4e7d0, ftCreationTime.dwHighDateTime=0x1d4ca46, ftLastAccessTime.dwLowDateTime=0xc65cc2b0, ftLastAccessTime.dwHighDateTime=0x1d4d568, ftLastWriteTime.dwLowDateTime=0xc65cc2b0, ftLastWriteTime.dwHighDateTime=0x1d4d568, nFileSizeHigh=0x0, nFileSizeLow=0xdbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="-magk.flv", cAlternateFileName="")) returned 1 [0027.782] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a14d0, ftCreationTime.dwHighDateTime=0x1d4c605, ftLastAccessTime.dwLowDateTime=0x12d58a90, ftLastAccessTime.dwHighDateTime=0x1d4d425, ftLastWriteTime.dwLowDateTime=0x12d58a90, ftLastWriteTime.dwHighDateTime=0x1d4d425, nFileSizeHigh=0x0, nFileSizeLow=0x7001, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cbzmw1KtLT.avi", cAlternateFileName="CBZMW1~1.AVI")) returned 1 [0027.782] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0027.782] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5b95450, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0xa947d020, ftLastAccessTime.dwHighDateTime=0x1d4cff5, ftLastWriteTime.dwLowDateTime=0xa947d020, ftLastWriteTime.dwHighDateTime=0x1d4cff5, nFileSizeHigh=0x0, nFileSizeLow=0xca3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dRsz Q77jF.swf", cAlternateFileName="DRSZQ7~1.SWF")) returned 1 [0027.783] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1af30a80, ftCreationTime.dwHighDateTime=0x1d4cca6, ftLastAccessTime.dwLowDateTime=0x180d0040, ftLastAccessTime.dwHighDateTime=0x1d4d2f6, ftLastWriteTime.dwLowDateTime=0x180d0040, ftLastWriteTime.dwHighDateTime=0x1d4d2f6, nFileSizeHigh=0x0, nFileSizeLow=0xa57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="if-eoyY.flv", cAlternateFileName="")) returned 1 [0027.783] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e458c30, ftCreationTime.dwHighDateTime=0x1d4cc64, ftLastAccessTime.dwLowDateTime=0x7d2a13e0, ftLastAccessTime.dwHighDateTime=0x1d4d0b3, ftLastWriteTime.dwLowDateTime=0x7d2a13e0, ftLastWriteTime.dwHighDateTime=0x1d4d0b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OKwEEs4zmIHDzyFq_", cAlternateFileName="OKWEES~1")) returned 1 [0027.783] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87b9bb0, ftCreationTime.dwHighDateTime=0x1d4ce22, ftLastAccessTime.dwLowDateTime=0xc832a590, ftLastAccessTime.dwHighDateTime=0x1d4ca6f, ftLastWriteTime.dwLowDateTime=0xc832a590, ftLastWriteTime.dwHighDateTime=0x1d4ca6f, nFileSizeHigh=0x0, nFileSizeLow=0x14d66, dwReserved0=0x0, dwReserved1=0x0, cFileName="StrqGV62zdL3NGmsBY.avi", cAlternateFileName="STRQGV~1.AVI")) returned 1 [0027.783] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b26c830, ftCreationTime.dwHighDateTime=0x1d4c728, ftLastAccessTime.dwLowDateTime=0xe67e6bd0, ftLastAccessTime.dwHighDateTime=0x1d4c8ce, ftLastWriteTime.dwLowDateTime=0xe67e6bd0, ftLastWriteTime.dwHighDateTime=0x1d4c8ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wQOW0JzF", cAlternateFileName="")) returned 1 [0027.783] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x650c7e00, ftCreationTime.dwHighDateTime=0x1d4cc04, ftLastAccessTime.dwLowDateTime=0x43347c20, ftLastAccessTime.dwHighDateTime=0x1d4d329, ftLastWriteTime.dwLowDateTime=0x43347c20, ftLastWriteTime.dwHighDateTime=0x1d4d329, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wW5U6Ld", cAlternateFileName="")) returned 1 [0027.783] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e6a7ce0, ftCreationTime.dwHighDateTime=0x1d4d42c, ftLastAccessTime.dwLowDateTime=0xa5c70540, ftLastAccessTime.dwHighDateTime=0x1d4cfde, ftLastWriteTime.dwLowDateTime=0xa5c70540, ftLastWriteTime.dwHighDateTime=0x1d4cfde, nFileSizeHigh=0x0, nFileSizeLow=0x66c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="YoquUm.mkv", cAlternateFileName="")) returned 1 [0027.783] FindNextFileW (in: hFindFile=0x374450, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0027.783] FindClose (in: hFindFile=0x374450 | out: hFindFile=0x374450) returned 1 [0027.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef18c) returned 1 [0027.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef198) returned 1 [0027.784] CoTaskMemAlloc (cb=0x20c) returned 0x3a6658 [0027.784] SHGetFolderPathW (in: hwnd=0x0, csidl=8, hToken=0x0, dwFlags=0x0, pszPath=0x3a6658 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent") returned 0x0 [0027.785] CoTaskMemFree (pv=0x3a6658) [0027.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x1eec64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x46 [0027.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef1cc) returned 1 [0027.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x1eecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x46 [0027.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", nBufferLength=0x105, lpBuffer=0x1eeca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", lpFilePart=0x0) returned 0x47 [0027.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x1eeef4 | out: lpFindFileData=0x1eeef4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x10787060, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10787060, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x374490 [0027.785] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x10787060, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10787060, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0027.786] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1100c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf1100c0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf1100c0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-M6wvJDg0c1p1jdV-F-.lnk", cAlternateFileName="-M6WVJ~1.LNK")) returned 1 [0027.786] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103a8ca0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x103a8ca0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x103a8ca0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x99d, dwReserved0=0x0, dwReserved1=0x0, cFileName="-magk.flv.lnk", cAlternateFileName="-MAGKF~1.LNK")) returned 1 [0027.786] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe659dc0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xe659dc0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xe659dc0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="06F5nSO8IZX8v.lnk", cAlternateFileName="06F5NS~1.LNK")) returned 1 [0027.786] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x104ff900, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x104ff900, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x104ff900, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x14e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0GUWwg- vX.lnk", cAlternateFileName="0GUWWG~1.LNK")) returned 1 [0027.786] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10597e80, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10597e80, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10597e80, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa88, dwReserved0=0x0, dwReserved1=0x0, cFileName="0wkyhpeDhWWc1YnLzK.lnk", cAlternateFileName="0WKYHP~1.LNK")) returned 1 [0027.786] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106eeae0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x106eeae0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x106eeae0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="0_JJ4jXs Pd.lnk", cAlternateFileName="0_JJ4J~1.LNK")) returned 1 [0027.786] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10382b40, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10382b40, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10382b40, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0x0, dwReserved1=0x0, cFileName="18Nu.lnk", cAlternateFileName="")) returned 1 [0027.786] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e8000, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf7e8000, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf7e8000, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="1cCf7mR0wZr_IXMS.lnk", cAlternateFileName="1CCF7M~1.LNK")) returned 1 [0027.787] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f4f60, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x103f4f60, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x103f4f60, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xfd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="1J8VaBvHNUIrOWIiTQH.lnk", cAlternateFileName="1J8VAB~1.LNK")) returned 1 [0027.787] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10597e80, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10597e80, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10597e80, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="28bmyzVdQ4uM hyJ.lnk", cAlternateFileName="28BMYZ~1.LNK")) returned 1 [0027.787] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10382b40, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10382b40, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10382b40, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa89, dwReserved0=0x0, dwReserved1=0x0, cFileName="2DV5h6Bu9Z7DWzc1811y.lnk", cAlternateFileName="2DV5H6~1.LNK")) returned 1 [0027.787] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff0c200, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xff0c200, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xff0c200, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="2GvFODaJY.lnk", cAlternateFileName="2GVFOD~1.LNK")) returned 1 [0027.787] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10714c40, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10714c40, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10714c40, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa46, dwReserved0=0x0, dwReserved1=0x0, cFileName="2L4y3atEregU.lnk", cAlternateFileName="2L4Y3A~1.LNK")) returned 1 [0027.787] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10630400, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10630400, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10630400, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="2oj-3b1DX.lnk", cAlternateFileName="2OJ-3B~1.LNK")) returned 1 [0027.788] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1073ada0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1073ada0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1073ada0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xaa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="322eqGxHHuf7IiOxe0zj.lnk", cAlternateFileName="322EQG~1.LNK")) returned 1 [0027.788] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1100c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf1100c0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf1100c0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="4iDO.lnk", cAlternateFileName="")) returned 1 [0027.788] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe659dc0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xe659dc0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xe659dc0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa72, dwReserved0=0x0, dwReserved1=0x0, cFileName="4JLEiOqMzF57q2lY.lnk", cAlternateFileName="4JLEIO~1.LNK")) returned 1 [0027.788] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d2cc0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf5d2cc0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf5d2cc0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x1b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="4uHAJya2GojS.lnk", cAlternateFileName="4UHAJY~1.LNK")) returned 1 [0027.788] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf85a420, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf85a420, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf880580, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="58fRrQCmzqx.lnk", cAlternateFileName="58FRRQ~1.LNK")) returned 1 [0027.788] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1041b0c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1041b0c0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1041b0c0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="5i mtNWlsmgQuUCq.lnk", cAlternateFileName="5IMTNW~1.LNK")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10760f00, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10760f00, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10760f00, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ix_.lnk", cAlternateFileName="")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103cee00, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x103cee00, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x103cee00, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="5N_Y4qimL.flv.lnk", cAlternateFileName="5N_Y4Q~1.LNK")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe4db20, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x105e4140, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x105e4140, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="80o71GHAzaITULQ.lnk", cAlternateFileName="80O71G~1.LNK")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b0a20, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xe7b0a20, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xe7b0a20, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="81e0IPjLMVYGc1Y.lnk", cAlternateFileName="81E0IP~1.LNK")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f4f60, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x103f4f60, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x103f4f60, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="8DVQo1AMxG.flv.lnk", cAlternateFileName="8DVQO1~1.LNK")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102c4460, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x102c4460, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x102c4460, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf83, dwReserved0=0x0, dwReserved1=0x0, cFileName="8He3Dub70HnEH9R.lnk", cAlternateFileName="8HE3DU~1.LNK")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7037c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf7037c0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf7037c0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="8lxOsjLdfI_z6wDzZyb.lnk", cAlternateFileName="8LXOSJ~1.LNK")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5acb60, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf5acb60, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf5d2cc0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x1b45, dwReserved0=0x0, dwReserved1=0x0, cFileName="9GwHLY4Pi1N 5WAlea.lnk", cAlternateFileName="9GWHLY~1.LNK")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc5e940, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfc5e940, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfc5e940, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="9z8HbwgHtpQ9J0.flv.lnk", cAlternateFileName="9Z8HBW~1.LNK")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1035c9e0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1035c9e0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1035c9e0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9ZnOue.lnk", cAlternateFileName="")) returned 1 [0027.789] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1022bee0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1022bee0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1022bee0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="9zTx.lnk", cAlternateFileName="")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce65c0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutomaticDestinations", cAlternateFileName="AUTOMA~1")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa234a0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfa234a0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfa234a0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Br81ndGpuiZbS.lnk", cAlternateFileName="BR81ND~1.LNK")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe444a80, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10630400, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10656560, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="BvyR9eNB2M.lnk", cAlternateFileName="BVYR9E~1.LNK")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec01200, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xec01200, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xec27360, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x41f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BXfeGqtGZhUWl6DPASf.lnk", cAlternateFileName="BXFEGQ~1.LNK")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10205d80, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10205d80, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10205d80, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="c51R3 8.lnk", cAlternateFileName="C51R38~1.LNK")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c8320, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf4c8320, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf4c8320, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="c7LEUPFgrxzlebwaqM.lnk", cAlternateFileName="C7LEUP~1.LNK")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105bdfe0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x105bdfe0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x105bdfe0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa37, dwReserved0=0x0, dwReserved1=0x0, cFileName="CbB1vyKEos.lnk", cAlternateFileName="CBB1VY~1.LNK")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101b9ac0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x101b9ac0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x101b9ac0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x158c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cgustOsGiiKhdJd.lnk", cAlternateFileName="CGUSTO~1.LNK")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf98af20, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf98af20, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf98af20, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="cJD _B3.lnk", cAlternateFileName="CJD_B3~1.LNK")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa49600, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfa49600, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfa49600, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf41, dwReserved0=0x0, dwReserved1=0x0, cFileName="cN72O4j69.lnk", cAlternateFileName="CN72O4~1.LNK")) returned 1 [0027.790] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd43180, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfd43180, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfd43180, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xfcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cRThzOZMpOedhnw-ul4p.lnk", cAlternateFileName="CRTHZO~1.LNK")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf729920, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf729920, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf729920, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="cS94_Qi5vMbxo9.lnk", cAlternateFileName="CS94_Q~1.LNK")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf03e0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x104d97a0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x104d97a0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x968, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUShc-.lnk", cAlternateFileName="")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xce5f0760, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xce5f0760, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomDestinations", cAlternateFileName="CUSTOM~1")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10336880, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10336880, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10336880, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0x0, dwReserved1=0x0, cFileName="D04s 10CL9NZISChO.lnk", cAlternateFileName="D04S10~1.LNK")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1048d4e0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1048d4e0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1048d4e0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa37, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcRsARSR9x.lnk", cAlternateFileName="DCRSAR~1.LNK")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10656560, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10656560, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10656560, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa46, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dd38zgiEsfVQ.lnk", cAlternateFileName="DD38ZG~1.LNK")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e9f60, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf0e9f60, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf0e9f60, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeSSJ75LCOEFdIdQW.lnk", cAlternateFileName="DESSJ7~1.LNK")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b2fe0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf2b2fe0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf2b2fe0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNJ.mkv.lnk", cAlternateFileName="DNJMKV~1.LNK")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103a8ca0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x103a8ca0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x103a8ca0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnkvME.lnk", cAlternateFileName="")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d9140, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf2d9140, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf2d9140, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xaa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="dp_yXN43X6K5RtxgtN3p.lnk", cAlternateFileName="DP_YXN~1.LNK")) returned 1 [0027.791] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1003cd00, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1003cd00, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1003cd00, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="E1R8u1P6 Zcs.lnk", cAlternateFileName="E1R8U1~1.LNK")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106a2820, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x106a2820, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x106a2820, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6KILj.lnk", cAlternateFileName="")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101dfc20, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x101dfc20, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x101dfc20, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAATutbUmb_VDJM4KNL.lnk", cAlternateFileName="EAATUT~1.LNK")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe659dc0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xe659dc0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xe659dc0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ejwsu-z2NBo3.lnk", cAlternateFileName="EJWSU-~1.LNK")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1035c9e0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1035c9e0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1035c9e0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eNKnVRpRhD.flv.lnk", cAlternateFileName="ENKNVR~1.LNK")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdf5c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xefdf5c0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xefdf5c0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQ547LTHptJ0mNXaW4.lnk", cAlternateFileName="EQ547L~1.LNK")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10252040, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10252040, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10252040, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x140f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVQvx-zVLXbOUuS.mkv.lnk", cAlternateFileName="EVQVX-~1.LNK")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec01200, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xec01200, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xec01200, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="fCy-.lnk", cAlternateFileName="")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1003cd00, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x103f4f60, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x103f4f60, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FqdKj83ZYlL2BN2VeP.lnk", cAlternateFileName="FQDKJ8~1.LNK")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa6f760, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfa6f760, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfa6f760, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="fzcbqDEDL0GcWut0Ec9.flv.lnk", cAlternateFileName="FZCBQD~1.LNK")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10062e60, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10062e60, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10062e60, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x1ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="g9xjU0jha.lnk", cAlternateFileName="G9XJU0~1.LNK")) returned 1 [0027.792] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0bba0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xed0bba0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xed0bba0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="gAlCj3Ceg3rmmOg4.lnk", cAlternateFileName="GALCJ3~1.LNK")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101dfc20, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x101dfc20, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x101dfc20, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gd8bTHUj2uGWJXSg.lnk", cAlternateFileName="GD8BTH~1.LNK")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff0c200, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xff0c200, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xff0c200, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GF4RfFXwP3j_k.lnk", cAlternateFileName="GF4RFF~1.LNK")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d9140, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf2d9140, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf2d9140, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="gY1Sw4.mkv.lnk", cAlternateFileName="GY1SW4~1.LNK")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10787060, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10787060, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10787060, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="GYhp5VSqkDaEbEs44.lnk", cAlternateFileName="GYHP5V~1.LNK")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x100d5280, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x100d5280, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x100d5280, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAaq4t0C.lnk", cAlternateFileName="")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e9f60, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf0e9f60, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf0e9f60, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa37, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hb13rDf6MEP.lnk", cAlternateFileName="HB13RD~1.LNK")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa49600, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfa49600, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfa49600, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0x0, dwReserved1=0x0, cFileName="hhu2TEzPiZ r1JfZD.mkv.lnk", cAlternateFileName="HHU2TE~1.LNK")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102781a0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x102781a0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x102781a0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x0, dwReserved1=0x0, cFileName="IbcTBf.lnk", cAlternateFileName="")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d71e0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf9d71e0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf9d71e0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="IcfKmGMarj.lnk", cAlternateFileName="ICFKMG~1.LNK")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf964dc0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf964dc0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf964dc0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="if-eoyY.flv.lnk", cAlternateFileName="IF-EOY~1.LNK")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10193960, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10193960, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10193960, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x14a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipZS.lnk", cAlternateFileName="")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd43180, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfd43180, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfd692e0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IqPmklJ.lnk", cAlternateFileName="")) returned 1 [0027.793] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105e4140, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x105e4140, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x105e4140, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="iRlHsSbPC5H6Swl.mkv.lnk", cAlternateFileName="IRLHSS~1.LNK")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10088fc0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10088fc0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10088fc0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="iuw.lnk", cAlternateFileName="")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe4db20, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfe4db20, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfe4db20, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jiZ31.lnk", cAlternateFileName="")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaaa5a0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xeaaa5a0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xeaf6860, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjt7sFbN.lnk", cAlternateFileName="")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4a21c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x101dfc20, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x101dfc20, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf21, dwReserved0=0x0, dwReserved1=0x0, cFileName="JqYUKNzSPCc5n2XlJT.lnk", cAlternateFileName="JQYUKN~1.LNK")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105e4140, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x105e4140, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x105e4140, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf99, dwReserved0=0x0, dwReserved1=0x0, cFileName="KAktXgTtMW-tTm4Tz.lnk", cAlternateFileName="KAKTXG~1.LNK")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff32360, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xff32360, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xff32360, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf66, dwReserved0=0x0, dwReserved1=0x0, cFileName="kdIG 9yUFvwB.lnk", cAlternateFileName="KDIG9Y~1.LNK")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x104d97a0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x104d97a0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x104d97a0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xece, dwReserved0=0x0, dwReserved1=0x0, cFileName="kKrlFyGLLTXR_T.lnk", cAlternateFileName="KKRLFY~1.LNK")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1060a2a0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1060a2a0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1060a2a0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ky5lF0Y.lnk", cAlternateFileName="")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102ea5c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x102ea5c0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x102ea5c0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xaa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="KysDy-X2xmrskAOxQ7Fs.lnk", cAlternateFileName="KYSDY-~1.LNK")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1f4900, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10714c40, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10714c40, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xe0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="lCUF3TI.lnk", cAlternateFileName="")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d2cc0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10062e60, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10088fc0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x1441, dwReserved0=0x0, dwReserved1=0x0, cFileName="lF8d-naj5tdxd.lnk", cAlternateFileName="LF8D-N~1.LNK")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10571d20, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10571d20, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10571d20, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x1543, dwReserved0=0x0, dwReserved1=0x0, cFileName="lRp_ 6tW 7f1KHvREJ.lnk", cAlternateFileName="LRP_6T~1.LNK")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4a21c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf4a21c0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf4a21c0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x159b, dwReserved0=0x0, dwReserved1=0x0, cFileName="lwp_7PmRN8l4oABq.lnk", cAlternateFileName="LWP_7P~1.LNK")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd43180, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10310720, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10310720, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="M2d_cc8gnZin7YA-J.lnk", cAlternateFileName="M2D_CC~1.LNK")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7037c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf7037c0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf7037c0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEGzx.lnk", cAlternateFileName="")) returned 1 [0027.794] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe60db00, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1060a2a0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1060a2a0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mFo0Ey2r6xi.lnk", cAlternateFileName="MFO0EY~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e8000, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10571d20, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10571d20, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xed7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mj2r I-OcYNHT4.lnk", cAlternateFileName="MJ2RI-~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b1080, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf9b1080, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf9b1080, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mk6xVSF-P.lnk", cAlternateFileName="MK6XVS~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf03e0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xedf03e0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xedf03e0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="msuF0mBRuI.lnk", cAlternateFileName="MSUF0M~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec01200, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x106a2820, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x106a2820, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Music.lnk", cAlternateFileName="MYMUSI~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebdb0a0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x106a2820, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x106a2820, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x54f, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Pictures.lnk", cAlternateFileName="MYPICT~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf964dc0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10656560, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10656560, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x539, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Videos.lnk", cAlternateFileName="MYVIDE~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d71e0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf9d71e0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf9d71e0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="mZo0B.lnk", cAlternateFileName="")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e3ae0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10252040, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10252040, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xdcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="nA GHiq.lnk", cAlternateFileName="NAGHIQ~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10310720, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10310720, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10310720, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NN2-R09BiVpMj.lnk", cAlternateFileName="NN2-R0~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106c8980, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x106c8980, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x106c8980, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x23e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NpGu4rSKh.lnk", cAlternateFileName="NPGU4R~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10193960, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x106c8980, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x106c8980, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="NY6DYEi_9hJz3.lnk", cAlternateFileName="NY6DYE~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103cee00, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x103cee00, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x103cee00, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oa1XCE.lnk", cAlternateFileName="")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10441220, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10441220, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10441220, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xf0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODGc.lnk", cAlternateFileName="")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x100af120, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x100af120, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x100af120, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ohf1xKbn.lnk", cAlternateFileName="")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec27360, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfebff40, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfebff40, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x9c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OKwEEs4zmIHDzyFq_.lnk", cAlternateFileName="OKWEES~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc5e940, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1022bee0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1022bee0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="P5-1sAvH1hY8QYRAKIh.lnk", cAlternateFileName="P5-1SA~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfebff40, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfebff40, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfebff40, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="pANrRdisjp5GCA.lnk", cAlternateFileName="PANRRD~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0c3e00, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x106c8980, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x106c8980, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="pE56pKTUH0FEI.lnk", cAlternateFileName="PE56PK~1.LNK")) returned 1 [0027.795] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed4c20, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1073ada0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1073ada0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xe4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="phGJSJeaV5Ir.lnk", cAlternateFileName="PHGJSJ~1.LNK")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10062e60, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10062e60, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10062e60, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pJNMb5mC.lnk", cAlternateFileName="")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee60a0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xfee60a0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xfee60a0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="PpMIXlpV2R.lnk", cAlternateFileName="PPMIXL~1.LNK")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10252040, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10252040, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x102781a0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qd 8x7UPpD5TxIRaU.lnk", cAlternateFileName="QD8X7U~1.LNK")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f4f60, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x103f4f60, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x103f4f60, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xa88, dwReserved0=0x0, dwReserved1=0x0, cFileName="qM5o23hghHwx2PWt6O.lnk", cAlternateFileName="QM5O23~1.LNK")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b2fe0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x1054bbc0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x1054bbc0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xdc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rBjR8h.lnk", cAlternateFileName="")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5292c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x106eeae0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x106eeae0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming.lnk", cAlternateFileName="")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff584c0, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xff584c0, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xff584c0, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x23e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rsgt2sMDq.mkv.lnk", cAlternateFileName="RSGT2S~1.LNK")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10630400, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10630400, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10630400, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x306, dwReserved0=0x0, dwReserved1=0x0, cFileName="s0Vj_KrtpcuqMEIym9P-.lnk", cAlternateFileName="S0VJ_K~1.LNK")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefad80, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xeefad80, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xeefad80, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xe5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SRWM.lnk", cAlternateFileName="")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fd340, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0xf9fd340, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0xf9fd340, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="tGkdKl0KH.lnk", cAlternateFileName="TGKDKL~1.LNK")) returned 1 [0027.796] FindNextFileW (in: hFindFile=0x374490, lpFindFileData=0x1eef04 | out: lpFindFileData=0x1eef04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea84440, ftCreationTime.dwHighDateTime=0x1d5bf38, ftLastAccessTime.dwLowDateTime=0x10252040, ftLastAccessTime.dwHighDateTime=0x1d5bf38, ftLastWriteTime.dwLowDateTime=0x10252040, ftLastWriteTime.dwHighDateTime=0x1d5bf38, nFileSizeHigh=0x0, nFileSizeLow=0xe25, dwReserved0=0x0, dwReserved1=0x0, cFileName="TJE4Qy-MRcARcpN.lnk", cAlternateFileName="TJE4QY~1.LNK")) returned 1 [0027.797] FindClose (in: hFindFile=0x374490 | out: hFindFile=0x374490) returned 1 [0027.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef18c) returned 1 [0027.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef198) returned 1 [0027.797] CoTaskMemAlloc (cb=0x20c) returned 0x3a6658 [0027.797] SHGetFolderPathW (in: hwnd=0x0, csidl=6, hToken=0x0, dwFlags=0x0, pszPath=0x3a6658 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned 0x0 [0027.798] CoTaskMemFree (pv=0x3a6658) [0027.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1eec64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0027.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef1cc) returned 1 [0027.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1eecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0027.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x1eeca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28 [0027.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x1eeef4 | out: lpFindFileData=0x1eeef4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x374490 [0027.799] FindClose (in: hFindFile=0x374490 | out: hFindFile=0x374490) returned 1 [0027.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef18c) returned 1 [0027.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef198) returned 1 [0027.799] CoTaskMemAlloc (cb=0x20c) returned 0x3a6658 [0027.799] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6658 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0027.799] CoTaskMemFree (pv=0x3a6658) [0027.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1eec64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0027.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef1cc) returned 1 [0027.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1eecd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0027.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x1eeca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28 [0027.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x1eeef4 | out: lpFindFileData=0x1eeef4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x374490 [0027.800] FindClose (in: hFindFile=0x374490 | out: hFindFile=0x374490) returned 1 [0027.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef18c) returned 1 [0027.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef198) returned 1 [0027.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini", lpFilePart=0x0) returned 0x33 [0027.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.845] GetFileType (hFile=0x260) returned 0x1 [0027.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.845] GetFileType (hFile=0x260) returned 0x1 [0027.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.c0hen", lpFilePart=0x0) returned 0x35 [0027.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.846] GetFileType (hFile=0x250) returned 0x1 [0027.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.846] GetFileType (hFile=0x250) returned 0x1 [0027.848] ReadFile (in: hFile=0x260, lpBuffer=0x25959e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25959e4*, lpNumberOfBytesRead=0x1ef150*=0x11a, lpOverlapped=0x0) returned 1 [0027.851] ReadFile (in: hFile=0x260, lpBuffer=0x25959e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25959e4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.852] CloseHandle (hObject=0x260) returned 1 [0027.852] WriteFile (in: hFile=0x250, lpBuffer=0x25949d8*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25949d8*, lpNumberOfBytesWritten=0x1ef124*=0x124, lpOverlapped=0x0) returned 1 [0027.853] CloseHandle (hObject=0x250) returned 1 [0027.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini", lpFilePart=0x0) returned 0x33 [0027.854] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini")) returned 1 [0027.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini", lpFilePart=0x0) returned 0x33 [0027.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.855] GetFileType (hFile=0x250) returned 0x1 [0027.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.856] GetFileType (hFile=0x250) returned 0x1 [0027.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.c0hen", lpFilePart=0x0) returned 0x35 [0027.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.856] GetFileType (hFile=0x260) returned 0x1 [0027.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.856] GetFileType (hFile=0x260) returned 0x1 [0027.856] ReadFile (in: hFile=0x250, lpBuffer=0x2597dbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2597dbc*, lpNumberOfBytesRead=0x1ef150*=0x192, lpOverlapped=0x0) returned 1 [0027.857] ReadFile (in: hFile=0x250, lpBuffer=0x2597dbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2597dbc*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.857] CloseHandle (hObject=0x250) returned 1 [0027.857] WriteFile (in: hFile=0x260, lpBuffer=0x2596db0*, nNumberOfBytesToWrite=0x19c, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x2596db0*, lpNumberOfBytesWritten=0x1ef124*=0x19c, lpOverlapped=0x0) returned 1 [0027.858] CloseHandle (hObject=0x260) returned 1 [0027.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini", lpFilePart=0x0) returned 0x33 [0027.859] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini")) returned 1 [0027.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-M6wvJDg0c1p1jdV-F-.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-M6wvJDg0c1p1jdV-F-.lnk", lpFilePart=0x0) returned 0x5e [0027.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-M6wvJDg0c1p1jdV-F-.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-m6wvjdg0c1p1jdv-f-.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.860] GetFileType (hFile=0x260) returned 0x1 [0027.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.860] GetFileType (hFile=0x260) returned 0x1 [0027.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-M6wvJDg0c1p1jdV-F-.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-M6wvJDg0c1p1jdV-F-.c0hen", lpFilePart=0x0) returned 0x60 [0027.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-M6wvJDg0c1p1jdV-F-.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-m6wvjdg0c1p1jdv-f-.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.861] GetFileType (hFile=0x250) returned 0x1 [0027.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.861] GetFileType (hFile=0x250) returned 0x1 [0027.861] ReadFile (in: hFile=0x260, lpBuffer=0x259a324, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x259a324*, lpNumberOfBytesRead=0x1ef150*=0xa9a, lpOverlapped=0x0) returned 1 [0027.861] ReadFile (in: hFile=0x260, lpBuffer=0x259a324, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x259a324*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.861] CloseHandle (hObject=0x260) returned 1 [0027.861] WriteFile (in: hFile=0x250, lpBuffer=0x2599318*, nNumberOfBytesToWrite=0xaa4, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x2599318*, lpNumberOfBytesWritten=0x1ef124*=0xaa4, lpOverlapped=0x0) returned 1 [0027.863] CloseHandle (hObject=0x250) returned 1 [0027.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-M6wvJDg0c1p1jdV-F-.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-M6wvJDg0c1p1jdV-F-.lnk", lpFilePart=0x0) returned 0x5e [0027.863] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-M6wvJDg0c1p1jdV-F-.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-m6wvjdg0c1p1jdv-f-.lnk")) returned 1 [0027.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-magk.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-magk.flv.lnk", lpFilePart=0x0) returned 0x54 [0027.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-magk.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-magk.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.864] GetFileType (hFile=0x250) returned 0x1 [0027.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.865] GetFileType (hFile=0x250) returned 0x1 [0027.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-magk.flv.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-magk.flv.c0hen", lpFilePart=0x0) returned 0x56 [0027.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-magk.flv.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-magk.flv.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.865] GetFileType (hFile=0x260) returned 0x1 [0027.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.865] GetFileType (hFile=0x260) returned 0x1 [0027.866] ReadFile (in: hFile=0x250, lpBuffer=0x259c86c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x259c86c*, lpNumberOfBytesRead=0x1ef150*=0x99d, lpOverlapped=0x0) returned 1 [0027.866] ReadFile (in: hFile=0x250, lpBuffer=0x259c86c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x259c86c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.866] CloseHandle (hObject=0x250) returned 1 [0027.866] WriteFile (in: hFile=0x260, lpBuffer=0x259b860*, nNumberOfBytesToWrite=0x9a7, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x259b860*, lpNumberOfBytesWritten=0x1ef124*=0x9a7, lpOverlapped=0x0) returned 1 [0027.867] CloseHandle (hObject=0x260) returned 1 [0027.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-magk.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-magk.flv.lnk", lpFilePart=0x0) returned 0x54 [0027.867] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-magk.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-magk.flv.lnk")) returned 1 [0027.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\06F5nSO8IZX8v.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\06F5nSO8IZX8v.lnk", lpFilePart=0x0) returned 0x58 [0027.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\06F5nSO8IZX8v.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\06f5nso8izx8v.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.869] GetFileType (hFile=0x260) returned 0x1 [0027.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.869] GetFileType (hFile=0x260) returned 0x1 [0027.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\06F5nSO8IZX8v.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\06F5nSO8IZX8v.c0hen", lpFilePart=0x0) returned 0x5a [0027.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\06F5nSO8IZX8v.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\06f5nso8izx8v.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.869] GetFileType (hFile=0x250) returned 0x1 [0027.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.869] GetFileType (hFile=0x250) returned 0x1 [0027.870] ReadFile (in: hFile=0x260, lpBuffer=0x259edd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x259edd0*, lpNumberOfBytesRead=0x1ef150*=0x401, lpOverlapped=0x0) returned 1 [0027.870] ReadFile (in: hFile=0x260, lpBuffer=0x259edd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x259edd0*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.870] CloseHandle (hObject=0x260) returned 1 [0027.870] WriteFile (in: hFile=0x250, lpBuffer=0x259ddc4*, nNumberOfBytesToWrite=0x40b, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x259ddc4*, lpNumberOfBytesWritten=0x1ef124*=0x40b, lpOverlapped=0x0) returned 1 [0027.871] CloseHandle (hObject=0x250) returned 1 [0027.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\06F5nSO8IZX8v.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\06F5nSO8IZX8v.lnk", lpFilePart=0x0) returned 0x58 [0027.872] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\06F5nSO8IZX8v.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\06f5nso8izx8v.lnk")) returned 1 [0027.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0GUWwg- vX.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0GUWwg- vX.lnk", lpFilePart=0x0) returned 0x55 [0027.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0GUWwg- vX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0guwwg- vx.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.873] GetFileType (hFile=0x250) returned 0x1 [0027.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.873] GetFileType (hFile=0x250) returned 0x1 [0027.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0GUWwg- vX.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0GUWwg- vX.c0hen", lpFilePart=0x0) returned 0x57 [0027.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0GUWwg- vX.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0guwwg- vx.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.873] GetFileType (hFile=0x260) returned 0x1 [0027.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.874] GetFileType (hFile=0x260) returned 0x1 [0027.874] ReadFile (in: hFile=0x250, lpBuffer=0x25a1314, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25a1314*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0027.874] WriteFile (in: hFile=0x260, lpBuffer=0x25a0308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25a0308*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0027.875] ReadFile (in: hFile=0x250, lpBuffer=0x25a1314, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25a1314*, lpNumberOfBytesRead=0x1ef150*=0x4e7, lpOverlapped=0x0) returned 1 [0027.875] ReadFile (in: hFile=0x250, lpBuffer=0x25a1314, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25a1314*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.875] CloseHandle (hObject=0x250) returned 1 [0027.875] WriteFile (in: hFile=0x260, lpBuffer=0x25a0308*, nNumberOfBytesToWrite=0x4f1, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25a0308*, lpNumberOfBytesWritten=0x1ef124*=0x4f1, lpOverlapped=0x0) returned 1 [0027.875] CloseHandle (hObject=0x260) returned 1 [0027.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0GUWwg- vX.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0GUWwg- vX.lnk", lpFilePart=0x0) returned 0x55 [0027.876] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0GUWwg- vX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0guwwg- vx.lnk")) returned 1 [0027.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0wkyhpeDhWWc1YnLzK.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0wkyhpeDhWWc1YnLzK.lnk", lpFilePart=0x0) returned 0x5d [0027.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0wkyhpeDhWWc1YnLzK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0wkyhpedhwwc1ynlzk.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.877] GetFileType (hFile=0x260) returned 0x1 [0027.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.877] GetFileType (hFile=0x260) returned 0x1 [0027.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0wkyhpeDhWWc1YnLzK.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0wkyhpeDhWWc1YnLzK.c0hen", lpFilePart=0x0) returned 0x5f [0027.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0wkyhpeDhWWc1YnLzK.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0wkyhpedhwwc1ynlzk.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.878] GetFileType (hFile=0x250) returned 0x1 [0027.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.878] GetFileType (hFile=0x250) returned 0x1 [0027.878] ReadFile (in: hFile=0x260, lpBuffer=0x25a38b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25a38b0*, lpNumberOfBytesRead=0x1ef150*=0xa88, lpOverlapped=0x0) returned 1 [0027.878] ReadFile (in: hFile=0x260, lpBuffer=0x25a38b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25a38b0*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.878] CloseHandle (hObject=0x260) returned 1 [0027.878] WriteFile (in: hFile=0x250, lpBuffer=0x25a28a4*, nNumberOfBytesToWrite=0xa92, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25a28a4*, lpNumberOfBytesWritten=0x1ef124*=0xa92, lpOverlapped=0x0) returned 1 [0027.879] CloseHandle (hObject=0x250) returned 1 [0027.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0wkyhpeDhWWc1YnLzK.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0wkyhpeDhWWc1YnLzK.lnk", lpFilePart=0x0) returned 0x5d [0027.880] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0wkyhpeDhWWc1YnLzK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0wkyhpedhwwc1ynlzk.lnk")) returned 1 [0027.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0_JJ4jXs Pd.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0_JJ4jXs Pd.lnk", lpFilePart=0x0) returned 0x56 [0027.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0_JJ4jXs Pd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0_jj4jxs pd.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.881] GetFileType (hFile=0x250) returned 0x1 [0027.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.881] GetFileType (hFile=0x250) returned 0x1 [0027.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0_JJ4jXs Pd.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0_JJ4jXs Pd.c0hen", lpFilePart=0x0) returned 0x58 [0027.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0_JJ4jXs Pd.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0_jj4jxs pd.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.882] GetFileType (hFile=0x260) returned 0x1 [0027.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.882] GetFileType (hFile=0x260) returned 0x1 [0027.882] ReadFile (in: hFile=0x250, lpBuffer=0x25a5e0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25a5e0c*, lpNumberOfBytesRead=0x1ef150*=0xa42, lpOverlapped=0x0) returned 1 [0027.883] ReadFile (in: hFile=0x250, lpBuffer=0x25a5e0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25a5e0c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.883] CloseHandle (hObject=0x250) returned 1 [0027.883] WriteFile (in: hFile=0x260, lpBuffer=0x25a4e00*, nNumberOfBytesToWrite=0xa4c, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25a4e00*, lpNumberOfBytesWritten=0x1ef124*=0xa4c, lpOverlapped=0x0) returned 1 [0027.884] CloseHandle (hObject=0x260) returned 1 [0027.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0_JJ4jXs Pd.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0_JJ4jXs Pd.lnk", lpFilePart=0x0) returned 0x56 [0027.884] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0_JJ4jXs Pd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0_jj4jxs pd.lnk")) returned 1 [0027.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\18Nu.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\18Nu.lnk", lpFilePart=0x0) returned 0x4f [0027.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\18Nu.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\18nu.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.885] GetFileType (hFile=0x260) returned 0x1 [0027.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.885] GetFileType (hFile=0x260) returned 0x1 [0027.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\18Nu.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\18Nu.c0hen", lpFilePart=0x0) returned 0x51 [0027.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\18Nu.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\18nu.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.886] GetFileType (hFile=0x250) returned 0x1 [0027.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.886] GetFileType (hFile=0x250) returned 0x1 [0027.886] ReadFile (in: hFile=0x260, lpBuffer=0x25a8304, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25a8304*, lpNumberOfBytesRead=0x1ef150*=0x221, lpOverlapped=0x0) returned 1 [0027.886] ReadFile (in: hFile=0x260, lpBuffer=0x25a8304, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25a8304*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.886] CloseHandle (hObject=0x260) returned 1 [0027.887] WriteFile (in: hFile=0x250, lpBuffer=0x25a72f8*, nNumberOfBytesToWrite=0x22b, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25a72f8*, lpNumberOfBytesWritten=0x1ef124*=0x22b, lpOverlapped=0x0) returned 1 [0027.887] CloseHandle (hObject=0x250) returned 1 [0027.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\18Nu.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\18Nu.lnk", lpFilePart=0x0) returned 0x4f [0027.888] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\18Nu.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\18nu.lnk")) returned 1 [0027.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1cCf7mR0wZr_IXMS.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1cCf7mR0wZr_IXMS.lnk", lpFilePart=0x0) returned 0x5b [0027.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1cCf7mR0wZr_IXMS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1ccf7mr0wzr_ixms.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.889] GetFileType (hFile=0x250) returned 0x1 [0027.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.889] GetFileType (hFile=0x250) returned 0x1 [0027.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1cCf7mR0wZr_IXMS.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1cCf7mR0wZr_IXMS.c0hen", lpFilePart=0x0) returned 0x5d [0027.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1cCf7mR0wZr_IXMS.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1ccf7mr0wzr_ixms.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.890] GetFileType (hFile=0x260) returned 0x1 [0027.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.890] GetFileType (hFile=0x260) returned 0x1 [0027.890] ReadFile (in: hFile=0x250, lpBuffer=0x25aa87c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25aa87c*, lpNumberOfBytesRead=0x1ef150*=0x261, lpOverlapped=0x0) returned 1 [0027.890] ReadFile (in: hFile=0x250, lpBuffer=0x25aa87c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25aa87c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.890] CloseHandle (hObject=0x250) returned 1 [0027.890] WriteFile (in: hFile=0x260, lpBuffer=0x25a9870*, nNumberOfBytesToWrite=0x26b, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25a9870*, lpNumberOfBytesWritten=0x1ef124*=0x26b, lpOverlapped=0x0) returned 1 [0027.891] CloseHandle (hObject=0x260) returned 1 [0027.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1cCf7mR0wZr_IXMS.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1cCf7mR0wZr_IXMS.lnk", lpFilePart=0x0) returned 0x5b [0027.892] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1cCf7mR0wZr_IXMS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1ccf7mr0wzr_ixms.lnk")) returned 1 [0027.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1J8VaBvHNUIrOWIiTQH.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1J8VaBvHNUIrOWIiTQH.lnk", lpFilePart=0x0) returned 0x5e [0027.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1J8VaBvHNUIrOWIiTQH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1j8vabvhnuirowiitqh.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.893] GetFileType (hFile=0x260) returned 0x1 [0027.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.893] GetFileType (hFile=0x260) returned 0x1 [0027.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1J8VaBvHNUIrOWIiTQH.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1J8VaBvHNUIrOWIiTQH.c0hen", lpFilePart=0x0) returned 0x60 [0027.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1J8VaBvHNUIrOWIiTQH.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1j8vabvhnuirowiitqh.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.894] GetFileType (hFile=0x250) returned 0x1 [0027.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.894] GetFileType (hFile=0x250) returned 0x1 [0027.894] ReadFile (in: hFile=0x260, lpBuffer=0x25ace34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ace34*, lpNumberOfBytesRead=0x1ef150*=0xfd1, lpOverlapped=0x0) returned 1 [0027.894] ReadFile (in: hFile=0x260, lpBuffer=0x25ace34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ace34*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.894] CloseHandle (hObject=0x260) returned 1 [0027.894] WriteFile (in: hFile=0x250, lpBuffer=0x25abe28*, nNumberOfBytesToWrite=0xfdb, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25abe28*, lpNumberOfBytesWritten=0x1ef124*=0xfdb, lpOverlapped=0x0) returned 1 [0027.895] CloseHandle (hObject=0x250) returned 1 [0027.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1J8VaBvHNUIrOWIiTQH.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1J8VaBvHNUIrOWIiTQH.lnk", lpFilePart=0x0) returned 0x5e [0027.896] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1J8VaBvHNUIrOWIiTQH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1j8vabvhnuirowiitqh.lnk")) returned 1 [0027.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\28bmyzVdQ4uM hyJ.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\28bmyzVdQ4uM hyJ.lnk", lpFilePart=0x0) returned 0x5b [0027.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\28bmyzVdQ4uM hyJ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\28bmyzvdq4um hyj.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.897] GetFileType (hFile=0x250) returned 0x1 [0027.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.897] GetFileType (hFile=0x250) returned 0x1 [0027.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\28bmyzVdQ4uM hyJ.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\28bmyzVdQ4uM hyJ.c0hen", lpFilePart=0x0) returned 0x5d [0027.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\28bmyzVdQ4uM hyJ.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\28bmyzvdq4um hyj.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.900] GetFileType (hFile=0x260) returned 0x1 [0027.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.900] GetFileType (hFile=0x260) returned 0x1 [0027.900] ReadFile (in: hFile=0x250, lpBuffer=0x25af3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25af3cc*, lpNumberOfBytesRead=0x1ef150*=0x3c2, lpOverlapped=0x0) returned 1 [0027.901] ReadFile (in: hFile=0x250, lpBuffer=0x25af3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25af3cc*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.901] CloseHandle (hObject=0x250) returned 1 [0027.901] WriteFile (in: hFile=0x260, lpBuffer=0x25ae3c0*, nNumberOfBytesToWrite=0x3cc, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25ae3c0*, lpNumberOfBytesWritten=0x1ef124*=0x3cc, lpOverlapped=0x0) returned 1 [0027.902] CloseHandle (hObject=0x260) returned 1 [0027.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\28bmyzVdQ4uM hyJ.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\28bmyzVdQ4uM hyJ.lnk", lpFilePart=0x0) returned 0x5b [0027.902] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\28bmyzVdQ4uM hyJ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\28bmyzvdq4um hyj.lnk")) returned 1 [0027.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2DV5h6Bu9Z7DWzc1811y.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2DV5h6Bu9Z7DWzc1811y.lnk", lpFilePart=0x0) returned 0x5f [0027.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2DV5h6Bu9Z7DWzc1811y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2dv5h6bu9z7dwzc1811y.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.903] GetFileType (hFile=0x260) returned 0x1 [0027.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.903] GetFileType (hFile=0x260) returned 0x1 [0027.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2DV5h6Bu9Z7DWzc1811y.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2DV5h6Bu9Z7DWzc1811y.c0hen", lpFilePart=0x0) returned 0x61 [0027.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2DV5h6Bu9Z7DWzc1811y.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2dv5h6bu9z7dwzc1811y.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.904] GetFileType (hFile=0x250) returned 0x1 [0027.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.904] GetFileType (hFile=0x250) returned 0x1 [0027.904] ReadFile (in: hFile=0x260, lpBuffer=0x25b198c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25b198c*, lpNumberOfBytesRead=0x1ef150*=0xa89, lpOverlapped=0x0) returned 1 [0027.904] ReadFile (in: hFile=0x260, lpBuffer=0x25b198c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25b198c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.904] CloseHandle (hObject=0x260) returned 1 [0027.905] WriteFile (in: hFile=0x250, lpBuffer=0x25b0980*, nNumberOfBytesToWrite=0xa93, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25b0980*, lpNumberOfBytesWritten=0x1ef124*=0xa93, lpOverlapped=0x0) returned 1 [0027.905] CloseHandle (hObject=0x250) returned 1 [0027.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2DV5h6Bu9Z7DWzc1811y.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2DV5h6Bu9Z7DWzc1811y.lnk", lpFilePart=0x0) returned 0x5f [0027.906] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2DV5h6Bu9Z7DWzc1811y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2dv5h6bu9z7dwzc1811y.lnk")) returned 1 [0027.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2GvFODaJY.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2GvFODaJY.lnk", lpFilePart=0x0) returned 0x54 [0027.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2GvFODaJY.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2gvfodajy.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.907] GetFileType (hFile=0x250) returned 0x1 [0027.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.907] GetFileType (hFile=0x250) returned 0x1 [0027.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2GvFODaJY.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2GvFODaJY.c0hen", lpFilePart=0x0) returned 0x56 [0027.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2GvFODaJY.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2gvfodajy.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.908] GetFileType (hFile=0x260) returned 0x1 [0027.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.908] GetFileType (hFile=0x260) returned 0x1 [0027.908] ReadFile (in: hFile=0x250, lpBuffer=0x25b3ed4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25b3ed4*, lpNumberOfBytesRead=0x1ef150*=0xa2c, lpOverlapped=0x0) returned 1 [0027.908] ReadFile (in: hFile=0x250, lpBuffer=0x25b3ed4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25b3ed4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.908] CloseHandle (hObject=0x250) returned 1 [0027.908] WriteFile (in: hFile=0x260, lpBuffer=0x25b2ec8*, nNumberOfBytesToWrite=0xa36, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25b2ec8*, lpNumberOfBytesWritten=0x1ef124*=0xa36, lpOverlapped=0x0) returned 1 [0027.909] CloseHandle (hObject=0x260) returned 1 [0027.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2GvFODaJY.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2GvFODaJY.lnk", lpFilePart=0x0) returned 0x54 [0027.910] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2GvFODaJY.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2gvfodajy.lnk")) returned 1 [0027.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2L4y3atEregU.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2L4y3atEregU.lnk", lpFilePart=0x0) returned 0x57 [0027.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2L4y3atEregU.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2l4y3ateregu.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.911] GetFileType (hFile=0x260) returned 0x1 [0027.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.911] GetFileType (hFile=0x260) returned 0x1 [0027.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2L4y3atEregU.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2L4y3atEregU.c0hen", lpFilePart=0x0) returned 0x59 [0027.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2L4y3atEregU.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2l4y3ateregu.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.912] GetFileType (hFile=0x250) returned 0x1 [0027.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.912] GetFileType (hFile=0x250) returned 0x1 [0027.912] ReadFile (in: hFile=0x260, lpBuffer=0x25b6428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25b6428*, lpNumberOfBytesRead=0x1ef150*=0xa46, lpOverlapped=0x0) returned 1 [0027.918] ReadFile (in: hFile=0x260, lpBuffer=0x25b6428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25b6428*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.918] CloseHandle (hObject=0x260) returned 1 [0027.918] WriteFile (in: hFile=0x250, lpBuffer=0x25b541c*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25b541c*, lpNumberOfBytesWritten=0x1ef124*=0xa50, lpOverlapped=0x0) returned 1 [0027.919] CloseHandle (hObject=0x250) returned 1 [0027.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2L4y3atEregU.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2L4y3atEregU.lnk", lpFilePart=0x0) returned 0x57 [0027.919] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2L4y3atEregU.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2l4y3ateregu.lnk")) returned 1 [0027.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2oj-3b1DX.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2oj-3b1DX.lnk", lpFilePart=0x0) returned 0x54 [0027.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2oj-3b1DX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2oj-3b1dx.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.921] GetFileType (hFile=0x250) returned 0x1 [0027.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.921] GetFileType (hFile=0x250) returned 0x1 [0027.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2oj-3b1DX.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2oj-3b1DX.c0hen", lpFilePart=0x0) returned 0x56 [0027.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2oj-3b1DX.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2oj-3b1dx.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.921] GetFileType (hFile=0x260) returned 0x1 [0027.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.921] GetFileType (hFile=0x260) returned 0x1 [0027.922] ReadFile (in: hFile=0x250, lpBuffer=0x25b8960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25b8960*, lpNumberOfBytesRead=0x1ef150*=0xa2c, lpOverlapped=0x0) returned 1 [0027.922] ReadFile (in: hFile=0x250, lpBuffer=0x25b8960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25b8960*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.922] CloseHandle (hObject=0x250) returned 1 [0027.922] WriteFile (in: hFile=0x260, lpBuffer=0x25b7954*, nNumberOfBytesToWrite=0xa36, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25b7954*, lpNumberOfBytesWritten=0x1ef124*=0xa36, lpOverlapped=0x0) returned 1 [0027.923] CloseHandle (hObject=0x260) returned 1 [0027.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2oj-3b1DX.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2oj-3b1DX.lnk", lpFilePart=0x0) returned 0x54 [0027.923] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2oj-3b1DX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2oj-3b1dx.lnk")) returned 1 [0027.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\322eqGxHHuf7IiOxe0zj.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\322eqGxHHuf7IiOxe0zj.lnk", lpFilePart=0x0) returned 0x5f [0027.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\322eqGxHHuf7IiOxe0zj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\322eqgxhhuf7iioxe0zj.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.924] GetFileType (hFile=0x260) returned 0x1 [0027.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.924] GetFileType (hFile=0x260) returned 0x1 [0027.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\322eqGxHHuf7IiOxe0zj.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\322eqGxHHuf7IiOxe0zj.c0hen", lpFilePart=0x0) returned 0x61 [0027.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\322eqGxHHuf7IiOxe0zj.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\322eqgxhhuf7iioxe0zj.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.925] GetFileType (hFile=0x250) returned 0x1 [0027.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.925] GetFileType (hFile=0x250) returned 0x1 [0027.925] ReadFile (in: hFile=0x260, lpBuffer=0x25baf14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25baf14*, lpNumberOfBytesRead=0x1ef150*=0xaa5, lpOverlapped=0x0) returned 1 [0027.925] ReadFile (in: hFile=0x260, lpBuffer=0x25baf14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25baf14*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\322eqGxHHuf7IiOxe0zj.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\322eqGxHHuf7IiOxe0zj.lnk", lpFilePart=0x0) returned 0x5f [0027.928] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\322eqGxHHuf7IiOxe0zj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\322eqgxhhuf7iioxe0zj.lnk")) returned 1 [0027.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4iDO.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4iDO.lnk", lpFilePart=0x0) returned 0x4f [0027.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4iDO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\4ido.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.930] GetFileType (hFile=0x250) returned 0x1 [0027.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.930] GetFileType (hFile=0x250) returned 0x1 [0027.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4iDO.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4iDO.c0hen", lpFilePart=0x0) returned 0x51 [0027.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.930] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4iDO.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\4ido.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.930] GetFileType (hFile=0x260) returned 0x1 [0027.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.930] GetFileType (hFile=0x260) returned 0x1 [0027.930] ReadFile (in: hFile=0x250, lpBuffer=0x25bd41c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25bd41c*, lpNumberOfBytesRead=0x1ef150*=0x9ea, lpOverlapped=0x0) returned 1 [0027.931] ReadFile (in: hFile=0x250, lpBuffer=0x25bd41c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25bd41c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4iDO.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4iDO.lnk", lpFilePart=0x0) returned 0x4f [0027.932] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4iDO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\4ido.lnk")) returned 1 [0027.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4JLEiOqMzF57q2lY.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4JLEiOqMzF57q2lY.lnk", lpFilePart=0x0) returned 0x5b [0027.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4JLEiOqMzF57q2lY.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\4jleioqmzf57q2ly.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.933] GetFileType (hFile=0x260) returned 0x1 [0027.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.933] GetFileType (hFile=0x260) returned 0x1 [0027.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4JLEiOqMzF57q2lY.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4JLEiOqMzF57q2lY.c0hen", lpFilePart=0x0) returned 0x5d [0027.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4JLEiOqMzF57q2lY.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\4jleioqmzf57q2ly.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.934] GetFileType (hFile=0x250) returned 0x1 [0027.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.934] GetFileType (hFile=0x250) returned 0x1 [0027.934] ReadFile (in: hFile=0x260, lpBuffer=0x25bf994, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25bf994*, lpNumberOfBytesRead=0x1ef150*=0xa72, lpOverlapped=0x0) returned 1 [0027.935] ReadFile (in: hFile=0x260, lpBuffer=0x25bf994, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25bf994*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4JLEiOqMzF57q2lY.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4JLEiOqMzF57q2lY.lnk", lpFilePart=0x0) returned 0x5b [0027.936] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4JLEiOqMzF57q2lY.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\4jleioqmzf57q2ly.lnk")) returned 1 [0027.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4uHAJya2GojS.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4uHAJya2GojS.lnk", lpFilePart=0x0) returned 0x57 [0027.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4uHAJya2GojS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\4uhajya2gojs.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.937] GetFileType (hFile=0x250) returned 0x1 [0027.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.937] GetFileType (hFile=0x250) returned 0x1 [0027.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4uHAJya2GojS.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4uHAJya2GojS.c0hen", lpFilePart=0x0) returned 0x59 [0027.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4uHAJya2GojS.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\4uhajya2gojs.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.937] GetFileType (hFile=0x260) returned 0x1 [0027.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.937] GetFileType (hFile=0x260) returned 0x1 [0027.938] ReadFile (in: hFile=0x250, lpBuffer=0x25c1ef4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25c1ef4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0027.939] ReadFile (in: hFile=0x250, lpBuffer=0x25c1ef4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25c1ef4*, lpNumberOfBytesRead=0x1ef150*=0xb03, lpOverlapped=0x0) returned 1 [0027.939] ReadFile (in: hFile=0x250, lpBuffer=0x25c1ef4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25c1ef4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4uHAJya2GojS.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4uHAJya2GojS.lnk", lpFilePart=0x0) returned 0x57 [0027.939] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4uHAJya2GojS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\4uhajya2gojs.lnk")) returned 1 [0027.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\58fRrQCmzqx.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\58fRrQCmzqx.lnk", lpFilePart=0x0) returned 0x56 [0027.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\58fRrQCmzqx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\58frrqcmzqx.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.940] GetFileType (hFile=0x260) returned 0x1 [0027.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.940] GetFileType (hFile=0x260) returned 0x1 [0027.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\58fRrQCmzqx.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\58fRrQCmzqx.c0hen", lpFilePart=0x0) returned 0x58 [0027.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\58fRrQCmzqx.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\58frrqcmzqx.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.941] GetFileType (hFile=0x250) returned 0x1 [0027.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.941] GetFileType (hFile=0x250) returned 0x1 [0027.941] ReadFile (in: hFile=0x260, lpBuffer=0x25c4444, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25c4444*, lpNumberOfBytesRead=0x1ef150*=0xa42, lpOverlapped=0x0) returned 1 [0027.941] ReadFile (in: hFile=0x260, lpBuffer=0x25c4444, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25c4444*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\58fRrQCmzqx.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\58fRrQCmzqx.lnk", lpFilePart=0x0) returned 0x56 [0027.942] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\58fRrQCmzqx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\58frrqcmzqx.lnk")) returned 1 [0027.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5i mtNWlsmgQuUCq.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5i mtNWlsmgQuUCq.lnk", lpFilePart=0x0) returned 0x5b [0027.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5i mtNWlsmgQuUCq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5i mtnwlsmgquucq.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.944] GetFileType (hFile=0x250) returned 0x1 [0027.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.944] GetFileType (hFile=0x250) returned 0x1 [0027.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5i mtNWlsmgQuUCq.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5i mtNWlsmgQuUCq.c0hen", lpFilePart=0x0) returned 0x5d [0027.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5i mtNWlsmgQuUCq.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5i mtnwlsmgquucq.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.945] GetFileType (hFile=0x260) returned 0x1 [0027.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.945] GetFileType (hFile=0x260) returned 0x1 [0027.945] ReadFile (in: hFile=0x250, lpBuffer=0x25c69cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25c69cc*, lpNumberOfBytesRead=0x1ef150*=0xa79, lpOverlapped=0x0) returned 1 [0027.946] ReadFile (in: hFile=0x250, lpBuffer=0x25c69cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25c69cc*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5i mtNWlsmgQuUCq.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5i mtNWlsmgQuUCq.lnk", lpFilePart=0x0) returned 0x5b [0027.946] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5i mtNWlsmgQuUCq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5i mtnwlsmgquucq.lnk")) returned 1 [0027.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5ix_.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5ix_.lnk", lpFilePart=0x0) returned 0x4f [0027.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5ix_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5ix_.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.947] GetFileType (hFile=0x260) returned 0x1 [0027.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.948] GetFileType (hFile=0x260) returned 0x1 [0027.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5ix_.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5ix_.c0hen", lpFilePart=0x0) returned 0x51 [0027.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5ix_.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5ix_.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.948] GetFileType (hFile=0x250) returned 0x1 [0027.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.948] GetFileType (hFile=0x250) returned 0x1 [0027.948] ReadFile (in: hFile=0x260, lpBuffer=0x25c8ecc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25c8ecc*, lpNumberOfBytesRead=0x1ef150*=0x9ea, lpOverlapped=0x0) returned 1 [0027.949] ReadFile (in: hFile=0x260, lpBuffer=0x25c8ecc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25c8ecc*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5ix_.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5ix_.lnk", lpFilePart=0x0) returned 0x4f [0027.950] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5ix_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5ix_.lnk")) returned 1 [0027.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5N_Y4qimL.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5N_Y4qimL.flv.lnk", lpFilePart=0x0) returned 0x58 [0027.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5N_Y4qimL.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5n_y4qiml.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.951] GetFileType (hFile=0x250) returned 0x1 [0027.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.951] GetFileType (hFile=0x250) returned 0x1 [0027.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5N_Y4qimL.flv.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5N_Y4qimL.flv.c0hen", lpFilePart=0x0) returned 0x5a [0027.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5N_Y4qimL.flv.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5n_y4qiml.flv.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.951] GetFileType (hFile=0x260) returned 0x1 [0027.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.951] GetFileType (hFile=0x260) returned 0x1 [0027.952] ReadFile (in: hFile=0x250, lpBuffer=0x25cb424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25cb424*, lpNumberOfBytesRead=0x1ef150*=0x3ed, lpOverlapped=0x0) returned 1 [0027.952] ReadFile (in: hFile=0x250, lpBuffer=0x25cb424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25cb424*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5N_Y4qimL.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5N_Y4qimL.flv.lnk", lpFilePart=0x0) returned 0x58 [0027.953] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5N_Y4qimL.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5n_y4qiml.flv.lnk")) returned 1 [0027.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\80o71GHAzaITULQ.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\80o71GHAzaITULQ.lnk", lpFilePart=0x0) returned 0x5a [0027.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\80o71GHAzaITULQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\80o71ghazaitulq.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.954] GetFileType (hFile=0x260) returned 0x1 [0027.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.954] GetFileType (hFile=0x260) returned 0x1 [0027.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\80o71GHAzaITULQ.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\80o71GHAzaITULQ.c0hen", lpFilePart=0x0) returned 0x5c [0027.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\80o71GHAzaITULQ.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\80o71ghazaitulq.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.954] GetFileType (hFile=0x250) returned 0x1 [0027.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.954] GetFileType (hFile=0x250) returned 0x1 [0027.955] ReadFile (in: hFile=0x260, lpBuffer=0x25cd9a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25cd9a8*, lpNumberOfBytesRead=0x1ef150*=0x1f8, lpOverlapped=0x0) returned 1 [0027.955] ReadFile (in: hFile=0x260, lpBuffer=0x25cd9a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25cd9a8*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\80o71GHAzaITULQ.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\80o71GHAzaITULQ.lnk", lpFilePart=0x0) returned 0x5a [0027.956] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\80o71GHAzaITULQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\80o71ghazaitulq.lnk")) returned 1 [0027.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81e0IPjLMVYGc1Y.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81e0IPjLMVYGc1Y.lnk", lpFilePart=0x0) returned 0x5a [0027.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81e0IPjLMVYGc1Y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\81e0ipjlmvygc1y.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.957] GetFileType (hFile=0x250) returned 0x1 [0027.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.957] GetFileType (hFile=0x250) returned 0x1 [0027.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81e0IPjLMVYGc1Y.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81e0IPjLMVYGc1Y.c0hen", lpFilePart=0x0) returned 0x5c [0027.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81e0IPjLMVYGc1Y.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\81e0ipjlmvygc1y.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.958] GetFileType (hFile=0x260) returned 0x1 [0027.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.958] GetFileType (hFile=0x260) returned 0x1 [0027.958] ReadFile (in: hFile=0x250, lpBuffer=0x25cff30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25cff30*, lpNumberOfBytesRead=0x1ef150*=0x40b, lpOverlapped=0x0) returned 1 [0027.958] ReadFile (in: hFile=0x250, lpBuffer=0x25cff30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25cff30*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81e0IPjLMVYGc1Y.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81e0IPjLMVYGc1Y.lnk", lpFilePart=0x0) returned 0x5a [0027.959] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81e0IPjLMVYGc1Y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\81e0ipjlmvygc1y.lnk")) returned 1 [0027.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8DVQo1AMxG.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8DVQo1AMxG.flv.lnk", lpFilePart=0x0) returned 0x59 [0027.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8DVQo1AMxG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8dvqo1amxg.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.960] GetFileType (hFile=0x260) returned 0x1 [0027.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.960] GetFileType (hFile=0x260) returned 0x1 [0027.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8DVQo1AMxG.flv.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8DVQo1AMxG.flv.c0hen", lpFilePart=0x0) returned 0x5b [0027.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8DVQo1AMxG.flv.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8dvqo1amxg.flv.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.961] GetFileType (hFile=0x250) returned 0x1 [0027.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.961] GetFileType (hFile=0x250) returned 0x1 [0027.961] ReadFile (in: hFile=0x260, lpBuffer=0x25d24a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25d24a8*, lpNumberOfBytesRead=0x1ef150*=0x243, lpOverlapped=0x0) returned 1 [0027.961] ReadFile (in: hFile=0x260, lpBuffer=0x25d24a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25d24a8*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8DVQo1AMxG.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8DVQo1AMxG.flv.lnk", lpFilePart=0x0) returned 0x59 [0027.962] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8DVQo1AMxG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8dvqo1amxg.flv.lnk")) returned 1 [0027.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8He3Dub70HnEH9R.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8He3Dub70HnEH9R.lnk", lpFilePart=0x0) returned 0x5a [0027.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8He3Dub70HnEH9R.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8he3dub70hneh9r.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.963] GetFileType (hFile=0x250) returned 0x1 [0027.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.963] GetFileType (hFile=0x250) returned 0x1 [0027.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8He3Dub70HnEH9R.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8He3Dub70HnEH9R.c0hen", lpFilePart=0x0) returned 0x5c [0027.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8He3Dub70HnEH9R.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8he3dub70hneh9r.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.964] GetFileType (hFile=0x260) returned 0x1 [0027.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.964] GetFileType (hFile=0x260) returned 0x1 [0027.964] ReadFile (in: hFile=0x250, lpBuffer=0x25d4a2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25d4a2c*, lpNumberOfBytesRead=0x1ef150*=0xf83, lpOverlapped=0x0) returned 1 [0027.964] ReadFile (in: hFile=0x250, lpBuffer=0x25d4a2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25d4a2c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8He3Dub70HnEH9R.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8He3Dub70HnEH9R.lnk", lpFilePart=0x0) returned 0x5a [0027.965] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8He3Dub70HnEH9R.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8he3dub70hneh9r.lnk")) returned 1 [0027.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lxOsjLdfI_z6wDzZyb.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lxOsjLdfI_z6wDzZyb.lnk", lpFilePart=0x0) returned 0x5e [0027.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lxOsjLdfI_z6wDzZyb.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8lxosjldfi_z6wdzzyb.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.966] GetFileType (hFile=0x260) returned 0x1 [0027.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.966] GetFileType (hFile=0x260) returned 0x1 [0027.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lxOsjLdfI_z6wDzZyb.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lxOsjLdfI_z6wDzZyb.c0hen", lpFilePart=0x0) returned 0x60 [0027.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lxOsjLdfI_z6wDzZyb.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8lxosjldfi_z6wdzzyb.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.967] GetFileType (hFile=0x250) returned 0x1 [0027.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.967] GetFileType (hFile=0x250) returned 0x1 [0027.967] ReadFile (in: hFile=0x260, lpBuffer=0x25d6fe4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25d6fe4*, lpNumberOfBytesRead=0x1ef150*=0x270, lpOverlapped=0x0) returned 1 [0027.967] ReadFile (in: hFile=0x260, lpBuffer=0x25d6fe4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25d6fe4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lxOsjLdfI_z6wDzZyb.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lxOsjLdfI_z6wDzZyb.lnk", lpFilePart=0x0) returned 0x5e [0027.968] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lxOsjLdfI_z6wDzZyb.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8lxosjldfi_z6wdzzyb.lnk")) returned 1 [0027.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9GwHLY4Pi1N 5WAlea.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9GwHLY4Pi1N 5WAlea.lnk", lpFilePart=0x0) returned 0x5d [0027.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9GwHLY4Pi1N 5WAlea.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9gwhly4pi1n 5walea.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.969] GetFileType (hFile=0x250) returned 0x1 [0027.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.970] GetFileType (hFile=0x250) returned 0x1 [0027.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9GwHLY4Pi1N 5WAlea.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9GwHLY4Pi1N 5WAlea.c0hen", lpFilePart=0x0) returned 0x5f [0027.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9GwHLY4Pi1N 5WAlea.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9gwhly4pi1n 5walea.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.970] GetFileType (hFile=0x260) returned 0x1 [0027.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.970] GetFileType (hFile=0x260) returned 0x1 [0027.970] ReadFile (in: hFile=0x250, lpBuffer=0x25d9594, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25d9594*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0027.971] ReadFile (in: hFile=0x250, lpBuffer=0x25d9594, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25d9594*, lpNumberOfBytesRead=0x1ef150*=0xb45, lpOverlapped=0x0) returned 1 [0027.972] ReadFile (in: hFile=0x250, lpBuffer=0x25d9594, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25d9594*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9GwHLY4Pi1N 5WAlea.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9GwHLY4Pi1N 5WAlea.lnk", lpFilePart=0x0) returned 0x5d [0027.972] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9GwHLY4Pi1N 5WAlea.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9gwhly4pi1n 5walea.lnk")) returned 1 [0027.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9z8HbwgHtpQ9J0.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9z8HbwgHtpQ9J0.flv.lnk", lpFilePart=0x0) returned 0x5d [0027.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9z8HbwgHtpQ9J0.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9z8hbwghtpq9j0.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.973] GetFileType (hFile=0x260) returned 0x1 [0027.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.973] GetFileType (hFile=0x260) returned 0x1 [0027.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9z8HbwgHtpQ9J0.flv.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9z8HbwgHtpQ9J0.flv.c0hen", lpFilePart=0x0) returned 0x5f [0027.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9z8HbwgHtpQ9J0.flv.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9z8hbwghtpq9j0.flv.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.974] GetFileType (hFile=0x250) returned 0x1 [0027.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.974] GetFileType (hFile=0x250) returned 0x1 [0027.974] ReadFile (in: hFile=0x260, lpBuffer=0x25dbb40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25dbb40*, lpNumberOfBytesRead=0x1ef150*=0x327, lpOverlapped=0x0) returned 1 [0027.974] ReadFile (in: hFile=0x260, lpBuffer=0x25dbb40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25dbb40*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9z8HbwgHtpQ9J0.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9z8HbwgHtpQ9J0.flv.lnk", lpFilePart=0x0) returned 0x5d [0027.976] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9z8HbwgHtpQ9J0.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9z8hbwghtpq9j0.flv.lnk")) returned 1 [0027.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ZnOue.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ZnOue.lnk", lpFilePart=0x0) returned 0x51 [0027.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ZnOue.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9znoue.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.977] GetFileType (hFile=0x250) returned 0x1 [0027.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.977] GetFileType (hFile=0x250) returned 0x1 [0027.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ZnOue.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ZnOue.c0hen", lpFilePart=0x0) returned 0x53 [0027.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ZnOue.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9znoue.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.977] GetFileType (hFile=0x260) returned 0x1 [0027.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.977] GetFileType (hFile=0x260) returned 0x1 [0027.978] ReadFile (in: hFile=0x250, lpBuffer=0x25de05c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25de05c*, lpNumberOfBytesRead=0x1ef150*=0xa0b, lpOverlapped=0x0) returned 1 [0027.978] ReadFile (in: hFile=0x250, lpBuffer=0x25de05c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25de05c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ZnOue.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ZnOue.lnk", lpFilePart=0x0) returned 0x51 [0027.979] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ZnOue.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9znoue.lnk")) returned 1 [0027.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9zTx.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9zTx.lnk", lpFilePart=0x0) returned 0x4f [0027.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9zTx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9ztx.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.980] GetFileType (hFile=0x260) returned 0x1 [0027.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.980] GetFileType (hFile=0x260) returned 0x1 [0027.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9zTx.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9zTx.c0hen", lpFilePart=0x0) returned 0x51 [0027.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9zTx.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9ztx.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.980] GetFileType (hFile=0x250) returned 0x1 [0027.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.980] GetFileType (hFile=0x250) returned 0x1 [0027.981] ReadFile (in: hFile=0x260, lpBuffer=0x25e0548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e0548*, lpNumberOfBytesRead=0x1ef150*=0x9f1, lpOverlapped=0x0) returned 1 [0027.981] ReadFile (in: hFile=0x260, lpBuffer=0x25e0548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e0548*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9zTx.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9zTx.lnk", lpFilePart=0x0) returned 0x4f [0027.982] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9zTx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\9ztx.lnk")) returned 1 [0027.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Br81ndGpuiZbS.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Br81ndGpuiZbS.lnk", lpFilePart=0x0) returned 0x58 [0027.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Br81ndGpuiZbS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\br81ndgpuizbs.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.983] GetFileType (hFile=0x250) returned 0x1 [0027.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.983] GetFileType (hFile=0x250) returned 0x1 [0027.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Br81ndGpuiZbS.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Br81ndGpuiZbS.c0hen", lpFilePart=0x0) returned 0x5a [0027.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Br81ndGpuiZbS.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\br81ndgpuizbs.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.983] GetFileType (hFile=0x260) returned 0x1 [0027.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.984] GetFileType (hFile=0x260) returned 0x1 [0027.984] ReadFile (in: hFile=0x250, lpBuffer=0x25e2aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e2aa0*, lpNumberOfBytesRead=0x1ef150*=0xa58, lpOverlapped=0x0) returned 1 [0027.984] ReadFile (in: hFile=0x250, lpBuffer=0x25e2aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e2aa0*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Br81ndGpuiZbS.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Br81ndGpuiZbS.lnk", lpFilePart=0x0) returned 0x58 [0027.985] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Br81ndGpuiZbS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\br81ndgpuizbs.lnk")) returned 1 [0027.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BvyR9eNB2M.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BvyR9eNB2M.lnk", lpFilePart=0x0) returned 0x55 [0027.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BvyR9eNB2M.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bvyr9enb2m.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.986] GetFileType (hFile=0x260) returned 0x1 [0027.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.986] GetFileType (hFile=0x260) returned 0x1 [0027.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BvyR9eNB2M.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BvyR9eNB2M.c0hen", lpFilePart=0x0) returned 0x57 [0027.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BvyR9eNB2M.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bvyr9enb2m.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.987] GetFileType (hFile=0x250) returned 0x1 [0027.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.987] GetFileType (hFile=0x250) returned 0x1 [0027.987] ReadFile (in: hFile=0x260, lpBuffer=0x25e4fe4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fe4*, lpNumberOfBytesRead=0x1ef150*=0x1df, lpOverlapped=0x0) returned 1 [0027.987] ReadFile (in: hFile=0x260, lpBuffer=0x25e4fe4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fe4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BvyR9eNB2M.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BvyR9eNB2M.lnk", lpFilePart=0x0) returned 0x55 [0027.988] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BvyR9eNB2M.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bvyr9enb2m.lnk")) returned 1 [0027.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BXfeGqtGZhUWl6DPASf.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BXfeGqtGZhUWl6DPASf.lnk", lpFilePart=0x0) returned 0x5e [0027.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BXfeGqtGZhUWl6DPASf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bxfegqtgzhuwl6dpasf.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.992] GetFileType (hFile=0x250) returned 0x1 [0027.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.992] GetFileType (hFile=0x250) returned 0x1 [0027.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BXfeGqtGZhUWl6DPASf.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BXfeGqtGZhUWl6DPASf.c0hen", lpFilePart=0x0) returned 0x60 [0027.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BXfeGqtGZhUWl6DPASf.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bxfegqtgzhuwl6dpasf.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.992] GetFileType (hFile=0x260) returned 0x1 [0027.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.992] GetFileType (hFile=0x260) returned 0x1 [0027.993] ReadFile (in: hFile=0x250, lpBuffer=0x25e7590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e7590*, lpNumberOfBytesRead=0x1ef150*=0x41f, lpOverlapped=0x0) returned 1 [0027.993] ReadFile (in: hFile=0x250, lpBuffer=0x25e7590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e7590*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BXfeGqtGZhUWl6DPASf.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BXfeGqtGZhUWl6DPASf.lnk", lpFilePart=0x0) returned 0x5e [0027.994] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BXfeGqtGZhUWl6DPASf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bxfegqtgzhuwl6dpasf.lnk")) returned 1 [0027.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c51R3 8.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c51R3 8.lnk", lpFilePart=0x0) returned 0x52 [0027.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c51R3 8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c51r3 8.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0027.995] GetFileType (hFile=0x260) returned 0x1 [0027.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.995] GetFileType (hFile=0x260) returned 0x1 [0027.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c51R3 8.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c51R3 8.c0hen", lpFilePart=0x0) returned 0x54 [0027.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c51R3 8.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c51r3 8.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.995] GetFileType (hFile=0x250) returned 0x1 [0027.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.995] GetFileType (hFile=0x250) returned 0x1 [0027.996] ReadFile (in: hFile=0x260, lpBuffer=0x25e9ac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e9ac0*, lpNumberOfBytesRead=0x1ef150*=0xa0b, lpOverlapped=0x0) returned 1 [0027.996] ReadFile (in: hFile=0x260, lpBuffer=0x25e9ac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e9ac0*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0027.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c51R3 8.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c51R3 8.lnk", lpFilePart=0x0) returned 0x52 [0027.997] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c51R3 8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c51r3 8.lnk")) returned 1 [0027.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c7LEUPFgrxzlebwaqM.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c7LEUPFgrxzlebwaqM.lnk", lpFilePart=0x0) returned 0x5d [0027.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0027.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c7LEUPFgrxzlebwaqM.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c7leupfgrxzlebwaqm.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0027.998] GetFileType (hFile=0x250) returned 0x1 [0027.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0027.998] GetFileType (hFile=0x250) returned 0x1 [0028.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c7LEUPFgrxzlebwaqM.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c7LEUPFgrxzlebwaqM.c0hen", lpFilePart=0x0) returned 0x5f [0028.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c7LEUPFgrxzlebwaqM.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c7leupfgrxzlebwaqm.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.000] GetFileType (hFile=0x260) returned 0x1 [0028.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.000] GetFileType (hFile=0x260) returned 0x1 [0028.000] ReadFile (in: hFile=0x250, lpBuffer=0x25ec058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ec058*, lpNumberOfBytesRead=0x1ef150*=0xfa8, lpOverlapped=0x0) returned 1 [0028.001] ReadFile (in: hFile=0x250, lpBuffer=0x25ec058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ec058*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c7LEUPFgrxzlebwaqM.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c7LEUPFgrxzlebwaqM.lnk", lpFilePart=0x0) returned 0x5d [0028.001] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c7LEUPFgrxzlebwaqM.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c7leupfgrxzlebwaqm.lnk")) returned 1 [0028.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CbB1vyKEos.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CbB1vyKEos.lnk", lpFilePart=0x0) returned 0x55 [0028.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CbB1vyKEos.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cbb1vykeos.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.002] GetFileType (hFile=0x260) returned 0x1 [0028.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.003] GetFileType (hFile=0x260) returned 0x1 [0028.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CbB1vyKEos.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CbB1vyKEos.c0hen", lpFilePart=0x0) returned 0x57 [0028.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CbB1vyKEos.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cbb1vykeos.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.003] GetFileType (hFile=0x250) returned 0x1 [0028.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.003] GetFileType (hFile=0x250) returned 0x1 [0028.003] ReadFile (in: hFile=0x260, lpBuffer=0x25ee5a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ee5a4*, lpNumberOfBytesRead=0x1ef150*=0xa37, lpOverlapped=0x0) returned 1 [0028.004] ReadFile (in: hFile=0x260, lpBuffer=0x25ee5a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ee5a4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CbB1vyKEos.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CbB1vyKEos.lnk", lpFilePart=0x0) returned 0x55 [0028.005] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CbB1vyKEos.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cbb1vykeos.lnk")) returned 1 [0028.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cgustOsGiiKhdJd.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cgustOsGiiKhdJd.lnk", lpFilePart=0x0) returned 0x5a [0028.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cgustOsGiiKhdJd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cgustosgiikhdjd.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.006] GetFileType (hFile=0x250) returned 0x1 [0028.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.006] GetFileType (hFile=0x250) returned 0x1 [0028.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cgustOsGiiKhdJd.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cgustOsGiiKhdJd.c0hen", lpFilePart=0x0) returned 0x5c [0028.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cgustOsGiiKhdJd.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cgustosgiikhdjd.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.007] GetFileType (hFile=0x260) returned 0x1 [0028.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.007] GetFileType (hFile=0x260) returned 0x1 [0028.007] ReadFile (in: hFile=0x250, lpBuffer=0x25f0b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f0b20*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.008] ReadFile (in: hFile=0x250, lpBuffer=0x25f0b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f0b20*, lpNumberOfBytesRead=0x1ef150*=0x58c, lpOverlapped=0x0) returned 1 [0028.008] ReadFile (in: hFile=0x250, lpBuffer=0x25f0b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f0b20*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cgustOsGiiKhdJd.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cgustOsGiiKhdJd.lnk", lpFilePart=0x0) returned 0x5a [0028.008] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cgustOsGiiKhdJd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cgustosgiikhdjd.lnk")) returned 1 [0028.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cJD _B3.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cJD _B3.lnk", lpFilePart=0x0) returned 0x52 [0028.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cJD _B3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cjd _b3.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.009] GetFileType (hFile=0x260) returned 0x1 [0028.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.009] GetFileType (hFile=0x260) returned 0x1 [0028.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cJD _B3.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cJD _B3.c0hen", lpFilePart=0x0) returned 0x54 [0028.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cJD _B3.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cjd _b3.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.010] GetFileType (hFile=0x250) returned 0x1 [0028.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.010] GetFileType (hFile=0x250) returned 0x1 [0028.010] ReadFile (in: hFile=0x260, lpBuffer=0x25f3048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f3048*, lpNumberOfBytesRead=0x1ef150*=0xf2b, lpOverlapped=0x0) returned 1 [0028.010] ReadFile (in: hFile=0x260, lpBuffer=0x25f3048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f3048*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cJD _B3.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cJD _B3.lnk", lpFilePart=0x0) returned 0x52 [0028.011] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cJD _B3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cjd _b3.lnk")) returned 1 [0028.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cN72O4j69.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cN72O4j69.lnk", lpFilePart=0x0) returned 0x54 [0028.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cN72O4j69.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cn72o4j69.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.012] GetFileType (hFile=0x250) returned 0x1 [0028.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.013] GetFileType (hFile=0x250) returned 0x1 [0028.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cN72O4j69.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cN72O4j69.c0hen", lpFilePart=0x0) returned 0x56 [0028.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cN72O4j69.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cn72o4j69.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.013] GetFileType (hFile=0x260) returned 0x1 [0028.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.013] GetFileType (hFile=0x260) returned 0x1 [0028.013] ReadFile (in: hFile=0x250, lpBuffer=0x25f5578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f5578*, lpNumberOfBytesRead=0x1ef150*=0xf41, lpOverlapped=0x0) returned 1 [0028.014] ReadFile (in: hFile=0x250, lpBuffer=0x25f5578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f5578*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cN72O4j69.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cN72O4j69.lnk", lpFilePart=0x0) returned 0x54 [0028.014] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cN72O4j69.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cn72o4j69.lnk")) returned 1 [0028.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cRThzOZMpOedhnw-ul4p.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cRThzOZMpOedhnw-ul4p.lnk", lpFilePart=0x0) returned 0x5f [0028.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cRThzOZMpOedhnw-ul4p.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\crthzozmpoedhnw-ul4p.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.015] GetFileType (hFile=0x260) returned 0x1 [0028.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.016] GetFileType (hFile=0x260) returned 0x1 [0028.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cRThzOZMpOedhnw-ul4p.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cRThzOZMpOedhnw-ul4p.c0hen", lpFilePart=0x0) returned 0x61 [0028.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cRThzOZMpOedhnw-ul4p.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\crthzozmpoedhnw-ul4p.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.016] GetFileType (hFile=0x250) returned 0x1 [0028.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.016] GetFileType (hFile=0x250) returned 0x1 [0028.016] ReadFile (in: hFile=0x260, lpBuffer=0x25f7b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f7b2c*, lpNumberOfBytesRead=0x1ef150*=0xfcb, lpOverlapped=0x0) returned 1 [0028.017] ReadFile (in: hFile=0x260, lpBuffer=0x25f7b2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f7b2c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cRThzOZMpOedhnw-ul4p.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cRThzOZMpOedhnw-ul4p.lnk", lpFilePart=0x0) returned 0x5f [0028.017] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cRThzOZMpOedhnw-ul4p.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\crthzozmpoedhnw-ul4p.lnk")) returned 1 [0028.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cS94_Qi5vMbxo9.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cS94_Qi5vMbxo9.lnk", lpFilePart=0x0) returned 0x59 [0028.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cS94_Qi5vMbxo9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cs94_qi5vmbxo9.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.019] GetFileType (hFile=0x250) returned 0x1 [0028.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.019] GetFileType (hFile=0x250) returned 0x1 [0028.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cS94_Qi5vMbxo9.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cS94_Qi5vMbxo9.c0hen", lpFilePart=0x0) returned 0x5b [0028.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cS94_Qi5vMbxo9.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cs94_qi5vmbxo9.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.019] GetFileType (hFile=0x260) returned 0x1 [0028.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.019] GetFileType (hFile=0x260) returned 0x1 [0028.019] ReadFile (in: hFile=0x250, lpBuffer=0x25fa0ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fa0ac*, lpNumberOfBytesRead=0x1ef150*=0xa63, lpOverlapped=0x0) returned 1 [0028.020] ReadFile (in: hFile=0x250, lpBuffer=0x25fa0ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fa0ac*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cS94_Qi5vMbxo9.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cS94_Qi5vMbxo9.lnk", lpFilePart=0x0) returned 0x59 [0028.021] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cS94_Qi5vMbxo9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cs94_qi5vmbxo9.lnk")) returned 1 [0028.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUShc-.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUShc-.lnk", lpFilePart=0x0) returned 0x51 [0028.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUShc-.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cushc-.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.022] GetFileType (hFile=0x260) returned 0x1 [0028.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.022] GetFileType (hFile=0x260) returned 0x1 [0028.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUShc-.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUShc-.c0hen", lpFilePart=0x0) returned 0x53 [0028.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUShc-.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cushc-.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.023] GetFileType (hFile=0x250) returned 0x1 [0028.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.023] GetFileType (hFile=0x250) returned 0x1 [0028.023] ReadFile (in: hFile=0x260, lpBuffer=0x25fc5c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fc5c0*, lpNumberOfBytesRead=0x1ef150*=0x968, lpOverlapped=0x0) returned 1 [0028.024] ReadFile (in: hFile=0x260, lpBuffer=0x25fc5c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fc5c0*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUShc-.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUShc-.lnk", lpFilePart=0x0) returned 0x51 [0028.024] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUShc-.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cushc-.lnk")) returned 1 [0028.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\D04s 10CL9NZISChO.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\D04s 10CL9NZISChO.lnk", lpFilePart=0x0) returned 0x5c [0028.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\D04s 10CL9NZISChO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\d04s 10cl9nzischo.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.026] GetFileType (hFile=0x250) returned 0x1 [0028.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.026] GetFileType (hFile=0x250) returned 0x1 [0028.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\D04s 10CL9NZISChO.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\D04s 10CL9NZISChO.c0hen", lpFilePart=0x0) returned 0x5e [0028.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\D04s 10CL9NZISChO.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\d04s 10cl9nzischo.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.026] GetFileType (hFile=0x260) returned 0x1 [0028.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.026] GetFileType (hFile=0x260) returned 0x1 [0028.026] ReadFile (in: hFile=0x250, lpBuffer=0x25feb4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25feb4c*, lpNumberOfBytesRead=0x1ef150*=0x415, lpOverlapped=0x0) returned 1 [0028.027] ReadFile (in: hFile=0x250, lpBuffer=0x25feb4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25feb4c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\D04s 10CL9NZISChO.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\D04s 10CL9NZISChO.lnk", lpFilePart=0x0) returned 0x5c [0028.028] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\D04s 10CL9NZISChO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\d04s 10cl9nzischo.lnk")) returned 1 [0028.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dcRsARSR9x.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dcRsARSR9x.lnk", lpFilePart=0x0) returned 0x55 [0028.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dcRsARSR9x.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dcrsarsr9x.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.029] GetFileType (hFile=0x260) returned 0x1 [0028.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.029] GetFileType (hFile=0x260) returned 0x1 [0028.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dcRsARSR9x.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dcRsARSR9x.c0hen", lpFilePart=0x0) returned 0x57 [0028.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dcRsARSR9x.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dcrsarsr9x.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.030] GetFileType (hFile=0x250) returned 0x1 [0028.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.030] GetFileType (hFile=0x250) returned 0x1 [0028.030] ReadFile (in: hFile=0x260, lpBuffer=0x2601098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2601098*, lpNumberOfBytesRead=0x1ef150*=0xa37, lpOverlapped=0x0) returned 1 [0028.030] ReadFile (in: hFile=0x260, lpBuffer=0x2601098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2601098*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dcRsARSR9x.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dcRsARSR9x.lnk", lpFilePart=0x0) returned 0x55 [0028.031] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dcRsARSR9x.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dcrsarsr9x.lnk")) returned 1 [0028.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dd38zgiEsfVQ.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dd38zgiEsfVQ.lnk", lpFilePart=0x0) returned 0x57 [0028.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dd38zgiEsfVQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dd38zgiesfvq.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.032] GetFileType (hFile=0x250) returned 0x1 [0028.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.032] GetFileType (hFile=0x250) returned 0x1 [0028.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dd38zgiEsfVQ.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dd38zgiEsfVQ.c0hen", lpFilePart=0x0) returned 0x59 [0028.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dd38zgiEsfVQ.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dd38zgiesfvq.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.033] GetFileType (hFile=0x260) returned 0x1 [0028.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.033] GetFileType (hFile=0x260) returned 0x1 [0028.033] ReadFile (in: hFile=0x250, lpBuffer=0x26035ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26035ec*, lpNumberOfBytesRead=0x1ef150*=0xa46, lpOverlapped=0x0) returned 1 [0028.033] ReadFile (in: hFile=0x250, lpBuffer=0x26035ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26035ec*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dd38zgiEsfVQ.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dd38zgiEsfVQ.lnk", lpFilePart=0x0) returned 0x57 [0028.034] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dd38zgiEsfVQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dd38zgiesfvq.lnk")) returned 1 [0028.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x52 [0028.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.035] GetFileType (hFile=0x260) returned 0x1 [0028.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.035] GetFileType (hFile=0x260) returned 0x1 [0028.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.c0hen", lpFilePart=0x0) returned 0x54 [0028.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.036] GetFileType (hFile=0x250) returned 0x1 [0028.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.036] GetFileType (hFile=0x250) returned 0x1 [0028.036] ReadFile (in: hFile=0x260, lpBuffer=0x2605b0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2605b0c*, lpNumberOfBytesRead=0x1ef150*=0x1b0, lpOverlapped=0x0) returned 1 [0028.037] ReadFile (in: hFile=0x260, lpBuffer=0x2605b0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2605b0c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x52 [0028.038] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini")) returned 1 [0028.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DeSSJ75LCOEFdIdQW.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DeSSJ75LCOEFdIdQW.lnk", lpFilePart=0x0) returned 0x5c [0028.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DeSSJ75LCOEFdIdQW.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dessj75lcoefdidqw.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.039] GetFileType (hFile=0x250) returned 0x1 [0028.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.039] GetFileType (hFile=0x250) returned 0x1 [0028.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DeSSJ75LCOEFdIdQW.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DeSSJ75LCOEFdIdQW.c0hen", lpFilePart=0x0) returned 0x5e [0028.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DeSSJ75LCOEFdIdQW.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dessj75lcoefdidqw.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.040] GetFileType (hFile=0x260) returned 0x1 [0028.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.040] GetFileType (hFile=0x260) returned 0x1 [0028.040] ReadFile (in: hFile=0x250, lpBuffer=0x260809c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x260809c*, lpNumberOfBytesRead=0x1ef150*=0xa79, lpOverlapped=0x0) returned 1 [0028.040] ReadFile (in: hFile=0x250, lpBuffer=0x260809c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x260809c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DeSSJ75LCOEFdIdQW.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DeSSJ75LCOEFdIdQW.lnk", lpFilePart=0x0) returned 0x5c [0028.041] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DeSSJ75LCOEFdIdQW.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dessj75lcoefdidqw.lnk")) returned 1 [0028.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DNJ.mkv.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DNJ.mkv.lnk", lpFilePart=0x0) returned 0x52 [0028.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DNJ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dnj.mkv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.042] GetFileType (hFile=0x260) returned 0x1 [0028.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.042] GetFileType (hFile=0x260) returned 0x1 [0028.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DNJ.mkv.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DNJ.mkv.c0hen", lpFilePart=0x0) returned 0x54 [0028.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DNJ.mkv.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dnj.mkv.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.043] GetFileType (hFile=0x250) returned 0x1 [0028.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.043] GetFileType (hFile=0x250) returned 0x1 [0028.043] ReadFile (in: hFile=0x260, lpBuffer=0x260a5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x260a5c8*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.044] ReadFile (in: hFile=0x260, lpBuffer=0x260a5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x260a5c8*, lpNumberOfBytesRead=0x1ef150*=0x2ea, lpOverlapped=0x0) returned 1 [0028.044] ReadFile (in: hFile=0x260, lpBuffer=0x260a5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x260a5c8*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DNJ.mkv.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DNJ.mkv.lnk", lpFilePart=0x0) returned 0x52 [0028.044] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DNJ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dnj.mkv.lnk")) returned 1 [0028.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dnkvME.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dnkvME.lnk", lpFilePart=0x0) returned 0x51 [0028.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dnkvME.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dnkvme.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.045] GetFileType (hFile=0x250) returned 0x1 [0028.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.046] GetFileType (hFile=0x250) returned 0x1 [0028.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dnkvME.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dnkvME.c0hen", lpFilePart=0x0) returned 0x53 [0028.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dnkvME.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dnkvme.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.046] GetFileType (hFile=0x260) returned 0x1 [0028.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.046] GetFileType (hFile=0x260) returned 0x1 [0028.046] ReadFile (in: hFile=0x250, lpBuffer=0x260cad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x260cad0*, lpNumberOfBytesRead=0x1ef150*=0xa04, lpOverlapped=0x0) returned 1 [0028.046] ReadFile (in: hFile=0x250, lpBuffer=0x260cad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x260cad0*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dnkvME.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dnkvME.lnk", lpFilePart=0x0) returned 0x51 [0028.047] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dnkvME.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dnkvme.lnk")) returned 1 [0028.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dp_yXN43X6K5RtxgtN3p.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dp_yXN43X6K5RtxgtN3p.lnk", lpFilePart=0x0) returned 0x5f [0028.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dp_yXN43X6K5RtxgtN3p.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dp_yxn43x6k5rtxgtn3p.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.048] GetFileType (hFile=0x260) returned 0x1 [0028.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.049] GetFileType (hFile=0x260) returned 0x1 [0028.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dp_yXN43X6K5RtxgtN3p.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dp_yXN43X6K5RtxgtN3p.c0hen", lpFilePart=0x0) returned 0x61 [0028.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dp_yXN43X6K5RtxgtN3p.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dp_yxn43x6k5rtxgtn3p.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.049] GetFileType (hFile=0x250) returned 0x1 [0028.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.049] GetFileType (hFile=0x250) returned 0x1 [0028.049] ReadFile (in: hFile=0x260, lpBuffer=0x260f07c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x260f07c*, lpNumberOfBytesRead=0x1ef150*=0xaa5, lpOverlapped=0x0) returned 1 [0028.050] ReadFile (in: hFile=0x260, lpBuffer=0x260f07c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x260f07c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dp_yXN43X6K5RtxgtN3p.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dp_yXN43X6K5RtxgtN3p.lnk", lpFilePart=0x0) returned 0x5f [0028.051] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dp_yXN43X6K5RtxgtN3p.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dp_yxn43x6k5rtxgtn3p.lnk")) returned 1 [0028.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E1R8u1P6 Zcs.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E1R8u1P6 Zcs.lnk", lpFilePart=0x0) returned 0x57 [0028.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E1R8u1P6 Zcs.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e1r8u1p6 zcs.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.052] GetFileType (hFile=0x250) returned 0x1 [0028.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.052] GetFileType (hFile=0x250) returned 0x1 [0028.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E1R8u1P6 Zcs.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E1R8u1P6 Zcs.c0hen", lpFilePart=0x0) returned 0x59 [0028.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E1R8u1P6 Zcs.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e1r8u1p6 zcs.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.052] GetFileType (hFile=0x260) returned 0x1 [0028.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.052] GetFileType (hFile=0x260) returned 0x1 [0028.053] ReadFile (in: hFile=0x250, lpBuffer=0x26115e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26115e4*, lpNumberOfBytesRead=0x1ef150*=0xf88, lpOverlapped=0x0) returned 1 [0028.053] ReadFile (in: hFile=0x250, lpBuffer=0x26115e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26115e4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E1R8u1P6 Zcs.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E1R8u1P6 Zcs.lnk", lpFilePart=0x0) returned 0x57 [0028.054] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E1R8u1P6 Zcs.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e1r8u1p6 zcs.lnk")) returned 1 [0028.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6KILj.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6KILj.lnk", lpFilePart=0x0) returned 0x51 [0028.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6KILj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e6kilj.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.055] GetFileType (hFile=0x260) returned 0x1 [0028.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.055] GetFileType (hFile=0x260) returned 0x1 [0028.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6KILj.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6KILj.c0hen", lpFilePart=0x0) returned 0x53 [0028.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6KILj.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e6kilj.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.055] GetFileType (hFile=0x250) returned 0x1 [0028.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.056] GetFileType (hFile=0x250) returned 0x1 [0028.056] ReadFile (in: hFile=0x260, lpBuffer=0x2613af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2613af4*, lpNumberOfBytesRead=0x1ef150*=0x9eb, lpOverlapped=0x0) returned 1 [0028.056] ReadFile (in: hFile=0x260, lpBuffer=0x2613af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2613af4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6KILj.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6KILj.lnk", lpFilePart=0x0) returned 0x51 [0028.059] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6KILj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e6kilj.lnk")) returned 1 [0028.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eAATutbUmb_VDJM4KNL.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eAATutbUmb_VDJM4KNL.lnk", lpFilePart=0x0) returned 0x5e [0028.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eAATutbUmb_VDJM4KNL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eaatutbumb_vdjm4knl.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.060] GetFileType (hFile=0x250) returned 0x1 [0028.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.060] GetFileType (hFile=0x250) returned 0x1 [0028.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eAATutbUmb_VDJM4KNL.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eAATutbUmb_VDJM4KNL.c0hen", lpFilePart=0x0) returned 0x60 [0028.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eAATutbUmb_VDJM4KNL.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eaatutbumb_vdjm4knl.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.061] GetFileType (hFile=0x260) returned 0x1 [0028.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.061] GetFileType (hFile=0x260) returned 0x1 [0028.061] ReadFile (in: hFile=0x250, lpBuffer=0x2616098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2616098*, lpNumberOfBytesRead=0x1ef150*=0xa9a, lpOverlapped=0x0) returned 1 [0028.061] ReadFile (in: hFile=0x250, lpBuffer=0x2616098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2616098*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eAATutbUmb_VDJM4KNL.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eAATutbUmb_VDJM4KNL.lnk", lpFilePart=0x0) returned 0x5e [0028.062] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eAATutbUmb_VDJM4KNL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eaatutbumb_vdjm4knl.lnk")) returned 1 [0028.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ejwsu-z2NBo3.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ejwsu-z2NBo3.lnk", lpFilePart=0x0) returned 0x57 [0028.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ejwsu-z2NBo3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ejwsu-z2nbo3.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.063] GetFileType (hFile=0x260) returned 0x1 [0028.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.063] GetFileType (hFile=0x260) returned 0x1 [0028.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ejwsu-z2NBo3.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ejwsu-z2NBo3.c0hen", lpFilePart=0x0) returned 0x59 [0028.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ejwsu-z2NBo3.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ejwsu-z2nbo3.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.066] GetFileType (hFile=0x250) returned 0x1 [0028.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.066] GetFileType (hFile=0x250) returned 0x1 [0028.066] ReadFile (in: hFile=0x260, lpBuffer=0x2618600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2618600*, lpNumberOfBytesRead=0x1ef150*=0x3fc, lpOverlapped=0x0) returned 1 [0028.066] ReadFile (in: hFile=0x260, lpBuffer=0x2618600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2618600*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ejwsu-z2NBo3.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ejwsu-z2NBo3.lnk", lpFilePart=0x0) returned 0x57 [0028.067] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ejwsu-z2NBo3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ejwsu-z2nbo3.lnk")) returned 1 [0028.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eNKnVRpRhD.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eNKnVRpRhD.flv.lnk", lpFilePart=0x0) returned 0x59 [0028.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eNKnVRpRhD.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\enknvrprhd.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.068] GetFileType (hFile=0x250) returned 0x1 [0028.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.068] GetFileType (hFile=0x250) returned 0x1 [0028.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eNKnVRpRhD.flv.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eNKnVRpRhD.flv.c0hen", lpFilePart=0x0) returned 0x5b [0028.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eNKnVRpRhD.flv.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\enknvrprhd.flv.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.069] GetFileType (hFile=0x260) returned 0x1 [0028.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.069] GetFileType (hFile=0x260) returned 0x1 [0028.069] ReadFile (in: hFile=0x250, lpBuffer=0x261ab70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x261ab70*, lpNumberOfBytesRead=0x1ef150*=0x3a4, lpOverlapped=0x0) returned 1 [0028.069] ReadFile (in: hFile=0x250, lpBuffer=0x261ab70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x261ab70*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eNKnVRpRhD.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eNKnVRpRhD.flv.lnk", lpFilePart=0x0) returned 0x59 [0028.070] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eNKnVRpRhD.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\enknvrprhd.flv.lnk")) returned 1 [0028.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eQ547LTHptJ0mNXaW4.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eQ547LTHptJ0mNXaW4.lnk", lpFilePart=0x0) returned 0x5d [0028.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eQ547LTHptJ0mNXaW4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eq547lthptj0mnxaw4.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.071] GetFileType (hFile=0x260) returned 0x1 [0028.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.071] GetFileType (hFile=0x260) returned 0x1 [0028.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eQ547LTHptJ0mNXaW4.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eQ547LTHptJ0mNXaW4.c0hen", lpFilePart=0x0) returned 0x5f [0028.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eQ547LTHptJ0mNXaW4.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eq547lthptj0mnxaw4.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.072] GetFileType (hFile=0x250) returned 0x1 [0028.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.072] GetFileType (hFile=0x250) returned 0x1 [0028.072] ReadFile (in: hFile=0x260, lpBuffer=0x261d114, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x261d114*, lpNumberOfBytesRead=0x1ef150*=0x41a, lpOverlapped=0x0) returned 1 [0028.073] ReadFile (in: hFile=0x260, lpBuffer=0x261d114, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x261d114*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eQ547LTHptJ0mNXaW4.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eQ547LTHptJ0mNXaW4.lnk", lpFilePart=0x0) returned 0x5d [0028.073] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eQ547LTHptJ0mNXaW4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eq547lthptj0mnxaw4.lnk")) returned 1 [0028.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eVQvx-zVLXbOUuS.mkv.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eVQvx-zVLXbOUuS.mkv.lnk", lpFilePart=0x0) returned 0x5e [0028.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eVQvx-zVLXbOUuS.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\evqvx-zvlxbouus.mkv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.074] GetFileType (hFile=0x250) returned 0x1 [0028.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.075] GetFileType (hFile=0x250) returned 0x1 [0028.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eVQvx-zVLXbOUuS.mkv.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eVQvx-zVLXbOUuS.mkv.c0hen", lpFilePart=0x0) returned 0x60 [0028.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eVQvx-zVLXbOUuS.mkv.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\evqvx-zvlxbouus.mkv.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.075] GetFileType (hFile=0x260) returned 0x1 [0028.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.075] GetFileType (hFile=0x260) returned 0x1 [0028.075] ReadFile (in: hFile=0x250, lpBuffer=0x261f6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x261f6d0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.076] ReadFile (in: hFile=0x250, lpBuffer=0x261f6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x261f6d0*, lpNumberOfBytesRead=0x1ef150*=0x40f, lpOverlapped=0x0) returned 1 [0028.076] ReadFile (in: hFile=0x250, lpBuffer=0x261f6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x261f6d0*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eVQvx-zVLXbOUuS.mkv.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eVQvx-zVLXbOUuS.mkv.lnk", lpFilePart=0x0) returned 0x5e [0028.077] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eVQvx-zVLXbOUuS.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\evqvx-zvlxbouus.mkv.lnk")) returned 1 [0028.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fCy-.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fCy-.lnk", lpFilePart=0x0) returned 0x4f [0028.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fCy-.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fcy-.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.078] GetFileType (hFile=0x260) returned 0x1 [0028.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.078] GetFileType (hFile=0x260) returned 0x1 [0028.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fCy-.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fCy-.c0hen", lpFilePart=0x0) returned 0x51 [0028.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fCy-.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fcy-.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.078] GetFileType (hFile=0x250) returned 0x1 [0028.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.079] GetFileType (hFile=0x250) returned 0x1 [0028.079] ReadFile (in: hFile=0x260, lpBuffer=0x2621bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2621bd8*, lpNumberOfBytesRead=0x1ef150*=0x9f1, lpOverlapped=0x0) returned 1 [0028.079] ReadFile (in: hFile=0x260, lpBuffer=0x2621bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2621bd8*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fCy-.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fCy-.lnk", lpFilePart=0x0) returned 0x4f [0028.080] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fCy-.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fcy-.lnk")) returned 1 [0028.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FqdKj83ZYlL2BN2VeP.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FqdKj83ZYlL2BN2VeP.lnk", lpFilePart=0x0) returned 0x5d [0028.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FqdKj83ZYlL2BN2VeP.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fqdkj83zyll2bn2vep.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.081] GetFileType (hFile=0x250) returned 0x1 [0028.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.081] GetFileType (hFile=0x250) returned 0x1 [0028.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FqdKj83ZYlL2BN2VeP.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FqdKj83ZYlL2BN2VeP.c0hen", lpFilePart=0x0) returned 0x5f [0028.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FqdKj83ZYlL2BN2VeP.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fqdkj83zyll2bn2vep.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.081] GetFileType (hFile=0x260) returned 0x1 [0028.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.082] GetFileType (hFile=0x260) returned 0x1 [0028.082] ReadFile (in: hFile=0x250, lpBuffer=0x2624168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2624168*, lpNumberOfBytesRead=0x1ef150*=0x9f0, lpOverlapped=0x0) returned 1 [0028.082] ReadFile (in: hFile=0x250, lpBuffer=0x2624168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2624168*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FqdKj83ZYlL2BN2VeP.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FqdKj83ZYlL2BN2VeP.lnk", lpFilePart=0x0) returned 0x5d [0028.083] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FqdKj83ZYlL2BN2VeP.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fqdkj83zyll2bn2vep.lnk")) returned 1 [0028.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fzcbqDEDL0GcWut0Ec9.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fzcbqDEDL0GcWut0Ec9.flv.lnk", lpFilePart=0x0) returned 0x62 [0028.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fzcbqDEDL0GcWut0Ec9.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fzcbqdedl0gcwut0ec9.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.084] GetFileType (hFile=0x260) returned 0x1 [0028.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.084] GetFileType (hFile=0x260) returned 0x1 [0028.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fzcbqDEDL0GcWut0Ec9.flv.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fzcbqDEDL0GcWut0Ec9.flv.c0hen", lpFilePart=0x0) returned 0x64 [0028.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fzcbqDEDL0GcWut0Ec9.flv.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fzcbqdedl0gcwut0ec9.flv.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.085] GetFileType (hFile=0x250) returned 0x1 [0028.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.085] GetFileType (hFile=0x250) returned 0x1 [0028.085] ReadFile (in: hFile=0x260, lpBuffer=0x2626754, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2626754*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.086] ReadFile (in: hFile=0x260, lpBuffer=0x2626754, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2626754*, lpNumberOfBytesRead=0x1ef150*=0x43b, lpOverlapped=0x0) returned 1 [0028.086] ReadFile (in: hFile=0x260, lpBuffer=0x2626754, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2626754*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fzcbqDEDL0GcWut0Ec9.flv.lnk", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fzcbqDEDL0GcWut0Ec9.flv.lnk", lpFilePart=0x0) returned 0x62 [0028.086] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fzcbqDEDL0GcWut0Ec9.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fzcbqdedl0gcwut0ec9.flv.lnk")) returned 1 [0028.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g9xjU0jha.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g9xjU0jha.lnk", lpFilePart=0x0) returned 0x54 [0028.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g9xjU0jha.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\g9xju0jha.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.087] GetFileType (hFile=0x250) returned 0x1 [0028.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g9xjU0jha.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g9xjU0jha.c0hen", lpFilePart=0x0) returned 0x56 [0028.089] ReadFile (in: hFile=0x250, lpBuffer=0x2628ca4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2628ca4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.090] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g9xjU0jha.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\g9xju0jha.lnk")) returned 1 [0028.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gAlCj3Ceg3rmmOg4.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gAlCj3Ceg3rmmOg4.c0hen", lpFilePart=0x0) returned 0x5d [0028.091] ReadFile (in: hFile=0x260, lpBuffer=0x262b228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x262b228*, lpNumberOfBytesRead=0x1ef150*=0x261, lpOverlapped=0x0) returned 1 [0028.092] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gAlCj3Ceg3rmmOg4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\galcj3ceg3rmmog4.lnk")) returned 1 [0028.094] ReadFile (in: hFile=0x250, lpBuffer=0x262d7b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x262d7b8*, lpNumberOfBytesRead=0x1ef150*=0xf92, lpOverlapped=0x0) returned 1 [0028.095] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gd8bTHUj2uGWJXSg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gd8bthuj2ugwjxsg.lnk")) returned 1 [0028.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GF4RfFXwP3j_k.lnk", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GF4RfFXwP3j_k.lnk", lpFilePart=0x0) returned 0x58 [0028.096] ReadFile (in: hFile=0x260, lpBuffer=0x262fd28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x262fd28*, lpNumberOfBytesRead=0x1ef150*=0xa4d, lpOverlapped=0x0) returned 1 [0028.097] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GF4RfFXwP3j_k.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gf4rffxwp3j_k.lnk")) returned 1 [0028.099] ReadFile (in: hFile=0x250, lpBuffer=0x263226c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x263226c*, lpNumberOfBytesRead=0x1ef150*=0x22d, lpOverlapped=0x0) returned 1 [0028.100] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gY1Sw4.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gy1sw4.mkv.lnk")) returned 1 [0028.101] ReadFile (in: hFile=0x260, lpBuffer=0x2634800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2634800*, lpNumberOfBytesRead=0x1ef150*=0x266, lpOverlapped=0x0) returned 1 [0028.102] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GYhp5VSqkDaEbEs44.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gyhp5vsqkdaebes44.lnk")) returned 1 [0028.103] ReadFile (in: hFile=0x250, lpBuffer=0x2636d34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2636d34*, lpNumberOfBytesRead=0x1ef150*=0x239, lpOverlapped=0x0) returned 1 [0028.104] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HAaq4t0C.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\haaq4t0c.lnk")) returned 1 [0028.106] ReadFile (in: hFile=0x260, lpBuffer=0x263927c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x263927c*, lpNumberOfBytesRead=0x1ef150*=0xa37, lpOverlapped=0x0) returned 1 [0028.107] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hb13rDf6MEP.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hb13rdf6mep.lnk")) returned 1 [0028.108] ReadFile (in: hFile=0x250, lpBuffer=0x263b844, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x263b844*, lpNumberOfBytesRead=0x1ef150*=0x415, lpOverlapped=0x0) returned 1 [0028.109] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hhu2TEzPiZ r1JfZD.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hhu2tezpiz r1jfzd.mkv.lnk")) returned 1 [0028.110] ReadFile (in: hFile=0x260, lpBuffer=0x263dd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x263dd68*, lpNumberOfBytesRead=0x1ef150*=0xa04, lpOverlapped=0x0) returned 1 [0028.111] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IbcTBf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ibctbf.lnk")) returned 1 [0028.113] ReadFile (in: hFile=0x250, lpBuffer=0x264029c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x264029c*, lpNumberOfBytesRead=0x1ef150*=0x243, lpOverlapped=0x0) returned 1 [0028.113] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IcfKmGMarj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\icfkmgmarj.lnk")) returned 1 [0028.115] ReadFile (in: hFile=0x260, lpBuffer=0x26427e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26427e8*, lpNumberOfBytesRead=0x1ef150*=0x9b3, lpOverlapped=0x0) returned 1 [0028.116] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\if-eoyY.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\if-eoyy.flv.lnk")) returned 1 [0028.117] ReadFile (in: hFile=0x250, lpBuffer=0x2644ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2644ce0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.118] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ipZS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ipzs.lnk")) returned 1 [0028.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IqPmklJ.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IqPmklJ.c0hen", lpFilePart=0x0) returned 0x54 [0028.120] ReadFile (in: hFile=0x260, lpBuffer=0x26471f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26471f0*, lpNumberOfBytesRead=0x1ef150*=0x3e8, lpOverlapped=0x0) returned 1 [0028.121] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IqPmklJ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iqpmklj.lnk")) returned 1 [0028.122] ReadFile (in: hFile=0x250, lpBuffer=0x2649798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2649798*, lpNumberOfBytesRead=0x1ef150*=0x310, lpOverlapped=0x0) returned 1 [0028.123] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iRlHsSbPC5H6Swl.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\irlhssbpc5h6swl.mkv.lnk")) returned 1 [0028.125] ReadFile (in: hFile=0x260, lpBuffer=0x264bc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x264bc98*, lpNumberOfBytesRead=0x1ef150*=0x9e6, lpOverlapped=0x0) returned 1 [0028.126] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iuw.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iuw.lnk")) returned 1 [0028.127] ReadFile (in: hFile=0x250, lpBuffer=0x264e190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x264e190*, lpNumberOfBytesRead=0x1ef150*=0xa00, lpOverlapped=0x0) returned 1 [0028.128] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiZ31.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\jiz31.lnk")) returned 1 [0028.131] ReadFile (in: hFile=0x260, lpBuffer=0x26506ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26506ac*, lpNumberOfBytesRead=0x1ef150*=0xf3a, lpOverlapped=0x0) returned 1 [0028.132] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jjt7sFbN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\jjt7sfbn.lnk")) returned 1 [0028.134] ReadFile (in: hFile=0x250, lpBuffer=0x2652c44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2652c44*, lpNumberOfBytesRead=0x1ef150*=0xf21, lpOverlapped=0x0) returned 1 [0028.134] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JqYUKNzSPCc5n2XlJT.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\jqyuknzspcc5n2xljt.lnk")) returned 1 [0028.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KAktXgTtMW-tTm4Tz.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KAktXgTtMW-tTm4Tz.c0hen", lpFilePart=0x0) returned 0x5e [0028.136] ReadFile (in: hFile=0x260, lpBuffer=0x26551e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26551e8*, lpNumberOfBytesRead=0x1ef150*=0xf99, lpOverlapped=0x0) returned 1 [0028.137] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KAktXgTtMW-tTm4Tz.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kaktxgttmw-ttm4tz.lnk")) returned 1 [0028.138] ReadFile (in: hFile=0x250, lpBuffer=0x265774c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x265774c*, lpNumberOfBytesRead=0x1ef150*=0xf66, lpOverlapped=0x0) returned 1 [0028.139] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kdIG 9yUFvwB.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kdig 9yufvwb.lnk")) returned 1 [0028.141] ReadFile (in: hFile=0x260, lpBuffer=0x2659cbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2659cbc*, lpNumberOfBytesRead=0x1ef150*=0xece, lpOverlapped=0x0) returned 1 [0028.141] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kKrlFyGLLTXR_T.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kkrlfyglltxr_t.lnk")) returned 1 [0028.143] ReadFile (in: hFile=0x250, lpBuffer=0x265c1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x265c1e0*, lpNumberOfBytesRead=0x1ef150*=0x393, lpOverlapped=0x0) returned 1 [0028.144] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ky5lF0Y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ky5lf0y.lnk")) returned 1 [0028.145] ReadFile (in: hFile=0x260, lpBuffer=0x265e790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x265e790*, lpNumberOfBytesRead=0x1ef150*=0xaa5, lpOverlapped=0x0) returned 1 [0028.146] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KysDy-X2xmrskAOxQ7Fs.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kysdy-x2xmrskaoxq7fs.lnk")) returned 1 [0028.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCUF3TI.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lcuf3ti.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.148] ReadFile (in: hFile=0x250, lpBuffer=0x2660cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2660cc0*, lpNumberOfBytesRead=0x1ef150*=0xe0c, lpOverlapped=0x0) returned 1 [0028.149] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCUF3TI.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lcuf3ti.lnk")) returned 1 [0028.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lF8d-naj5tdxd.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lF8d-naj5tdxd.c0hen", lpFilePart=0x0) returned 0x5a [0028.150] ReadFile (in: hFile=0x260, lpBuffer=0x2663220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2663220*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.151] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lF8d-naj5tdxd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lf8d-naj5tdxd.lnk")) returned 1 [0028.152] ReadFile (in: hFile=0x250, lpBuffer=0x26657c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26657c4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.154] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lRp_ 6tW 7f1KHvREJ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lrp_ 6tw 7f1khvrej.lnk")) returned 1 [0028.155] ReadFile (in: hFile=0x260, lpBuffer=0x2667d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2667d58*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.156] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lwp_7PmRN8l4oABq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lwp_7pmrn8l4oabq.lnk")) returned 1 [0028.157] ReadFile (in: hFile=0x250, lpBuffer=0x266a2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x266a2f8*, lpNumberOfBytesRead=0x1ef150*=0x9e1, lpOverlapped=0x0) returned 1 [0028.158] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\M2d_cc8gnZin7YA-J.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\m2d_cc8gnzin7ya-j.lnk")) returned 1 [0028.160] ReadFile (in: hFile=0x260, lpBuffer=0x266c80c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x266c80c*, lpNumberOfBytesRead=0x1ef150*=0x9dc, lpOverlapped=0x0) returned 1 [0028.161] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MEGzx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\megzx.lnk")) returned 1 [0028.162] ReadFile (in: hFile=0x250, lpBuffer=0x266ed50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x266ed50*, lpNumberOfBytesRead=0x1ef150*=0xe3c, lpOverlapped=0x0) returned 1 [0028.163] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mFo0Ey2r6xi.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mfo0ey2r6xi.lnk")) returned 1 [0028.165] ReadFile (in: hFile=0x260, lpBuffer=0x26712c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26712c0*, lpNumberOfBytesRead=0x1ef150*=0xed7, lpOverlapped=0x0) returned 1 [0028.166] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mj2r I-OcYNHT4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mj2r i-ocynht4.lnk")) returned 1 [0028.167] ReadFile (in: hFile=0x250, lpBuffer=0x26737fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26737fc*, lpNumberOfBytesRead=0x1ef150*=0xa2c, lpOverlapped=0x0) returned 1 [0028.168] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mk6xVSF-P.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mk6xvsf-p.lnk")) returned 1 [0028.170] ReadFile (in: hFile=0x260, lpBuffer=0x2675d38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2675d38*, lpNumberOfBytesRead=0x1ef150*=0xea2, lpOverlapped=0x0) returned 1 [0028.171] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msuF0mBRuI.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\msuf0mbrui.lnk")) returned 1 [0028.174] ReadFile (in: hFile=0x250, lpBuffer=0x267825c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x267825c*, lpNumberOfBytesRead=0x1ef150*=0x52a, lpOverlapped=0x0) returned 1 [0028.175] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my music.lnk")) returned 1 [0028.177] ReadFile (in: hFile=0x260, lpBuffer=0x267a7a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x267a7a4*, lpNumberOfBytesRead=0x1ef150*=0x54f, lpOverlapped=0x0) returned 1 [0028.178] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my pictures.lnk")) returned 1 [0028.179] ReadFile (in: hFile=0x250, lpBuffer=0x267ccdc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x267ccdc*, lpNumberOfBytesRead=0x1ef150*=0x539, lpOverlapped=0x0) returned 1 [0028.180] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my videos.lnk")) returned 1 [0028.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mZo0B.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mZo0B.c0hen", lpFilePart=0x0) returned 0x52 [0028.181] ReadFile (in: hFile=0x260, lpBuffer=0x267f1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x267f1e0*, lpNumberOfBytesRead=0x1ef150*=0x9f1, lpOverlapped=0x0) returned 1 [0028.182] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mZo0B.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mzo0b.lnk")) returned 1 [0028.184] ReadFile (in: hFile=0x250, lpBuffer=0x26816f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26816f4*, lpNumberOfBytesRead=0x1ef150*=0xdcd, lpOverlapped=0x0) returned 1 [0028.185] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nA GHiq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\na ghiq.lnk")) returned 1 [0028.186] ReadFile (in: hFile=0x260, lpBuffer=0x2683c54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2683c54*, lpNumberOfBytesRead=0x1ef150*=0xf7a, lpOverlapped=0x0) returned 1 [0028.187] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NN2-R09BiVpMj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\nn2-r09bivpmj.lnk")) returned 1 [0028.188] ReadFile (in: hFile=0x250, lpBuffer=0x2686190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2686190*, lpNumberOfBytesRead=0x1ef150*=0x23e, lpOverlapped=0x0) returned 1 [0028.189] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NpGu4rSKh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\npgu4rskh.lnk")) returned 1 [0028.191] ReadFile (in: hFile=0x260, lpBuffer=0x26886f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26886f4*, lpNumberOfBytesRead=0x1ef150*=0xed3, lpOverlapped=0x0) returned 1 [0028.192] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NY6DYEi_9hJz3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ny6dyei_9hjz3.lnk")) returned 1 [0028.193] ReadFile (in: hFile=0x250, lpBuffer=0x268ac08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x268ac08*, lpNumberOfBytesRead=0x1ef150*=0x22d, lpOverlapped=0x0) returned 1 [0028.194] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oa1XCE.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\oa1xce.lnk")) returned 1 [0028.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODGc.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODGc.c0hen", lpFilePart=0x0) returned 0x51 [0028.196] ReadFile (in: hFile=0x260, lpBuffer=0x268d0f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x268d0f4*, lpNumberOfBytesRead=0x1ef150*=0xf0a, lpOverlapped=0x0) returned 1 [0028.197] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODGc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\odgc.lnk")) returned 1 [0028.198] ReadFile (in: hFile=0x250, lpBuffer=0x268f60c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x268f60c*, lpNumberOfBytesRead=0x1ef150*=0xe8c, lpOverlapped=0x0) returned 1 [0028.199] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ohf1xKbn.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ohf1xkbn.lnk")) returned 1 [0028.200] ReadFile (in: hFile=0x260, lpBuffer=0x2691b9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2691b9c*, lpNumberOfBytesRead=0x1ef150*=0x9c3, lpOverlapped=0x0) returned 1 [0028.201] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OKwEEs4zmIHDzyFq_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\okwees4zmihdzyfq_.lnk")) returned 1 [0028.203] ReadFile (in: hFile=0x250, lpBuffer=0x2694158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2694158*, lpNumberOfBytesRead=0x1ef150*=0x20c, lpOverlapped=0x0) returned 1 [0028.204] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\P5-1sAvH1hY8QYRAKIh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\p5-1savh1hy8qyrakih.lnk")) returned 1 [0028.205] ReadFile (in: hFile=0x260, lpBuffer=0x26966d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26966d8*, lpNumberOfBytesRead=0x1ef150*=0xa63, lpOverlapped=0x0) returned 1 [0028.206] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pANrRdisjp5GCA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\panrrdisjp5gca.lnk")) returned 1 [0028.207] ReadFile (in: hFile=0x250, lpBuffer=0x2698c44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2698c44*, lpNumberOfBytesRead=0x1ef150*=0x980, lpOverlapped=0x0) returned 1 [0028.212] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pE56pKTUH0FEI.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\pe56pktuh0fei.lnk")) returned 1 [0028.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phGJSJeaV5Ir.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phGJSJeaV5Ir.c0hen", lpFilePart=0x0) returned 0x59 [0028.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phGJSJeaV5Ir.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\phgjsjeav5ir.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.214] ReadFile (in: hFile=0x260, lpBuffer=0x269b1a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x269b1a0*, lpNumberOfBytesRead=0x1ef150*=0xe4b, lpOverlapped=0x0) returned 1 [0028.216] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phGJSJeaV5Ir.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\phgjsjeav5ir.lnk")) returned 1 [0028.218] ReadFile (in: hFile=0x250, lpBuffer=0x269d6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x269d6c8*, lpNumberOfBytesRead=0x1ef150*=0xa1a, lpOverlapped=0x0) returned 1 [0028.219] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pJNMb5mC.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\pjnmb5mc.lnk")) returned 1 [0028.220] ReadFile (in: hFile=0x260, lpBuffer=0x269fc00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x269fc00*, lpNumberOfBytesRead=0x1ef150*=0x243, lpOverlapped=0x0) returned 1 [0028.221] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PpMIXlpV2R.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ppmixlpv2r.lnk")) returned 1 [0028.223] ReadFile (in: hFile=0x250, lpBuffer=0x26a2194, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26a2194*, lpNumberOfBytesRead=0x1ef150*=0xa79, lpOverlapped=0x0) returned 1 [0028.224] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qd 8x7UPpD5TxIRaU.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qd 8x7uppd5txirau.lnk")) returned 1 [0028.227] ReadFile (in: hFile=0x260, lpBuffer=0x26a4740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26a4740*, lpNumberOfBytesRead=0x1ef150*=0xa88, lpOverlapped=0x0) returned 1 [0028.228] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qM5o23hghHwx2PWt6O.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qm5o23hghhwx2pwt6o.lnk")) returned 1 [0028.229] ReadFile (in: hFile=0x250, lpBuffer=0x26a6c5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26a6c5c*, lpNumberOfBytesRead=0x1ef150*=0xdc2, lpOverlapped=0x0) returned 1 [0028.231] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rBjR8h.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rbjr8h.lnk")) returned 1 [0028.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.c0hen", lpFilePart=0x0) returned 0x54 [0028.233] ReadFile (in: hFile=0x260, lpBuffer=0x26a9170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26a9170*, lpNumberOfBytesRead=0x1ef150*=0x303, lpOverlapped=0x0) returned 1 [0028.234] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk")) returned 1 [0028.236] ReadFile (in: hFile=0x250, lpBuffer=0x26ab6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26ab6d0*, lpNumberOfBytesRead=0x1ef150*=0x23e, lpOverlapped=0x0) returned 1 [0028.237] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Rsgt2sMDq.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rsgt2smdq.mkv.lnk")) returned 1 [0028.239] ReadFile (in: hFile=0x260, lpBuffer=0x26adc8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26adc8c*, lpNumberOfBytesRead=0x1ef150*=0x306, lpOverlapped=0x0) returned 1 [0028.240] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\s0Vj_KrtpcuqMEIym9P-.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\s0vj_krtpcuqmeiym9p-.lnk")) returned 1 [0028.242] ReadFile (in: hFile=0x250, lpBuffer=0x26b0194, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26b0194*, lpNumberOfBytesRead=0x1ef150*=0xe5c, lpOverlapped=0x0) returned 1 [0028.243] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRWM.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\srwm.lnk")) returned 1 [0028.245] ReadFile (in: hFile=0x260, lpBuffer=0x26b26bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26b26bc*, lpNumberOfBytesRead=0x1ef150*=0x3ed, lpOverlapped=0x0) returned 1 [0028.246] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tGkdKl0KH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tgkdkl0kh.lnk")) returned 1 [0028.248] ReadFile (in: hFile=0x250, lpBuffer=0x26b4c38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26b4c38*, lpNumberOfBytesRead=0x1ef150*=0xe25, lpOverlapped=0x0) returned 1 [0028.249] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TJE4Qy-MRcARcpN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tje4qy-mrcarcpn.lnk")) returned 1 [0028.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tNHH2cjAo.flv.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tNHH2cjAo.flv.c0hen", lpFilePart=0x0) returned 0x5a [0028.251] ReadFile (in: hFile=0x260, lpBuffer=0x26b71a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x26b71a8*, lpNumberOfBytesRead=0x1ef150*=0xe6a, lpOverlapped=0x0) returned 1 [0028.252] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tNHH2cjAo.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tnhh2cjao.flv.lnk")) returned 1 [0028.255] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tpzULbh4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tpzulbh4.lnk")) returned 1 [0028.294] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TwwZcS5arCMt6POgKbN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\twwzcs5arcmt6pogkbn.lnk")) returned 1 [0028.296] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\u65E6p08.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\u65e6p08.flv.lnk")) returned 1 [0028.298] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UsnlojNPzLPnbY.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\usnlojnpzlpnby.lnk")) returned 1 [0028.301] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uTBnz-evw.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\utbnz-evw.lnk")) returned 1 [0028.303] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V-U7vxnqSGePzOZZ4V.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v-u7vxnqsgepzozz4v.lnk")) returned 1 [0028.305] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VBCZLGYuc-.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vbczlgyuc-.lnk")) returned 1 [0028.307] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VkRzt.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vkrzt.flv.lnk")) returned 1 [0028.309] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VwE WRO1kt8ge8llu R.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vwe wro1kt8ge8llu r.lnk")) returned 1 [0028.311] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wQOW0JzF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wqow0jzf.lnk")) returned 1 [0028.313] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wRqjR80CeY.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wrqjr80cey.lnk")) returned 1 [0028.315] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WSd9W2JWD.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wsd9w2jwd.lnk")) returned 1 [0028.318] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wW5U6Ld.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ww5u6ld.lnk")) returned 1 [0028.321] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x9-T8mgSTJaomnflMQn8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\x9-t8mgstjaomnflmqn8.lnk")) returned 1 [0028.323] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XgqMG3afkd5utp55.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xgqmg3afkd5utp55.lnk")) returned 1 [0028.327] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XKLELTXhAeLDMBm.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xkleltxhaeldmbm.lnk")) returned 1 [0028.330] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XW1CR9EHftQnI4CywD.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xw1cr9ehftqni4cywd.lnk")) returned 1 [0028.332] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xz8HB.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xz8hb.mkv.lnk")) returned 1 [0028.334] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Y-kdihhQNd7t2yHzBawc.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\y-kdihhqnd7t2yhzbawc.mkv.lnk")) returned 1 [0028.337] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8PQauwYLDHCF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\y8pqauwyldhcf.lnk")) returned 1 [0028.339] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yH46CAtY43U sRuS.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yh46caty43u srus.mkv.lnk")) returned 1 [0028.341] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YKrDMA2VCK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ykrdma2vck.lnk")) returned 1 [0028.343] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YoquUm.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yoquum.mkv.lnk")) returned 1 [0028.345] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yvmzu4PWOD 18rTjV6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yvmzu4pwod 18rtjv6.lnk")) returned 1 [0028.348] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YYurk0OynFSLp5Q.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yyurk0oynfslp5q.lnk")) returned 1 [0028.350] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zkNo7lbWd6GX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zkno7lbwd6gx.lnk")) returned 1 [0028.352] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zwwtnNbfZUy.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zwwtnnbfzuy.lnk")) returned 1 [0028.354] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZYGgIt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zyggit.lnk")) returned 1 [0028.359] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-magk.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-magk.flv")) returned 1 [0028.363] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Cbzmw1KtLT.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\cbzmw1ktlt.avi")) returned 1 [0028.366] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini")) returned 1 [0028.370] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dRsz Q77jF.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\drsz q77jf.swf")) returned 1 [0028.374] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\if-eoyY.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\if-eoyy.flv")) returned 1 [0028.381] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\StrqGV62zdL3NGmsBY.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\strqgv62zdl3ngmsby.avi")) returned 1 [0028.384] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\YoquUm.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\yoquum.mkv")) returned 1 [0028.387] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2DV5h6Bu9Z7DWzc1811y.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2dv5h6bu9z7dwzc1811y.gif")) returned 1 [0028.390] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini")) returned 1 [0028.394] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\E6KILj.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\e6kilj.jpg")) returned 1 [0028.401] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MEGzx.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\megzx.png")) returned 1 [0028.405] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zkNo7lbWd6GX.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zkno7lbwd6gx.bmp")) returned 1 [0028.408] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\0m-n.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\0m-n.wav")) returned 1 [0028.412] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\BNX1zCJzt8B5LNUiTaS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\bnx1zcjzt8b5lnuitas.m4a")) returned 1 [0028.415] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini")) returned 1 [0028.420] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\H-vE8jci7.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\h-ve8jci7.m4a")) returned 1 [0028.423] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\muGf.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mugf.mp3")) returned 1 [0028.429] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SyMOUK_pQxYoppwpJ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\symouk_pqxyoppwpj.m4a")) returned 1 [0028.432] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\vOsdu34wk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vosdu34wk.wav")) returned 1 [0028.437] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zL5omI28cVd1pX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zl5omi28cvd1px.mp3")) returned 1 [0028.441] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zy122e.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zy122e.m4a")) returned 1 [0028.446] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-M6wvJDg0c1p1jdV-F-.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-m6wvjdg0c1p1jdv-f-.docx")) returned 1 [0028.453] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0wkyhpeDhWWc1YnLzK.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0wkyhpedhwwc1ynlzk.odt")) returned 1 [0028.462] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0_JJ4jXs Pd.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0_jj4jxs pd.xlsx")) returned 1 [0028.467] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2GvFODaJY.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2gvfodajy.xlsx")) returned 1 [0028.473] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2L4y3atEregU.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2l4y3ateregu.doc")) returned 1 [0028.477] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2oj-3b1DX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2oj-3b1dx.pptx")) returned 1 [0028.482] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\322eqGxHHuf7IiOxe0zj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\322eqgxhhuf7iioxe0zj.pptx")) returned 1 [0028.487] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4iDO.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4ido.ppt")) returned 1 [0028.493] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4JLEiOqMzF57q2lY.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4jleioqmzf57q2ly.doc")) returned 1 [0028.498] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\58fRrQCmzqx.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\58frrqcmzqx.xlsx")) returned 1 [0028.504] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5i mtNWlsmgQuUCq.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5i mtnwlsmgquucq.xlsx")) returned 1 [0028.510] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5ix_.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5ix_.ods")) returned 1 [0028.517] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9ZnOue.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9znoue.docx")) returned 1 [0028.525] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9zTx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9ztx.docx")) returned 1 [0028.531] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Br81ndGpuiZbS.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\br81ndgpuizbs.pptx")) returned 1 [0028.534] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c51R3 8.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c51r3 8.odt")) returned 1 [0028.540] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CbB1vyKEos.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cbb1vykeos.xlsx")) returned 1 [0028.545] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cS94_Qi5vMbxo9.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cs94_qi5vmbxo9.docx")) returned 1 [0028.549] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dcRsARSR9x.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcrsarsr9x.pptx")) returned 1 [0028.553] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Dd38zgiEsfVQ.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dd38zgiesfvq.pps")) returned 1 [0028.557] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini")) returned 1 [0028.561] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DeSSJ75LCOEFdIdQW.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dessj75lcoefdidqw.ods")) returned 1 [0028.567] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dnkvME.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dnkvme.rtf")) returned 1 [0028.571] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dp_yXN43X6K5RtxgtN3p.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dp_yxn43x6k5rtxgtn3p.docx")) returned 1 [0028.575] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eAATutbUmb_VDJM4KNL.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eaatutbumb_vdjm4knl.xlsx")) returned 1 [0028.581] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fCy-.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fcy-.pptx")) returned 1 [0028.587] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GF4RfFXwP3j_k.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gf4rffxwp3j_k.odt")) returned 1 [0028.594] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GVBw1GYsWr4dgQN3WfK4.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gvbw1gyswr4dgqn3wfk4.docx")) returned 1 [0028.598] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Hb13rDf6MEP.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hb13rdf6mep.pdf")) returned 1 [0028.604] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IbcTBf.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ibctbf.odt")) returned 1 [0028.610] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iuw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iuw.docx")) returned 1 [0028.616] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jiZ31.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jiz31.pptx")) returned 1 [0028.622] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KysDy-X2xmrskAOxQ7Fs.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kysdy-x2xmrskaoxq7fs.xlsx")) returned 1 [0028.628] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mk6xVSF-P.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mk6xvsf-p.xlsx")) returned 1 [0028.633] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mZo0B.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mzo0b.odp")) returned 1 [0028.638] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pANrRdisjp5GCA.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\panrrdisjp5gca.pptx")) returned 1 [0028.643] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pJNMb5mC.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pjnmb5mc.ppt")) returned 1 [0028.650] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Qd 8x7UPpD5TxIRaU.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qd 8x7uppd5txirau.pps")) returned 1 [0028.654] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qM5o23hghHwx2PWt6O.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qm5o23hghhwx2pwt6o.rtf")) returned 1 [0028.659] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sI1vSTU-S.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\si1vstu-s.xlsx")) returned 1 [0028.663] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tpzULbh4.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tpzulbh4.pdf")) returned 1 [0028.668] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TwwZcS5arCMt6POgKbN.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\twwzcs5arcmt6pogkbn.xlsx")) returned 1 [0028.674] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UsnlojNPzLPnbY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\usnlojnpzlpnby.odp")) returned 1 [0028.683] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\V-U7vxnqSGePzOZZ4V.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v-u7vxnqsgepzozz4v.pptx")) returned 1 [0028.687] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VBCZLGYuc-.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vbczlgyuc-.docx")) returned 1 [0028.691] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VwE WRO1kt8ge8llu R.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vwe wro1kt8ge8llu r.docx")) returned 1 [0028.697] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wRqjR80CeY.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wrqjr80cey.ods")) returned 1 [0028.702] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wz0ZP-2.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wz0zp-2.odt")) returned 1 [0028.706] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XKLELTXhAeLDMBm.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xkleltxhaeldmbm.docx")) returned 1 [0028.709] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\y8PQauwYLDHCF.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\y8pqauwyldhcf.pptx")) returned 1 [0028.713] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zwwtnNbfZUy.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zwwtnnbfzuy.docx")) returned 1 [0028.718] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-rqBbYT.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-rqbbyt.avi")) returned 1 [0028.722] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1453QyYoh8YtCbu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1453qyyoh8ytcbu.wav")) returned 1 [0028.725] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\18Nu.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\18nu.odp")) returned 1 [0028.729] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1cCf7mR0wZr_IXMS.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1ccf7mr0wzr_ixms.gif")) returned 1 [0028.735] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6PArC9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6parc9.mp3")) returned 1 [0028.740] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8DVQo1AMxG.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8dvqo1amxg.flv")) returned 1 [0028.746] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8lxOsjLdfI_z6wDzZyb.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8lxosjldfi_z6wdzzyb.doc")) returned 1 [0028.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1edeb8) returned 1 [0028.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x31 [0028.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.764] GetFileType (hFile=0x260) returned 0x1 [0028.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.764] GetFileType (hFile=0x260) returned 0x1 [0028.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.c0hen", lpFilePart=0x0) returned 0x33 [0028.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.765] GetFileType (hFile=0x250) returned 0x1 [0028.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.765] GetFileType (hFile=0x250) returned 0x1 [0028.765] ReadFile (in: hFile=0x260, lpBuffer=0x25de374, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25de374*, lpNumberOfBytesRead=0x1ef150*=0x11a, lpOverlapped=0x0) returned 1 [0028.766] ReadFile (in: hFile=0x260, lpBuffer=0x25de374, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25de374*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.766] CloseHandle (hObject=0x260) returned 1 [0028.766] WriteFile (in: hFile=0x250, lpBuffer=0x25dd368*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25dd368*, lpNumberOfBytesWritten=0x1ef124*=0x124, lpOverlapped=0x0) returned 1 [0028.767] CloseHandle (hObject=0x250) returned 1 [0028.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x31 [0028.769] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini")) returned 1 [0028.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gAlCj3Ceg3rmmOg4.png", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gAlCj3Ceg3rmmOg4.png", lpFilePart=0x0) returned 0x3a [0028.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gAlCj3Ceg3rmmOg4.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\galcj3ceg3rmmog4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.770] GetFileType (hFile=0x250) returned 0x1 [0028.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.770] GetFileType (hFile=0x250) returned 0x1 [0028.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gAlCj3Ceg3rmmOg4.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gAlCj3Ceg3rmmOg4.c0hen", lpFilePart=0x0) returned 0x3c [0028.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gAlCj3Ceg3rmmOg4.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\galcj3ceg3rmmog4.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.771] GetFileType (hFile=0x260) returned 0x1 [0028.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.771] GetFileType (hFile=0x260) returned 0x1 [0028.771] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.771] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.772] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.772] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.772] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.772] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.773] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.773] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.773] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.773] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.773] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.773] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.773] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.774] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.774] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.774] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.774] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.774] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.774] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.774] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.775] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.775] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.775] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.775] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.775] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.775] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.775] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.776] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.776] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.776] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.776] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0xbd6, lpOverlapped=0x0) returned 1 [0028.776] ReadFile (in: hFile=0x250, lpBuffer=0x25e07b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e07b0*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.776] CloseHandle (hObject=0x250) returned 1 [0028.776] WriteFile (in: hFile=0x260, lpBuffer=0x25df7a4*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25df7a4*, lpNumberOfBytesWritten=0x1ef124*=0xbe0, lpOverlapped=0x0) returned 1 [0028.776] CloseHandle (hObject=0x260) returned 1 [0028.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gAlCj3Ceg3rmmOg4.png", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gAlCj3Ceg3rmmOg4.png", lpFilePart=0x0) returned 0x3a [0028.778] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gAlCj3Ceg3rmmOg4.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\galcj3ceg3rmmog4.png")) returned 1 [0028.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gY1Sw4.mkv", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gY1Sw4.mkv", lpFilePart=0x0) returned 0x30 [0028.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gY1Sw4.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gy1sw4.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.782] GetFileType (hFile=0x260) returned 0x1 [0028.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.782] GetFileType (hFile=0x260) returned 0x1 [0028.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gY1Sw4.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gY1Sw4.c0hen", lpFilePart=0x0) returned 0x32 [0028.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gY1Sw4.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gy1sw4.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.783] GetFileType (hFile=0x250) returned 0x1 [0028.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.783] GetFileType (hFile=0x250) returned 0x1 [0028.783] ReadFile (in: hFile=0x260, lpBuffer=0x25e2b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e2b88*, lpNumberOfBytesRead=0x1ef150*=0x866, lpOverlapped=0x0) returned 1 [0028.783] ReadFile (in: hFile=0x260, lpBuffer=0x25e2b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e2b88*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.783] CloseHandle (hObject=0x260) returned 1 [0028.783] WriteFile (in: hFile=0x250, lpBuffer=0x25e1b7c*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25e1b7c*, lpNumberOfBytesWritten=0x1ef124*=0x870, lpOverlapped=0x0) returned 1 [0028.784] CloseHandle (hObject=0x250) returned 1 [0028.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gY1Sw4.mkv", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gY1Sw4.mkv", lpFilePart=0x0) returned 0x30 [0028.785] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gY1Sw4.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gy1sw4.mkv")) returned 1 [0028.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GYhp5VSqkDaEbEs44.rtf", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GYhp5VSqkDaEbEs44.rtf", lpFilePart=0x0) returned 0x3b [0028.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GYhp5VSqkDaEbEs44.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gyhp5vsqkdaebes44.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.787] GetFileType (hFile=0x250) returned 0x1 [0028.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.787] GetFileType (hFile=0x250) returned 0x1 [0028.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GYhp5VSqkDaEbEs44.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GYhp5VSqkDaEbEs44.c0hen", lpFilePart=0x0) returned 0x3d [0028.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GYhp5VSqkDaEbEs44.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gyhp5vsqkdaebes44.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.788] GetFileType (hFile=0x260) returned 0x1 [0028.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.788] GetFileType (hFile=0x260) returned 0x1 [0028.788] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.788] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.789] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.789] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.789] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.789] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.790] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.790] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.790] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.790] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.791] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.791] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.791] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.791] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.792] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.792] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.792] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x357, lpOverlapped=0x0) returned 1 [0028.792] ReadFile (in: hFile=0x250, lpBuffer=0x25e4fc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e4fc4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.792] CloseHandle (hObject=0x250) returned 1 [0028.793] WriteFile (in: hFile=0x260, lpBuffer=0x25e3fb8*, nNumberOfBytesToWrite=0x361, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25e3fb8*, lpNumberOfBytesWritten=0x1ef124*=0x361, lpOverlapped=0x0) returned 1 [0028.793] CloseHandle (hObject=0x260) returned 1 [0028.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GYhp5VSqkDaEbEs44.rtf", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GYhp5VSqkDaEbEs44.rtf", lpFilePart=0x0) returned 0x3b [0028.794] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GYhp5VSqkDaEbEs44.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gyhp5vsqkdaebes44.rtf")) returned 1 [0028.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HAaq4t0C.odt", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HAaq4t0C.odt", lpFilePart=0x0) returned 0x32 [0028.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HAaq4t0C.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\haaq4t0c.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.796] GetFileType (hFile=0x260) returned 0x1 [0028.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.796] GetFileType (hFile=0x260) returned 0x1 [0028.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HAaq4t0C.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HAaq4t0C.c0hen", lpFilePart=0x0) returned 0x34 [0028.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HAaq4t0C.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\haaq4t0c.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.797] GetFileType (hFile=0x250) returned 0x1 [0028.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.797] GetFileType (hFile=0x250) returned 0x1 [0028.797] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.797] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.798] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.798] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.798] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.799] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.799] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.799] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.799] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.799] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.799] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.799] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.800] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.800] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.800] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.800] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.800] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.800] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.800] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.801] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.801] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x50f, lpOverlapped=0x0) returned 1 [0028.801] ReadFile (in: hFile=0x260, lpBuffer=0x25e73b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e73b4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.801] CloseHandle (hObject=0x260) returned 1 [0028.801] WriteFile (in: hFile=0x250, lpBuffer=0x25e63a8*, nNumberOfBytesToWrite=0x519, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25e63a8*, lpNumberOfBytesWritten=0x1ef124*=0x519, lpOverlapped=0x0) returned 1 [0028.801] CloseHandle (hObject=0x250) returned 1 [0028.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HAaq4t0C.odt", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HAaq4t0C.odt", lpFilePart=0x0) returned 0x32 [0028.802] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HAaq4t0C.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\haaq4t0c.odt")) returned 1 [0028.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IcfKmGMarj.pps", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IcfKmGMarj.pps", lpFilePart=0x0) returned 0x34 [0028.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IcfKmGMarj.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\icfkmgmarj.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.804] GetFileType (hFile=0x250) returned 0x1 [0028.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.805] GetFileType (hFile=0x250) returned 0x1 [0028.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IcfKmGMarj.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IcfKmGMarj.c0hen", lpFilePart=0x0) returned 0x36 [0028.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IcfKmGMarj.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\icfkmgmarj.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.806] GetFileType (hFile=0x260) returned 0x1 [0028.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.806] GetFileType (hFile=0x260) returned 0x1 [0028.806] ReadFile (in: hFile=0x250, lpBuffer=0x25e97ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e97ac*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.807] WriteFile (in: hFile=0x260, lpBuffer=0x25e87a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e87a0*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.807] ReadFile (in: hFile=0x250, lpBuffer=0x25e97ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e97ac*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.808] WriteFile (in: hFile=0x260, lpBuffer=0x25e87a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e87a0*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.808] ReadFile (in: hFile=0x250, lpBuffer=0x25e97ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e97ac*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.808] WriteFile (in: hFile=0x260, lpBuffer=0x25e87a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e87a0*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.808] ReadFile (in: hFile=0x250, lpBuffer=0x25e97ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e97ac*, lpNumberOfBytesRead=0x1ef150*=0xeed, lpOverlapped=0x0) returned 1 [0028.808] ReadFile (in: hFile=0x250, lpBuffer=0x25e97ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25e97ac*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.808] CloseHandle (hObject=0x250) returned 1 [0028.808] WriteFile (in: hFile=0x260, lpBuffer=0x25e87a0*, nNumberOfBytesToWrite=0xef7, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25e87a0*, lpNumberOfBytesWritten=0x1ef124*=0xef7, lpOverlapped=0x0) returned 1 [0028.808] CloseHandle (hObject=0x260) returned 1 [0028.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IcfKmGMarj.pps", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IcfKmGMarj.pps", lpFilePart=0x0) returned 0x34 [0028.809] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\IcfKmGMarj.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\icfkmgmarj.pps")) returned 1 [0028.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k636yAy.wav", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k636yAy.wav", lpFilePart=0x0) returned 0x31 [0028.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k636yAy.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k636yay.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.811] GetFileType (hFile=0x260) returned 0x1 [0028.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.811] GetFileType (hFile=0x260) returned 0x1 [0028.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k636yAy.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k636yAy.c0hen", lpFilePart=0x0) returned 0x33 [0028.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k636yAy.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k636yay.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.831] GetFileType (hFile=0x250) returned 0x1 [0028.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.831] GetFileType (hFile=0x250) returned 0x1 [0028.831] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.831] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.832] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.832] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.832] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.833] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.833] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.833] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.833] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.834] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.834] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.834] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.834] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.834] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x635, lpOverlapped=0x0) returned 1 [0028.835] ReadFile (in: hFile=0x260, lpBuffer=0x25ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ebb78*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.835] CloseHandle (hObject=0x260) returned 1 [0028.835] WriteFile (in: hFile=0x250, lpBuffer=0x25eab6c*, nNumberOfBytesToWrite=0x63f, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25eab6c*, lpNumberOfBytesWritten=0x1ef124*=0x63f, lpOverlapped=0x0) returned 1 [0028.835] CloseHandle (hObject=0x250) returned 1 [0028.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k636yAy.wav", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k636yAy.wav", lpFilePart=0x0) returned 0x31 [0028.837] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k636yAy.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k636yay.wav")) returned 1 [0028.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NpGu4rSKh.pps", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NpGu4rSKh.pps", lpFilePart=0x0) returned 0x33 [0028.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NpGu4rSKh.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\npgu4rskh.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.838] GetFileType (hFile=0x250) returned 0x1 [0028.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.838] GetFileType (hFile=0x250) returned 0x1 [0028.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NpGu4rSKh.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NpGu4rSKh.c0hen", lpFilePart=0x0) returned 0x35 [0028.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NpGu4rSKh.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\npgu4rskh.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.839] GetFileType (hFile=0x260) returned 0x1 [0028.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.839] GetFileType (hFile=0x260) returned 0x1 [0028.839] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.839] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.840] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.840] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.841] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.841] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.841] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.841] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.842] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.842] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.842] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.842] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.842] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.843] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.843] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.843] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.843] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.843] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.843] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.843] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.844] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.844] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.844] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0xf9a, lpOverlapped=0x0) returned 1 [0028.844] ReadFile (in: hFile=0x250, lpBuffer=0x25edf54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25edf54*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.844] CloseHandle (hObject=0x250) returned 1 [0028.845] WriteFile (in: hFile=0x260, lpBuffer=0x25ecf48*, nNumberOfBytesToWrite=0xfa4, lpNumberOfBytesWritten=0x1ef124, lpOverlapped=0x0 | out: lpBuffer=0x25ecf48*, lpNumberOfBytesWritten=0x1ef124*=0xfa4, lpOverlapped=0x0) returned 1 [0028.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NpGu4rSKh.pps", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NpGu4rSKh.pps", lpFilePart=0x0) returned 0x33 [0028.847] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NpGu4rSKh.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\npgu4rskh.pps")) returned 1 [0028.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oa1XCE.rtf", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oa1XCE.rtf", lpFilePart=0x0) returned 0x30 [0028.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oa1XCE.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oa1xce.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.849] GetFileType (hFile=0x260) returned 0x1 [0028.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.849] GetFileType (hFile=0x260) returned 0x1 [0028.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oa1XCE.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oa1XCE.c0hen", lpFilePart=0x0) returned 0x32 [0028.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oa1XCE.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oa1xce.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.850] GetFileType (hFile=0x250) returned 0x1 [0028.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.850] GetFileType (hFile=0x250) returned 0x1 [0028.850] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.851] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.852] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.852] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.852] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.852] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.853] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.853] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.853] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.853] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.853] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.853] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.854] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.854] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.854] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.854] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.854] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.855] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.855] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.855] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.855] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.855] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.856] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x503, lpOverlapped=0x0) returned 1 [0028.856] ReadFile (in: hFile=0x260, lpBuffer=0x25f031c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f031c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oa1XCE.rtf", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oa1XCE.rtf", lpFilePart=0x0) returned 0x30 [0028.856] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oa1XCE.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oa1xce.rtf")) returned 1 [0028.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PpMIXlpV2R.pps", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PpMIXlpV2R.pps", lpFilePart=0x0) returned 0x34 [0028.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PpMIXlpV2R.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ppmixlpv2r.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.858] GetFileType (hFile=0x250) returned 0x1 [0028.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.859] GetFileType (hFile=0x250) returned 0x1 [0028.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PpMIXlpV2R.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PpMIXlpV2R.c0hen", lpFilePart=0x0) returned 0x36 [0028.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PpMIXlpV2R.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ppmixlpv2r.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.859] GetFileType (hFile=0x260) returned 0x1 [0028.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.859] GetFileType (hFile=0x260) returned 0x1 [0028.859] ReadFile (in: hFile=0x250, lpBuffer=0x25f2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f2710*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.860] ReadFile (in: hFile=0x250, lpBuffer=0x25f2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f2710*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.861] ReadFile (in: hFile=0x250, lpBuffer=0x25f2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f2710*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.861] ReadFile (in: hFile=0x250, lpBuffer=0x25f2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f2710*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.861] ReadFile (in: hFile=0x250, lpBuffer=0x25f2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f2710*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.861] ReadFile (in: hFile=0x250, lpBuffer=0x25f2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f2710*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.861] ReadFile (in: hFile=0x250, lpBuffer=0x25f2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f2710*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.862] ReadFile (in: hFile=0x250, lpBuffer=0x25f2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f2710*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.862] ReadFile (in: hFile=0x250, lpBuffer=0x25f2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f2710*, lpNumberOfBytesRead=0x1ef150*=0x143, lpOverlapped=0x0) returned 1 [0028.862] ReadFile (in: hFile=0x250, lpBuffer=0x25f2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f2710*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PpMIXlpV2R.pps", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PpMIXlpV2R.pps", lpFilePart=0x0) returned 0x34 [0028.862] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PpMIXlpV2R.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ppmixlpv2r.pps")) returned 1 [0028.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rsgt2sMDq.mkv", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rsgt2sMDq.mkv", lpFilePart=0x0) returned 0x33 [0028.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rsgt2sMDq.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsgt2smdq.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.864] GetFileType (hFile=0x260) returned 0x1 [0028.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.864] GetFileType (hFile=0x260) returned 0x1 [0028.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rsgt2sMDq.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rsgt2sMDq.c0hen", lpFilePart=0x0) returned 0x35 [0028.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rsgt2sMDq.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsgt2smdq.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.865] GetFileType (hFile=0x250) returned 0x1 [0028.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.865] GetFileType (hFile=0x250) returned 0x1 [0028.865] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.867] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.867] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.867] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.867] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.867] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.868] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.868] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.868] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.868] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.868] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.869] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.870] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.870] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.870] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.870] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0xf3f, lpOverlapped=0x0) returned 1 [0028.870] ReadFile (in: hFile=0x260, lpBuffer=0x25f4af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f4af4*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rsgt2sMDq.mkv", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rsgt2sMDq.mkv", lpFilePart=0x0) returned 0x33 [0028.871] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rsgt2sMDq.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsgt2smdq.mkv")) returned 1 [0028.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S93bfLEOoUYRcl-Xar.avi", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S93bfLEOoUYRcl-Xar.avi", lpFilePart=0x0) returned 0x3c [0028.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S93bfLEOoUYRcl-Xar.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s93bfleoouyrcl-xar.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.873] GetFileType (hFile=0x250) returned 0x1 [0028.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.873] GetFileType (hFile=0x250) returned 0x1 [0028.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S93bfLEOoUYRcl-Xar.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S93bfLEOoUYRcl-Xar.c0hen", lpFilePart=0x0) returned 0x3e [0028.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S93bfLEOoUYRcl-Xar.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s93bfleoouyrcl-xar.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.874] GetFileType (hFile=0x260) returned 0x1 [0028.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.874] GetFileType (hFile=0x260) returned 0x1 [0028.874] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.875] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.875] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.875] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.876] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.876] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.876] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.876] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.876] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.877] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.877] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.877] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.877] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.877] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.878] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.878] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.878] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.878] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.878] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.879] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.879] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x147, lpOverlapped=0x0) returned 1 [0028.879] ReadFile (in: hFile=0x250, lpBuffer=0x25f6f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f6f4c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S93bfLEOoUYRcl-Xar.avi", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S93bfLEOoUYRcl-Xar.avi", lpFilePart=0x0) returned 0x3c [0028.880] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S93bfLEOoUYRcl-Xar.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s93bfleoouyrcl-xar.avi")) returned 1 [0028.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u65E6p08.flv", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u65E6p08.flv", lpFilePart=0x0) returned 0x32 [0028.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u65E6p08.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u65e6p08.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.881] GetFileType (hFile=0x260) returned 0x1 [0028.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.881] GetFileType (hFile=0x260) returned 0x1 [0028.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u65E6p08.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u65E6p08.c0hen", lpFilePart=0x0) returned 0x34 [0028.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u65E6p08.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u65e6p08.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.882] GetFileType (hFile=0x250) returned 0x1 [0028.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.882] GetFileType (hFile=0x250) returned 0x1 [0028.882] ReadFile (in: hFile=0x260, lpBuffer=0x25f9340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f9340*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.886] ReadFile (in: hFile=0x260, lpBuffer=0x25f9340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f9340*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.886] ReadFile (in: hFile=0x260, lpBuffer=0x25f9340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f9340*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.886] ReadFile (in: hFile=0x260, lpBuffer=0x25f9340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f9340*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.887] ReadFile (in: hFile=0x260, lpBuffer=0x25f9340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f9340*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.887] ReadFile (in: hFile=0x260, lpBuffer=0x25f9340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f9340*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.887] ReadFile (in: hFile=0x260, lpBuffer=0x25f9340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f9340*, lpNumberOfBytesRead=0x1ef150*=0x8ce, lpOverlapped=0x0) returned 1 [0028.887] ReadFile (in: hFile=0x260, lpBuffer=0x25f9340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25f9340*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u65E6p08.flv", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u65E6p08.flv", lpFilePart=0x0) returned 0x32 [0028.888] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u65E6p08.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u65e6p08.flv")) returned 1 [0028.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsP07_YMcR.mp3", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsP07_YMcR.mp3", lpFilePart=0x0) returned 0x34 [0028.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsP07_YMcR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\usp07_ymcr.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.889] GetFileType (hFile=0x250) returned 0x1 [0028.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.890] GetFileType (hFile=0x250) returned 0x1 [0028.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsP07_YMcR.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsP07_YMcR.c0hen", lpFilePart=0x0) returned 0x36 [0028.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsP07_YMcR.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\usp07_ymcr.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.890] GetFileType (hFile=0x260) returned 0x1 [0028.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.890] GetFileType (hFile=0x260) returned 0x1 [0028.890] ReadFile (in: hFile=0x250, lpBuffer=0x25fb738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fb738*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.891] ReadFile (in: hFile=0x250, lpBuffer=0x25fb738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fb738*, lpNumberOfBytesRead=0x1ef150*=0xd5, lpOverlapped=0x0) returned 1 [0028.891] ReadFile (in: hFile=0x250, lpBuffer=0x25fb738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fb738*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsP07_YMcR.mp3", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsP07_YMcR.mp3", lpFilePart=0x0) returned 0x34 [0028.892] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UsP07_YMcR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\usp07_ymcr.mp3")) returned 1 [0028.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uTBnz-evw.bmp", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uTBnz-evw.bmp", lpFilePart=0x0) returned 0x33 [0028.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uTBnz-evw.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utbnz-evw.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.893] GetFileType (hFile=0x260) returned 0x1 [0028.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.893] GetFileType (hFile=0x260) returned 0x1 [0028.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uTBnz-evw.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uTBnz-evw.c0hen", lpFilePart=0x0) returned 0x35 [0028.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uTBnz-evw.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utbnz-evw.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.894] GetFileType (hFile=0x250) returned 0x1 [0028.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.894] GetFileType (hFile=0x250) returned 0x1 [0028.894] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.895] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.895] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.895] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.896] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.896] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.896] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.896] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.896] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.897] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.897] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.897] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.897] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.897] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.897] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.898] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.898] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.898] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.898] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.898] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.899] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0xb72, lpOverlapped=0x0) returned 1 [0028.899] ReadFile (in: hFile=0x260, lpBuffer=0x25fdb1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fdb1c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uTBnz-evw.bmp", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uTBnz-evw.bmp", lpFilePart=0x0) returned 0x33 [0028.899] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uTBnz-evw.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\utbnz-evw.bmp")) returned 1 [0028.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9-T8mgSTJaomnflMQn8.ppt", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9-T8mgSTJaomnflMQn8.ppt", lpFilePart=0x0) returned 0x3e [0028.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9-T8mgSTJaomnflMQn8.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x9-t8mgstjaomnflmqn8.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.901] GetFileType (hFile=0x250) returned 0x1 [0028.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.901] GetFileType (hFile=0x250) returned 0x1 [0028.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9-T8mgSTJaomnflMQn8.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9-T8mgSTJaomnflMQn8.c0hen", lpFilePart=0x0) returned 0x40 [0028.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9-T8mgSTJaomnflMQn8.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x9-t8mgstjaomnflmqn8.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.902] GetFileType (hFile=0x260) returned 0x1 [0028.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.902] GetFileType (hFile=0x260) returned 0x1 [0028.902] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.903] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.903] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.903] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.904] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.904] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.904] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.904] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.904] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.905] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.905] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.905] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.905] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x417, lpOverlapped=0x0) returned 1 [0028.905] ReadFile (in: hFile=0x250, lpBuffer=0x25fff8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x25fff8c*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9-T8mgSTJaomnflMQn8.ppt", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9-T8mgSTJaomnflMQn8.ppt", lpFilePart=0x0) returned 0x3e [0028.906] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x9-T8mgSTJaomnflMQn8.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x9-t8mgstjaomnflmqn8.ppt")) returned 1 [0028.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y-kdihhQNd7t2yHzBawc.mkv", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y-kdihhQNd7t2yHzBawc.mkv", lpFilePart=0x0) returned 0x3e [0028.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y-kdihhQNd7t2yHzBawc.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y-kdihhqnd7t2yhzbawc.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.908] GetFileType (hFile=0x260) returned 0x1 [0028.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.908] GetFileType (hFile=0x260) returned 0x1 [0028.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y-kdihhQNd7t2yHzBawc.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y-kdihhQNd7t2yHzBawc.c0hen", lpFilePart=0x0) returned 0x40 [0028.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y-kdihhQNd7t2yHzBawc.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y-kdihhqnd7t2yhzbawc.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.908] GetFileType (hFile=0x250) returned 0x1 [0028.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.908] GetFileType (hFile=0x250) returned 0x1 [0028.909] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.909] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.910] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.910] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.910] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.910] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.910] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.911] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.911] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.911] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.911] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.912] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.912] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.912] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.912] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.912] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x1000, lpOverlapped=0x0) returned 1 [0028.913] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x635, lpOverlapped=0x0) returned 1 [0028.913] ReadFile (in: hFile=0x260, lpBuffer=0x2602414, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2602414*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y-kdihhQNd7t2yHzBawc.mkv", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y-kdihhQNd7t2yHzBawc.mkv", lpFilePart=0x0) returned 0x3e [0028.913] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y-kdihhQNd7t2yHzBawc.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y-kdihhqnd7t2yhzbawc.mkv")) returned 1 [0028.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YYurk0OynFSLp5Q.odt", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YYurk0OynFSLp5Q.odt", lpFilePart=0x0) returned 0x39 [0028.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YYurk0OynFSLp5Q.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yyurk0oynfslp5q.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x250 [0028.915] GetFileType (hFile=0x250) returned 0x1 [0028.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.916] GetFileType (hFile=0x250) returned 0x1 [0028.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YYurk0OynFSLp5Q.c0hen", nBufferLength=0x105, lpBuffer=0x1eeb88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YYurk0OynFSLp5Q.c0hen", lpFilePart=0x0) returned 0x3b [0028.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ef07c) returned 1 [0028.916] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YYurk0OynFSLp5Q.c0hen" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yyurk0oynfslp5q.c0hen"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x260 [0028.916] GetFileType (hFile=0x260) returned 0x1 [0028.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ef078) returned 1 [0028.916] GetFileType (hFile=0x260) returned 0x1 [0028.916] ReadFile (in: hFile=0x250, lpBuffer=0x2604854, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2604854*, lpNumberOfBytesRead=0x1ef150*=0xfb2, lpOverlapped=0x0) returned 1 [0028.917] ReadFile (in: hFile=0x250, lpBuffer=0x2604854, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ef150, lpOverlapped=0x0 | out: lpBuffer=0x2604854*, lpNumberOfBytesRead=0x1ef150*=0x0, lpOverlapped=0x0) returned 1 [0028.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YYurk0OynFSLp5Q.odt", nBufferLength=0x105, lpBuffer=0x1eec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YYurk0OynFSLp5Q.odt", lpFilePart=0x0) returned 0x39 [0028.918] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YYurk0OynFSLp5Q.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yyurk0oynfslp5q.odt")) returned 1 [0028.925] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1ef190 | out: phkResult=0x1ef190*=0x260) returned 0x0 [0028.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c0hen locker.exe", nBufferLength=0x105, lpBuffer=0x1eec40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c0hen locker.exe", lpFilePart=0x0) returned 0x36 [0028.943] RegQueryValueExW (in: hKey=0x260, lpValueName="c0hen locker", lpReserved=0x0, lpType=0x1ef18c, lpData=0x0, lpcbData=0x1ef188*=0x0 | out: lpType=0x1ef18c*=0x0, lpData=0x0, lpcbData=0x1ef188*=0x0) returned 0x2 [0028.943] RegSetValueExW (in: hKey=0x260, lpValueName="c0hen locker", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c0hen locker.exe", cbData=0x6e | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\c0hen locker.exe") returned 0x0 [0028.944] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1ef13c | out: phkResult=0x1ef13c*=0x0) returned 0x2 [0028.945] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x1ef138, lpdwDisposition=0x1ef1c0 | out: phkResult=0x1ef138*=0x250, lpdwDisposition=0x1ef1c0*=0x1) returned 0x0 [0028.945] RegQueryValueExW (in: hKey=0x250, lpValueName="DisableTaskMgr", lpReserved=0x0, lpType=0x1ef1ac, lpData=0x0, lpcbData=0x1ef1a8*=0x0 | out: lpType=0x1ef1ac*=0x0, lpData=0x0, lpcbData=0x1ef1a8*=0x0) returned 0x2 [0028.945] RegQueryValueExW (in: hKey=0x250, lpValueName="DisableTaskMgr", lpReserved=0x0, lpType=0x1ef18c, lpData=0x0, lpcbData=0x1ef188*=0x0 | out: lpType=0x1ef18c*=0x0, lpData=0x0, lpcbData=0x1ef188*=0x0) returned 0x2 [0028.945] RegSetValueExW (in: hKey=0x250, lpValueName="DisableTaskMgr", Reserved=0x0, dwType=0x1, lpData="1", cbData=0x4 | out: lpData="1") returned 0x0 [0028.945] GetCurrentActCtx (in: lphActCtx=0x1ef2cc | out: lphActCtx=0x1ef2cc*=0x0) returned 1 [0028.945] ActivateActCtx (in: hActCtx=0x384454, lpCookie=0x1ef2dc | out: hActCtx=0x384454, lpCookie=0x1ef2dc) returned 1 [0028.945] ShowWindow (hWnd=0x301ba, nCmdShow=5) returned 0 [0028.945] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.946] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.946] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.946] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.946] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=408, Y=356, nWidth=100, nHeight=89, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x40120 [0028.947] SetWindowLongW (hWnd=0x40120, nIndex=-4, dwNewLong=1997940189) returned 79300582 [0028.947] GetWindowLongW (hWnd=0x40120, nIndex=-4) returned 1997940189 [0028.948] SetWindowLongW (hWnd=0x40120, nIndex=-4, dwNewLong=79301590) returned 1997940189 [0028.948] GetWindowLongW (hWnd=0x40120, nIndex=-4) returned 79301590 [0028.948] GetWindowLongW (hWnd=0x40120, nIndex=-16) returned 1174405120 [0028.948] GetWindowLongW (hWnd=0x40120, nIndex=-12) returned 0 [0028.948] SetWindowLongW (hWnd=0x40120, nIndex=-12, dwNewLong=262432) returned 0 [0028.948] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.948] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.948] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.948] GetWindow (hWnd=0x40120, uCmd=0x3) returned 0x0 [0028.948] GetClientRect (in: hWnd=0x40120, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0028.948] GetWindowRect (in: hWnd=0x40120, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0028.949] GetParent (hWnd=0x40120) returned 0x301ba [0028.949] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5b4, cPoints=0x2 | out: lpPoints=0x1ee5b4) returned -11534661 [0028.949] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0x5, wParam=0x0, lParam=0x590064) returned 0x0 [0028.949] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0x3, wParam=0x0, lParam=0x1640198) returned 0x0 [0028.949] GetClientRect (in: hWnd=0x40120, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0028.949] GetWindowRect (in: hWnd=0x40120, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0028.949] GetParent (hWnd=0x40120) returned 0x301ba [0028.949] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee60c, cPoints=0x2 | out: lpPoints=0x1ee60c) returned -11534661 [0028.949] SendMessageW (hWnd=0x40120, Msg=0x2210, wParam=0x1200001, lParam=0x40120) returned 0x0 [0028.949] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0x2210, wParam=0x1200001, lParam=0x40120) returned 0x0 [0028.949] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.949] GetParent (hWnd=0x40120) returned 0x301ba [0028.949] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.950] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.950] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x2607370 | out: lpWndClass=0x2607370) returned 1 [0028.950] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.951] CoTaskMemAlloc (cb=0x58) returned 0x3702b0 [0028.951] RegisterClassW (lpWndClass=0x1eec70) returned 0xc136 [0028.951] CoTaskMemFree (pv=0x3702b0) [0028.951] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.951] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="BTC wallet:", dwStyle=0x5600000d, X=406, Y=337, nWidth=65, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x1701b0 [0028.951] SetWindowLongW (hWnd=0x1701b0, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.951] GetWindowLongW (hWnd=0x1701b0, nIndex=-4) returned 1942993097 [0028.951] SetWindowLongW (hWnd=0x1701b0, nIndex=-4, dwNewLong=79301670) returned 1942993097 [0028.951] GetWindowLongW (hWnd=0x1701b0, nIndex=-4) returned 79301670 [0028.951] GetWindowLongW (hWnd=0x1701b0, nIndex=-16) returned 1174405133 [0028.951] GetWindowLongW (hWnd=0x1701b0, nIndex=-12) returned 0 [0028.952] SetWindowLongW (hWnd=0x1701b0, nIndex=-12, dwNewLong=1507760) returned 0 [0028.952] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.953] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.953] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.953] GetWindow (hWnd=0x1701b0, uCmd=0x3) returned 0x40120 [0028.953] GetClientRect (in: hWnd=0x1701b0, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.953] GetWindowRect (in: hWnd=0x1701b0, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.953] GetParent (hWnd=0x1701b0) returned 0x301ba [0028.953] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.953] SetWindowTextW (hWnd=0x1701b0, lpString="BTC wallet:") returned 1 [0028.953] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0xc, wParam=0x0, lParam=0x2517234) returned 0x1 [0028.953] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0x5, wParam=0x0, lParam=0x100041) returned 0x0 [0028.953] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0x3, wParam=0x0, lParam=0x1510196) returned 0x0 [0028.953] GetClientRect (in: hWnd=0x1701b0, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.953] GetWindowRect (in: hWnd=0x1701b0, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.953] GetParent (hWnd=0x1701b0) returned 0x301ba [0028.953] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.953] SendMessageW (hWnd=0x1701b0, Msg=0x2210, wParam=0x1b00001, lParam=0x1701b0) returned 0x0 [0028.954] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0x2210, wParam=0x1b00001, lParam=0x1701b0) returned 0x0 [0028.954] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.954] GetParent (hWnd=0x1701b0) returned 0x301ba [0028.954] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.954] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.954] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.954] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=514, Y=356, nWidth=231, nHeight=89, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x6011c [0028.954] SetWindowLongW (hWnd=0x6011c, nIndex=-4, dwNewLong=1997940189) returned 79300582 [0028.954] GetWindowLongW (hWnd=0x6011c, nIndex=-4) returned 1997940189 [0028.954] SetWindowLongW (hWnd=0x6011c, nIndex=-4, dwNewLong=79301710) returned 1997940189 [0028.954] GetWindowLongW (hWnd=0x6011c, nIndex=-4) returned 79301710 [0028.954] GetWindowLongW (hWnd=0x6011c, nIndex=-16) returned 1174405120 [0028.955] GetWindowLongW (hWnd=0x6011c, nIndex=-12) returned 0 [0028.955] SetWindowLongW (hWnd=0x6011c, nIndex=-12, dwNewLong=393500) returned 0 [0028.955] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.955] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.955] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.955] GetWindow (hWnd=0x6011c, uCmd=0x3) returned 0x1701b0 [0028.955] GetClientRect (in: hWnd=0x6011c, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0028.955] GetWindowRect (in: hWnd=0x6011c, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0028.955] GetParent (hWnd=0x6011c) returned 0x301ba [0028.955] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5b4, cPoints=0x2 | out: lpPoints=0x1ee5b4) returned -11534661 [0028.955] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0x5, wParam=0x0, lParam=0x5900e7) returned 0x0 [0028.955] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0x3, wParam=0x0, lParam=0x1640202) returned 0x0 [0028.955] GetClientRect (in: hWnd=0x6011c, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0028.955] GetWindowRect (in: hWnd=0x6011c, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0028.955] GetParent (hWnd=0x6011c) returned 0x301ba [0028.955] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee60c, cPoints=0x2 | out: lpPoints=0x1ee60c) returned -11534661 [0028.956] SendMessageW (hWnd=0x6011c, Msg=0x2210, wParam=0x11c0001, lParam=0x6011c) returned 0x0 [0028.956] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0x2210, wParam=0x11c0001, lParam=0x6011c) returned 0x0 [0028.956] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.956] GetParent (hWnd=0x6011c) returned 0x301ba [0028.956] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.956] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.956] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.956] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Or:", dwStyle=0x5600000d, X=52, Y=426, nWidth=24, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201ee [0028.956] SetWindowLongW (hWnd=0x201ee, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.956] GetWindowLongW (hWnd=0x201ee, nIndex=-4) returned 1942993097 [0028.957] SetWindowLongW (hWnd=0x201ee, nIndex=-4, dwNewLong=79301750) returned 1942993097 [0028.957] GetWindowLongW (hWnd=0x201ee, nIndex=-4) returned 79301750 [0028.957] GetWindowLongW (hWnd=0x201ee, nIndex=-16) returned 1174405133 [0028.957] GetWindowLongW (hWnd=0x201ee, nIndex=-12) returned 0 [0028.957] SetWindowLongW (hWnd=0x201ee, nIndex=-12, dwNewLong=131566) returned 0 [0028.957] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.957] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.957] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.957] GetWindow (hWnd=0x201ee, uCmd=0x3) returned 0x6011c [0028.957] GetClientRect (in: hWnd=0x201ee, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.957] GetWindowRect (in: hWnd=0x201ee, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.957] GetParent (hWnd=0x201ee) returned 0x301ba [0028.957] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.957] SetWindowTextW (hWnd=0x201ee, lpString="Or:") returned 1 [0028.957] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0xc, wParam=0x0, lParam=0x2517204) returned 0x1 [0028.958] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0x5, wParam=0x0, lParam=0x100018) returned 0x0 [0028.958] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0x3, wParam=0x0, lParam=0x1aa0034) returned 0x0 [0028.958] GetClientRect (in: hWnd=0x201ee, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.958] GetWindowRect (in: hWnd=0x201ee, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.958] GetParent (hWnd=0x201ee) returned 0x301ba [0028.958] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.958] SendMessageW (hWnd=0x201ee, Msg=0x2210, wParam=0x1ee0001, lParam=0x201ee) returned 0x0 [0028.958] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0x2210, wParam=0x1ee0001, lParam=0x201ee) returned 0x0 [0028.958] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.958] GetParent (hWnd=0x201ee) returned 0x301ba [0028.958] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.958] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.958] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.958] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="18Fh68NJrMZCiTqq1VoWaQsSb8pxDjEw6N", dwStyle=0x5600000d, X=511, Y=337, nWidth=234, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201ec [0028.958] SetWindowLongW (hWnd=0x201ec, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.958] GetWindowLongW (hWnd=0x201ec, nIndex=-4) returned 1942993097 [0028.959] SetWindowLongW (hWnd=0x201ec, nIndex=-4, dwNewLong=79301790) returned 1942993097 [0028.959] GetWindowLongW (hWnd=0x201ec, nIndex=-4) returned 79301790 [0028.959] GetWindowLongW (hWnd=0x201ec, nIndex=-16) returned 1174405133 [0028.959] GetWindowLongW (hWnd=0x201ec, nIndex=-12) returned 0 [0028.959] SetWindowLongW (hWnd=0x201ec, nIndex=-12, dwNewLong=131564) returned 0 [0028.959] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.959] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.959] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.959] GetWindow (hWnd=0x201ec, uCmd=0x3) returned 0x201ee [0028.959] GetClientRect (in: hWnd=0x201ec, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.959] GetWindowRect (in: hWnd=0x201ec, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.959] GetParent (hWnd=0x201ec) returned 0x301ba [0028.959] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.959] SetWindowTextW (hWnd=0x201ec, lpString="18Fh68NJrMZCiTqq1VoWaQsSb8pxDjEw6N") returned 1 [0028.959] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0xc, wParam=0x0, lParam=0x2517274) returned 0x1 [0028.959] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0x5, wParam=0x0, lParam=0x1000ea) returned 0x0 [0028.960] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0x3, wParam=0x0, lParam=0x15101ff) returned 0x0 [0028.960] GetClientRect (in: hWnd=0x201ec, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.960] GetWindowRect (in: hWnd=0x201ec, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.960] GetParent (hWnd=0x201ec) returned 0x301ba [0028.960] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.960] SendMessageW (hWnd=0x201ec, Msg=0x2210, wParam=0x1ec0001, lParam=0x201ec) returned 0x0 [0028.960] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0x2210, wParam=0x1ec0001, lParam=0x201ec) returned 0x0 [0028.960] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.960] GetParent (hWnd=0x201ec) returned 0x301ba [0028.960] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.960] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.960] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.960] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Donate 0.15 BTC to this wallet", dwStyle=0x5600000d, X=52, Y=390, nWidth=163, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x401be [0028.960] SetWindowLongW (hWnd=0x401be, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.960] GetWindowLongW (hWnd=0x401be, nIndex=-4) returned 1942993097 [0028.961] SetWindowLongW (hWnd=0x401be, nIndex=-4, dwNewLong=79301830) returned 1942993097 [0028.961] GetWindowLongW (hWnd=0x401be, nIndex=-4) returned 79301830 [0028.961] GetWindowLongW (hWnd=0x401be, nIndex=-16) returned 1174405133 [0028.961] GetWindowLongW (hWnd=0x401be, nIndex=-12) returned 0 [0028.961] SetWindowLongW (hWnd=0x401be, nIndex=-12, dwNewLong=262590) returned 0 [0028.961] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.961] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.961] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.961] GetWindow (hWnd=0x401be, uCmd=0x3) returned 0x201ec [0028.961] GetClientRect (in: hWnd=0x401be, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.961] GetWindowRect (in: hWnd=0x401be, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.961] GetParent (hWnd=0x401be) returned 0x301ba [0028.961] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.961] SetWindowTextW (hWnd=0x401be, lpString="Donate 0.15 BTC to this wallet") returned 1 [0028.961] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0xc, wParam=0x0, lParam=0x251719c) returned 0x1 [0028.961] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0x5, wParam=0x0, lParam=0x1000a3) returned 0x0 [0028.961] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0x3, wParam=0x0, lParam=0x1860034) returned 0x0 [0028.961] GetClientRect (in: hWnd=0x401be, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.961] GetWindowRect (in: hWnd=0x401be, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.961] GetParent (hWnd=0x401be) returned 0x301ba [0028.962] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.962] SendMessageW (hWnd=0x401be, Msg=0x2210, wParam=0x1be0001, lParam=0x401be) returned 0x0 [0028.962] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0x2210, wParam=0x1be0001, lParam=0x401be) returned 0x0 [0028.962] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.962] GetParent (hWnd=0x401be) returned 0x301ba [0028.962] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.962] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.962] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.962] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="WARNING: If you turn your PC off you will not get your files back!!!", dwStyle=0x5600000d, X=414, Y=12, nWidth=359, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x301c2 [0028.962] SetWindowLongW (hWnd=0x301c2, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.962] GetWindowLongW (hWnd=0x301c2, nIndex=-4) returned 1942993097 [0028.962] SetWindowLongW (hWnd=0x301c2, nIndex=-4, dwNewLong=79301870) returned 1942993097 [0028.962] GetWindowLongW (hWnd=0x301c2, nIndex=-4) returned 79301870 [0028.962] GetWindowLongW (hWnd=0x301c2, nIndex=-16) returned 1174405133 [0028.962] GetWindowLongW (hWnd=0x301c2, nIndex=-12) returned 0 [0028.962] SetWindowLongW (hWnd=0x301c2, nIndex=-12, dwNewLong=197058) returned 0 [0028.963] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.963] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.963] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.963] GetWindow (hWnd=0x301c2, uCmd=0x3) returned 0x401be [0028.963] GetClientRect (in: hWnd=0x301c2, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.963] GetWindowRect (in: hWnd=0x301c2, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.963] GetParent (hWnd=0x301c2) returned 0x301ba [0028.963] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.963] SetWindowTextW (hWnd=0x301c2, lpString="WARNING: If you turn your PC off you will not get your files back!!!") returned 1 [0028.963] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0xc, wParam=0x0, lParam=0x25170e8) returned 0x1 [0028.963] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0x5, wParam=0x0, lParam=0x100167) returned 0x0 [0028.963] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0x3, wParam=0x0, lParam=0xc019e) returned 0x0 [0028.963] GetClientRect (in: hWnd=0x301c2, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.963] GetWindowRect (in: hWnd=0x301c2, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.963] GetParent (hWnd=0x301c2) returned 0x301ba [0028.963] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.963] SendMessageW (hWnd=0x301c2, Msg=0x2210, wParam=0x1c20001, lParam=0x301c2) returned 0x0 [0028.963] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0x2210, wParam=0x1c20001, lParam=0x301c2) returned 0x0 [0028.963] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.964] GetParent (hWnd=0x301c2) returned 0x301ba [0028.964] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.964] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.964] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.964] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="have been infected", dwStyle=0x5600000d, X=317, Y=301, nWidth=108, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x301e0 [0028.964] SetWindowLongW (hWnd=0x301e0, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.964] GetWindowLongW (hWnd=0x301e0, nIndex=-4) returned 1942993097 [0028.964] SetWindowLongW (hWnd=0x301e0, nIndex=-4, dwNewLong=79301910) returned 1942993097 [0028.964] GetWindowLongW (hWnd=0x301e0, nIndex=-4) returned 79301910 [0028.964] GetWindowLongW (hWnd=0x301e0, nIndex=-16) returned 1174405133 [0028.964] GetWindowLongW (hWnd=0x301e0, nIndex=-12) returned 0 [0028.964] SetWindowLongW (hWnd=0x301e0, nIndex=-12, dwNewLong=197088) returned 0 [0028.964] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.965] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.965] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.965] GetWindow (hWnd=0x301e0, uCmd=0x3) returned 0x301c2 [0028.965] GetClientRect (in: hWnd=0x301e0, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.965] GetWindowRect (in: hWnd=0x301e0, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.965] GetParent (hWnd=0x301e0) returned 0x301ba [0028.965] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.965] SetWindowTextW (hWnd=0x301e0, lpString="have been infected") returned 1 [0028.965] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0xc, wParam=0x0, lParam=0x2517098) returned 0x1 [0028.965] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0x5, wParam=0x0, lParam=0x10006c) returned 0x0 [0028.965] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0x3, wParam=0x0, lParam=0x12d013d) returned 0x0 [0028.965] GetClientRect (in: hWnd=0x301e0, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.965] GetWindowRect (in: hWnd=0x301e0, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.965] GetParent (hWnd=0x301e0) returned 0x301ba [0028.965] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.965] SendMessageW (hWnd=0x301e0, Msg=0x2210, wParam=0x1e00001, lParam=0x301e0) returned 0x0 [0028.965] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0x2210, wParam=0x1e00001, lParam=0x301e0) returned 0x0 [0028.965] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.965] GetParent (hWnd=0x301e0) returned 0x301ba [0028.965] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.966] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.966] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.966] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="infected your PC", dwStyle=0x5600000d, X=161, Y=57, nWidth=117, nHeight=20, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201e8 [0028.966] SetWindowLongW (hWnd=0x201e8, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.966] GetWindowLongW (hWnd=0x201e8, nIndex=-4) returned 1942993097 [0028.967] SetWindowLongW (hWnd=0x201e8, nIndex=-4, dwNewLong=79345062) returned 1942993097 [0028.967] GetWindowLongW (hWnd=0x201e8, nIndex=-4) returned 79345062 [0028.967] GetWindowLongW (hWnd=0x201e8, nIndex=-16) returned 1174405133 [0028.967] GetWindowLongW (hWnd=0x201e8, nIndex=-12) returned 0 [0028.967] SetWindowLongW (hWnd=0x201e8, nIndex=-12, dwNewLong=131560) returned 0 [0028.967] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.968] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.968] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.968] GetWindow (hWnd=0x201e8, uCmd=0x3) returned 0x301e0 [0028.968] GetClientRect (in: hWnd=0x201e8, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.968] GetWindowRect (in: hWnd=0x201e8, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.968] GetParent (hWnd=0x201e8) returned 0x301ba [0028.968] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.968] SetWindowTextW (hWnd=0x201e8, lpString="infected your PC") returned 1 [0028.968] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0xc, wParam=0x0, lParam=0x251704c) returned 0x1 [0028.968] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0x5, wParam=0x0, lParam=0x140075) returned 0x0 [0028.969] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0x3, wParam=0x0, lParam=0x3900a1) returned 0x0 [0028.969] GetClientRect (in: hWnd=0x201e8, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.969] GetWindowRect (in: hWnd=0x201e8, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.969] GetParent (hWnd=0x201e8) returned 0x301ba [0028.969] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.969] SendMessageW (hWnd=0x201e8, Msg=0x2210, wParam=0x1e80001, lParam=0x201e8) returned 0x0 [0028.969] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0x2210, wParam=0x1e80001, lParam=0x201e8) returned 0x0 [0028.969] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.969] GetParent (hWnd=0x201e8) returned 0x301ba [0028.969] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.969] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.969] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.969] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="to get your files back.", dwStyle=0x5600000d, X=52, Y=353, nWidth=121, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201ea [0028.969] SetWindowLongW (hWnd=0x201ea, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.969] GetWindowLongW (hWnd=0x201ea, nIndex=-4) returned 1942993097 [0028.970] SetWindowLongW (hWnd=0x201ea, nIndex=-4, dwNewLong=79345126) returned 1942993097 [0028.970] GetWindowLongW (hWnd=0x201ea, nIndex=-4) returned 79345126 [0028.970] GetWindowLongW (hWnd=0x201ea, nIndex=-16) returned 1174405133 [0028.970] GetWindowLongW (hWnd=0x201ea, nIndex=-12) returned 0 [0028.970] SetWindowLongW (hWnd=0x201ea, nIndex=-12, dwNewLong=131562) returned 0 [0028.970] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.970] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.970] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.970] GetWindow (hWnd=0x201ea, uCmd=0x3) returned 0x201e8 [0028.970] GetClientRect (in: hWnd=0x201ea, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.970] GetWindowRect (in: hWnd=0x201ea, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.970] GetParent (hWnd=0x201ea) returned 0x301ba [0028.970] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.970] SetWindowTextW (hWnd=0x201ea, lpString="to get your files back.") returned 1 [0028.970] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0xc, wParam=0x0, lParam=0x2516ff4) returned 0x1 [0028.970] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0x5, wParam=0x0, lParam=0x100079) returned 0x0 [0028.970] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0x3, wParam=0x0, lParam=0x1610034) returned 0x0 [0028.970] GetClientRect (in: hWnd=0x201ea, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.970] GetWindowRect (in: hWnd=0x201ea, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.971] GetParent (hWnd=0x201ea) returned 0x301ba [0028.971] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.971] SendMessageW (hWnd=0x201ea, Msg=0x2210, wParam=0x1ea0001, lParam=0x201ea) returned 0x0 [0028.971] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0x2210, wParam=0x1ea0001, lParam=0x201ea) returned 0x0 [0028.971] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.971] GetParent (hWnd=0x201ea) returned 0x301ba [0028.971] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.971] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.971] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.971] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Your computer has been infected. You must do as instructed", dwStyle=0x5600000d, X=52, Y=337, nWidth=326, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201dc [0028.971] SetWindowLongW (hWnd=0x201dc, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.971] GetWindowLongW (hWnd=0x201dc, nIndex=-4) returned 1942993097 [0028.971] SetWindowLongW (hWnd=0x201dc, nIndex=-4, dwNewLong=79345166) returned 1942993097 [0028.971] GetWindowLongW (hWnd=0x201dc, nIndex=-4) returned 79345166 [0028.971] GetWindowLongW (hWnd=0x201dc, nIndex=-16) returned 1174405133 [0028.971] GetWindowLongW (hWnd=0x201dc, nIndex=-12) returned 0 [0028.972] SetWindowLongW (hWnd=0x201dc, nIndex=-12, dwNewLong=131548) returned 0 [0028.972] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.972] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.972] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.972] GetWindow (hWnd=0x201dc, uCmd=0x3) returned 0x201ea [0028.972] GetClientRect (in: hWnd=0x201dc, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.972] GetWindowRect (in: hWnd=0x201dc, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.972] GetParent (hWnd=0x201dc) returned 0x301ba [0028.972] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.972] SetWindowTextW (hWnd=0x201dc, lpString="Your computer has been infected. You must do as instructed") returned 1 [0028.972] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0xc, wParam=0x0, lParam=0x2516f54) returned 0x1 [0028.972] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0x5, wParam=0x0, lParam=0x100146) returned 0x0 [0028.972] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0x3, wParam=0x0, lParam=0x1510034) returned 0x0 [0028.972] GetClientRect (in: hWnd=0x201dc, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.972] GetWindowRect (in: hWnd=0x201dc, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.972] GetParent (hWnd=0x201dc) returned 0x301ba [0028.972] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.972] SendMessageW (hWnd=0x201dc, Msg=0x2210, wParam=0x1dc0001, lParam=0x201dc) returned 0x0 [0028.972] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0x2210, wParam=0x1dc0001, lParam=0x201dc) returned 0x0 [0028.973] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.973] GetParent (hWnd=0x201dc) returned 0x301ba [0028.973] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.973] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.973] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.973] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="c0hen locker has", dwStyle=0x5600000d, X=162, Y=37, nWidth=118, nHeight=20, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201de [0028.974] SetWindowLongW (hWnd=0x201de, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.974] GetWindowLongW (hWnd=0x201de, nIndex=-4) returned 1942993097 [0028.974] SetWindowLongW (hWnd=0x201de, nIndex=-4, dwNewLong=79345206) returned 1942993097 [0028.974] GetWindowLongW (hWnd=0x201de, nIndex=-4) returned 79345206 [0028.974] GetWindowLongW (hWnd=0x201de, nIndex=-16) returned 1174405133 [0028.974] GetWindowLongW (hWnd=0x201de, nIndex=-12) returned 0 [0028.974] SetWindowLongW (hWnd=0x201de, nIndex=-12, dwNewLong=131550) returned 0 [0028.974] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.974] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.974] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.974] GetWindow (hWnd=0x201de, uCmd=0x3) returned 0x201dc [0028.974] GetClientRect (in: hWnd=0x201de, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.974] GetWindowRect (in: hWnd=0x201de, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.974] GetParent (hWnd=0x201de) returned 0x301ba [0028.974] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.975] SetWindowTextW (hWnd=0x201de, lpString="c0hen locker has") returned 1 [0028.975] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0xc, wParam=0x0, lParam=0x2516f08) returned 0x1 [0028.975] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0x5, wParam=0x0, lParam=0x140076) returned 0x0 [0028.975] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0x3, wParam=0x0, lParam=0x2500a2) returned 0x0 [0028.975] GetClientRect (in: hWnd=0x201de, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.975] GetWindowRect (in: hWnd=0x201de, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.975] GetParent (hWnd=0x201de) returned 0x301ba [0028.975] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.975] SendMessageW (hWnd=0x201de, Msg=0x2210, wParam=0x1de0001, lParam=0x201de) returned 0x0 [0028.975] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0x2210, wParam=0x1de0001, lParam=0x201de) returned 0x0 [0028.975] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.975] GetParent (hWnd=0x201de) returned 0x301ba [0028.975] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.975] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.975] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.975] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=32, Y=12, nWidth=123, nHeight=104, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201d8 [0028.975] SetWindowLongW (hWnd=0x201d8, nIndex=-4, dwNewLong=1997940189) returned 79300582 [0028.976] GetWindowLongW (hWnd=0x201d8, nIndex=-4) returned 1997940189 [0028.976] SetWindowLongW (hWnd=0x201d8, nIndex=-4, dwNewLong=79345246) returned 1997940189 [0028.976] GetWindowLongW (hWnd=0x201d8, nIndex=-4) returned 79345246 [0028.976] GetWindowLongW (hWnd=0x201d8, nIndex=-16) returned 1174405120 [0028.976] GetWindowLongW (hWnd=0x201d8, nIndex=-12) returned 0 [0028.976] SetWindowLongW (hWnd=0x201d8, nIndex=-12, dwNewLong=131544) returned 0 [0028.976] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.976] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.976] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.976] GetWindow (hWnd=0x201d8, uCmd=0x3) returned 0x201de [0028.976] GetClientRect (in: hWnd=0x201d8, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0028.976] GetWindowRect (in: hWnd=0x201d8, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0028.976] GetParent (hWnd=0x201d8) returned 0x301ba [0028.976] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5b4, cPoints=0x2 | out: lpPoints=0x1ee5b4) returned -11534661 [0028.976] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0x5, wParam=0x0, lParam=0x68007b) returned 0x0 [0028.977] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0x3, wParam=0x0, lParam=0xc0020) returned 0x0 [0028.977] GetClientRect (in: hWnd=0x201d8, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0028.977] GetWindowRect (in: hWnd=0x201d8, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0028.977] GetParent (hWnd=0x201d8) returned 0x301ba [0028.977] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee60c, cPoints=0x2 | out: lpPoints=0x1ee60c) returned -11534661 [0028.977] SendMessageW (hWnd=0x201d8, Msg=0x2210, wParam=0x1d80001, lParam=0x201d8) returned 0x0 [0028.977] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0x2210, wParam=0x1d80001, lParam=0x201d8) returned 0x0 [0028.977] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.977] GetParent (hWnd=0x201d8) returned 0x301ba [0028.977] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.977] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.977] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.977] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="discord.com/download", dwStyle=0x5600000d, X=52, Y=468, nWidth=131, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201da [0028.977] SetWindowLongW (hWnd=0x201da, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.977] GetWindowLongW (hWnd=0x201da, nIndex=-4) returned 1942993097 [0028.977] SetWindowLongW (hWnd=0x201da, nIndex=-4, dwNewLong=79345286) returned 1942993097 [0028.977] GetWindowLongW (hWnd=0x201da, nIndex=-4) returned 79345286 [0028.978] GetWindowLongW (hWnd=0x201da, nIndex=-16) returned 1174405133 [0028.978] GetWindowLongW (hWnd=0x201da, nIndex=-12) returned 0 [0028.978] SetWindowLongW (hWnd=0x201da, nIndex=-12, dwNewLong=131546) returned 0 [0028.978] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.978] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.978] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.978] GetWindow (hWnd=0x201da, uCmd=0x3) returned 0x201d8 [0028.978] GetClientRect (in: hWnd=0x201da, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.978] GetWindowRect (in: hWnd=0x201da, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.978] GetParent (hWnd=0x201da) returned 0x301ba [0028.978] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.978] SetWindowTextW (hWnd=0x201da, lpString="discord.com/download") returned 1 [0028.978] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x2516e94) returned 0x1 [0028.978] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0x5, wParam=0x0, lParam=0x100083) returned 0x0 [0028.978] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0x3, wParam=0x0, lParam=0x1d40034) returned 0x0 [0028.978] GetClientRect (in: hWnd=0x201da, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.978] GetWindowRect (in: hWnd=0x201da, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.978] GetParent (hWnd=0x201da) returned 0x301ba [0028.978] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.978] SendMessageW (hWnd=0x201da, Msg=0x2210, wParam=0x1da0001, lParam=0x201da) returned 0x0 [0028.978] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0x2210, wParam=0x1da0001, lParam=0x201da) returned 0x0 [0028.978] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.979] GetParent (hWnd=0x201da) returned 0x301ba [0028.979] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0028.979] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.979] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.979] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Download discord and add c0hen#7722 for decryption key", dwStyle=0x5600000d, X=52, Y=452, nWidth=315, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201d4 [0028.979] SetWindowLongW (hWnd=0x201d4, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0028.979] GetWindowLongW (hWnd=0x201d4, nIndex=-4) returned 1942993097 [0028.979] SetWindowLongW (hWnd=0x201d4, nIndex=-4, dwNewLong=79345326) returned 1942993097 [0028.979] GetWindowLongW (hWnd=0x201d4, nIndex=-4) returned 79345326 [0028.979] GetWindowLongW (hWnd=0x201d4, nIndex=-16) returned 1174405133 [0028.979] GetWindowLongW (hWnd=0x201d4, nIndex=-12) returned 0 [0028.979] SetWindowLongW (hWnd=0x201d4, nIndex=-12, dwNewLong=131540) returned 0 [0028.979] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0028.979] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0028.980] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0028.980] GetWindow (hWnd=0x201d4, uCmd=0x3) returned 0x201da [0028.980] GetClientRect (in: hWnd=0x201d4, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.980] GetWindowRect (in: hWnd=0x201d4, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0028.980] GetParent (hWnd=0x201d4) returned 0x301ba [0028.980] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0028.980] SetWindowTextW (hWnd=0x201d4, lpString="Download discord and add c0hen#7722 for decryption key") returned 1 [0028.980] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0xc, wParam=0x0, lParam=0x2516dfc) returned 0x1 [0028.980] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0x5, wParam=0x0, lParam=0x10013b) returned 0x0 [0028.980] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0x3, wParam=0x0, lParam=0x1c40034) returned 0x0 [0028.980] GetClientRect (in: hWnd=0x201d4, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.980] GetWindowRect (in: hWnd=0x201d4, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0028.980] GetParent (hWnd=0x201d4) returned 0x301ba [0028.980] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0028.980] SendMessageW (hWnd=0x201d4, Msg=0x2210, wParam=0x1d40001, lParam=0x201d4) returned 0x0 [0028.980] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0x2210, wParam=0x1d40001, lParam=0x201d4) returned 0x0 [0028.980] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0028.980] GetParent (hWnd=0x201d4) returned 0x301ba [0028.980] GetCurrentActCtx (in: lphActCtx=0x1eed94 | out: lphActCtx=0x1eed94*=0x384454) returned 1 [0028.980] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0028.981] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x26081d8 | out: lpWndClass=0x26081d8) returned 1 [0028.981] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.981] CoTaskMemAlloc (cb=0x54) returned 0x3702b0 [0028.981] RegisterClassW (lpWndClass=0x1eec4c) returned 0xc135 [0028.981] CoTaskMemFree (pv=0x3702b0) [0028.981] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0028.981] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=514, Y=450, nWidth=231, nHeight=20, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201d6 [0028.981] SetWindowLongW (hWnd=0x201d6, nIndex=-4, dwNewLong=1942919632) returned 79345366 [0028.981] GetWindowLongW (hWnd=0x201d6, nIndex=-4) returned 1942919632 [0028.982] SetWindowLongW (hWnd=0x201d6, nIndex=-4, dwNewLong=79345406) returned 1942919632 [0028.982] GetWindowLongW (hWnd=0x201d6, nIndex=-4) returned 79345406 [0028.982] GetWindowLongW (hWnd=0x201d6, nIndex=-16) returned 1174470848 [0028.982] GetWindowLongW (hWnd=0x201d6, nIndex=-12) returned 0 [0028.982] SetWindowLongW (hWnd=0x201d6, nIndex=-12, dwNewLong=131542) returned 0 [0028.982] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x81, wParam=0x0, lParam=0x1ee828) returned 0x1 [0028.984] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x83, wParam=0x0, lParam=0x1ee814) returned 0x0 [0028.984] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x1, wParam=0x0, lParam=0x1ee828) returned 0x1 [0028.987] SendMessageW (hWnd=0x201d6, Msg=0x2055, wParam=0x201d6, lParam=0x3) returned 0x2 [0028.987] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0028.987] GetWindow (hWnd=0x201d6, uCmd=0x3) returned 0x201d4 [0028.987] GetClientRect (in: hWnd=0x201d6, lpRect=0x1ee568 | out: lpRect=0x1ee568) returned 1 [0028.987] GetWindowRect (in: hWnd=0x201d6, lpRect=0x1ee568 | out: lpRect=0x1ee568) returned 1 [0028.987] GetParent (hWnd=0x201d6) returned 0x301ba [0028.987] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee568, cPoints=0x2 | out: lpPoints=0x1ee568) returned -11534661 [0028.987] SendMessageW (hWnd=0x201d6, Msg=0x30, wParam=0xe20a0830, lParam=0x0) returned 0x1 [0028.988] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x30, wParam=0xe20a0830, lParam=0x0) returned 0x1 [0028.989] SendMessageW (hWnd=0x201d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0028.990] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0028.991] GetSystemMetrics (nIndex=5) returned 1 [0028.991] GetSystemMetrics (nIndex=6) returned 1 [0028.991] SendMessageW (hWnd=0x201d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0028.991] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0028.991] SendMessageW (hWnd=0x201d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0028.991] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0029.003] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x5, wParam=0x0, lParam=0x1000e3) returned 0x0 [0029.003] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x3, wParam=0x0, lParam=0x1c40204) returned 0x0 [0029.003] GetClientRect (in: hWnd=0x201d6, lpRect=0x1ee5c0 | out: lpRect=0x1ee5c0) returned 1 [0029.003] GetWindowRect (in: hWnd=0x201d6, lpRect=0x1ee5c0 | out: lpRect=0x1ee5c0) returned 1 [0029.003] GetParent (hWnd=0x201d6) returned 0x301ba [0029.003] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5c0, cPoints=0x2 | out: lpPoints=0x1ee5c0) returned -11534661 [0029.003] SendMessageW (hWnd=0x201d6, Msg=0x2210, wParam=0x1d60001, lParam=0x201d6) returned 0x0 [0029.003] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x2210, wParam=0x1d60001, lParam=0x201d6) returned 0x0 [0029.004] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0029.004] GetParent (hWnd=0x201d6) returned 0x301ba [0029.005] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0029.005] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.005] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x2608510 | out: lpWndClass=0x2608510) returned 1 [0029.005] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0029.005] CoTaskMemAlloc (cb=0x58) returned 0x3702b0 [0029.005] RegisterClassW (lpWndClass=0x1eec70) returned 0xc13b [0029.005] CoTaskMemFree (pv=0x3702b0) [0029.006] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0029.006] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r14_ad1", lpWindowName="decrypt", dwStyle=0x5601000b, X=514, Y=472, nWidth=231, nHeight=23, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201d0 [0029.006] SetWindowLongW (hWnd=0x201d0, nIndex=-4, dwNewLong=1943057557) returned 79345446 [0029.006] GetWindowLongW (hWnd=0x201d0, nIndex=-4) returned 1943057557 [0029.006] SetWindowLongW (hWnd=0x201d0, nIndex=-4, dwNewLong=79345486) returned 1943057557 [0029.006] GetWindowLongW (hWnd=0x201d0, nIndex=-4) returned 79345486 [0029.006] GetWindowLongW (hWnd=0x201d0, nIndex=-16) returned 1174470667 [0029.006] GetWindowLongW (hWnd=0x201d0, nIndex=-12) returned 0 [0029.006] SetWindowLongW (hWnd=0x201d0, nIndex=-12, dwNewLong=131536) returned 0 [0029.006] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0029.006] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0029.006] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0029.007] SendMessageW (hWnd=0x201d0, Msg=0x2055, wParam=0x201d0, lParam=0x3) returned 0x2 [0029.007] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0029.007] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0029.007] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0029.007] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.007] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.007] RedrawWindow (hWnd=0x40120, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.007] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.008] RedrawWindow (hWnd=0x1701b0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.008] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.008] RedrawWindow (hWnd=0x6011c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.008] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.008] RedrawWindow (hWnd=0x201ee, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.008] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.008] RedrawWindow (hWnd=0x201ec, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x401be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x301c2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x301e0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x201e8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x201ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x201dc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x201de, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x201d8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x201da, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x201d4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x201d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0029.009] RedrawWindow (hWnd=0x201d0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] RedrawWindow (hWnd=0x301ba, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.009] GetWindow (hWnd=0x201d0, uCmd=0x3) returned 0x201d6 [0029.010] GetClientRect (in: hWnd=0x201d0, lpRect=0x1ee56c | out: lpRect=0x1ee56c) returned 1 [0029.010] GetWindowRect (in: hWnd=0x201d0, lpRect=0x1ee56c | out: lpRect=0x1ee56c) returned 1 [0029.010] GetParent (hWnd=0x201d0) returned 0x301ba [0029.010] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee56c, cPoints=0x2 | out: lpPoints=0x1ee56c) returned -11534661 [0029.010] SetWindowTextW (hWnd=0x201d0, lpString="decrypt") returned 1 [0029.010] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0xc, wParam=0x0, lParam=0x2516da4) returned 0x1 [0029.010] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x5, wParam=0x0, lParam=0x1700e7) returned 0x0 [0029.010] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x3, wParam=0x0, lParam=0x1d80202) returned 0x0 [0029.010] GetClientRect (in: hWnd=0x201d0, lpRect=0x1ee5c4 | out: lpRect=0x1ee5c4) returned 1 [0029.010] GetWindowRect (in: hWnd=0x201d0, lpRect=0x1ee5c4 | out: lpRect=0x1ee5c4) returned 1 [0029.010] GetParent (hWnd=0x201d0) returned 0x301ba [0029.010] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5c4, cPoints=0x2 | out: lpPoints=0x1ee5c4) returned -11534661 [0029.010] SendMessageW (hWnd=0x201d0, Msg=0x2210, wParam=0x1d00001, lParam=0x201d0) returned 0x0 [0029.010] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x2210, wParam=0x1d00001, lParam=0x201d0) returned 0x0 [0029.010] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0029.010] GetParent (hWnd=0x201d0) returned 0x301ba [0029.010] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0029.010] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.011] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0029.011] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Whats happening?", dwStyle=0x5600000d, X=140, Y=285, nWidth=106, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201d2 [0029.011] SetWindowLongW (hWnd=0x201d2, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0029.011] GetWindowLongW (hWnd=0x201d2, nIndex=-4) returned 1942993097 [0029.011] SetWindowLongW (hWnd=0x201d2, nIndex=-4, dwNewLong=79345526) returned 1942993097 [0029.011] GetWindowLongW (hWnd=0x201d2, nIndex=-4) returned 79345526 [0029.011] GetWindowLongW (hWnd=0x201d2, nIndex=-16) returned 1174405133 [0029.011] GetWindowLongW (hWnd=0x201d2, nIndex=-12) returned 0 [0029.011] SetWindowLongW (hWnd=0x201d2, nIndex=-12, dwNewLong=131538) returned 0 [0029.011] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0029.011] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0029.011] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0029.011] GetWindow (hWnd=0x201d2, uCmd=0x3) returned 0x201d0 [0029.011] GetClientRect (in: hWnd=0x201d2, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0029.011] GetWindowRect (in: hWnd=0x201d2, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0029.011] GetParent (hWnd=0x201d2) returned 0x301ba [0029.012] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0029.012] SetWindowTextW (hWnd=0x201d2, lpString="Whats happening?") returned 1 [0029.012] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0xc, wParam=0x0, lParam=0x2516d58) returned 0x1 [0029.012] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0x5, wParam=0x0, lParam=0x10006a) returned 0x0 [0029.012] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0x3, wParam=0x0, lParam=0x11d008c) returned 0x0 [0029.012] GetClientRect (in: hWnd=0x201d2, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0029.012] GetWindowRect (in: hWnd=0x201d2, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0029.012] GetParent (hWnd=0x201d2) returned 0x301ba [0029.012] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0029.012] SendMessageW (hWnd=0x201d2, Msg=0x2210, wParam=0x1d20001, lParam=0x201d2) returned 0x0 [0029.012] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0x2210, wParam=0x1d20001, lParam=0x201d2) returned 0x0 [0029.012] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0029.012] GetParent (hWnd=0x201d2) returned 0x301ba [0029.012] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0029.012] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.012] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0029.012] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="All devices on your network", dwStyle=0x5600000d, X=317, Y=285, nWidth=154, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201cc [0029.013] SetWindowLongW (hWnd=0x201cc, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0029.013] GetWindowLongW (hWnd=0x201cc, nIndex=-4) returned 1942993097 [0029.013] SetWindowLongW (hWnd=0x201cc, nIndex=-4, dwNewLong=79345566) returned 1942993097 [0029.013] GetWindowLongW (hWnd=0x201cc, nIndex=-4) returned 79345566 [0029.013] GetWindowLongW (hWnd=0x201cc, nIndex=-16) returned 1174405133 [0029.013] GetWindowLongW (hWnd=0x201cc, nIndex=-12) returned 0 [0029.013] SetWindowLongW (hWnd=0x201cc, nIndex=-12, dwNewLong=131532) returned 0 [0029.013] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0029.013] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0029.013] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0029.013] GetWindow (hWnd=0x201cc, uCmd=0x3) returned 0x201d2 [0029.013] GetClientRect (in: hWnd=0x201cc, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0029.013] GetWindowRect (in: hWnd=0x201cc, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0029.013] GetParent (hWnd=0x201cc) returned 0x301ba [0029.013] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0029.014] SetWindowTextW (hWnd=0x201cc, lpString="All devices on your network") returned 1 [0029.014] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0xc, wParam=0x0, lParam=0x2516cf8) returned 0x1 [0029.014] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0x5, wParam=0x0, lParam=0x10009a) returned 0x0 [0029.014] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0x3, wParam=0x0, lParam=0x11d013d) returned 0x0 [0029.014] GetClientRect (in: hWnd=0x201cc, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0029.014] GetWindowRect (in: hWnd=0x201cc, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0029.014] GetParent (hWnd=0x201cc) returned 0x301ba [0029.014] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0029.014] SendMessageW (hWnd=0x201cc, Msg=0x2210, wParam=0x1cc0001, lParam=0x201cc) returned 0x0 [0029.014] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0x2210, wParam=0x1cc0001, lParam=0x201cc) returned 0x0 [0029.014] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0029.014] GetParent (hWnd=0x201cc) returned 0x301ba [0029.014] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0029.014] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.014] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0029.014] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="encrypted with ransomware", dwStyle=0x5600000d, X=523, Y=301, nWidth=154, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201ce [0029.014] SetWindowLongW (hWnd=0x201ce, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0029.014] GetWindowLongW (hWnd=0x201ce, nIndex=-4) returned 1942993097 [0029.015] SetWindowLongW (hWnd=0x201ce, nIndex=-4, dwNewLong=79345606) returned 1942993097 [0029.015] GetWindowLongW (hWnd=0x201ce, nIndex=-4) returned 79345606 [0029.015] GetWindowLongW (hWnd=0x201ce, nIndex=-16) returned 1174405133 [0029.015] GetWindowLongW (hWnd=0x201ce, nIndex=-12) returned 0 [0029.015] SetWindowLongW (hWnd=0x201ce, nIndex=-12, dwNewLong=131534) returned 0 [0029.015] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0029.015] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0029.015] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0029.015] GetWindow (hWnd=0x201ce, uCmd=0x3) returned 0x201cc [0029.015] GetClientRect (in: hWnd=0x201ce, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0029.015] GetWindowRect (in: hWnd=0x201ce, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0029.015] GetParent (hWnd=0x201ce) returned 0x301ba [0029.015] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0029.015] SetWindowTextW (hWnd=0x201ce, lpString="encrypted with ransomware") returned 1 [0029.015] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0xc, wParam=0x0, lParam=0x2516c9c) returned 0x1 [0029.015] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0x5, wParam=0x0, lParam=0x10009a) returned 0x0 [0029.016] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0x3, wParam=0x0, lParam=0x12d020b) returned 0x0 [0029.016] GetClientRect (in: hWnd=0x201ce, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0029.016] GetWindowRect (in: hWnd=0x201ce, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0029.016] GetParent (hWnd=0x201ce) returned 0x301ba [0029.016] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0029.016] SendMessageW (hWnd=0x201ce, Msg=0x2210, wParam=0x1ce0001, lParam=0x201ce) returned 0x0 [0029.016] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0x2210, wParam=0x1ce0001, lParam=0x201ce) returned 0x0 [0029.016] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0029.016] GetParent (hWnd=0x201ce) returned 0x301ba [0029.016] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0029.016] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.016] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0029.016] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="All of your computers files have been ", dwStyle=0x5600000d, X=523, Y=285, nWidth=206, nHeight=16, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201c8 [0029.016] SetWindowLongW (hWnd=0x201c8, nIndex=-4, dwNewLong=1942993097) returned 79301630 [0029.016] GetWindowLongW (hWnd=0x201c8, nIndex=-4) returned 1942993097 [0029.017] SetWindowLongW (hWnd=0x201c8, nIndex=-4, dwNewLong=79345646) returned 1942993097 [0029.017] GetWindowLongW (hWnd=0x201c8, nIndex=-4) returned 79345646 [0029.017] GetWindowLongW (hWnd=0x201c8, nIndex=-16) returned 1174405133 [0029.017] GetWindowLongW (hWnd=0x201c8, nIndex=-12) returned 0 [0029.017] SetWindowLongW (hWnd=0x201c8, nIndex=-12, dwNewLong=131528) returned 0 [0029.017] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0029.017] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0029.017] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0029.017] GetWindow (hWnd=0x201c8, uCmd=0x3) returned 0x201ce [0029.017] GetClientRect (in: hWnd=0x201c8, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0029.017] GetWindowRect (in: hWnd=0x201c8, lpRect=0x1ee578 | out: lpRect=0x1ee578) returned 1 [0029.017] GetParent (hWnd=0x201c8) returned 0x301ba [0029.017] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee578, cPoints=0x2 | out: lpPoints=0x1ee578) returned -11534661 [0029.017] SetWindowTextW (hWnd=0x201c8, lpString="All of your computers files have been ") returned 1 [0029.017] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0xc, wParam=0x0, lParam=0x2516c24) returned 0x1 [0029.017] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0x5, wParam=0x0, lParam=0x1000ce) returned 0x0 [0029.017] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0x3, wParam=0x0, lParam=0x11d020b) returned 0x0 [0029.017] GetClientRect (in: hWnd=0x201c8, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0029.017] GetWindowRect (in: hWnd=0x201c8, lpRect=0x1ee5d0 | out: lpRect=0x1ee5d0) returned 1 [0029.017] GetParent (hWnd=0x201c8) returned 0x301ba [0029.017] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5d0, cPoints=0x2 | out: lpPoints=0x1ee5d0) returned -11534661 [0029.018] SendMessageW (hWnd=0x201c8, Msg=0x2210, wParam=0x1c80001, lParam=0x201c8) returned 0x0 [0029.018] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0x2210, wParam=0x1c80001, lParam=0x201c8) returned 0x0 [0029.018] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0029.018] GetParent (hWnd=0x201c8) returned 0x301ba [0029.018] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0029.018] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.018] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0029.018] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=70, Y=9, nWidth=241, nHeight=424, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201ca [0029.018] SetWindowLongW (hWnd=0x201ca, nIndex=-4, dwNewLong=1997940189) returned 79300582 [0029.018] GetWindowLongW (hWnd=0x201ca, nIndex=-4) returned 1997940189 [0029.018] SetWindowLongW (hWnd=0x201ca, nIndex=-4, dwNewLong=79345686) returned 1997940189 [0029.018] GetWindowLongW (hWnd=0x201ca, nIndex=-4) returned 79345686 [0029.018] GetWindowLongW (hWnd=0x201ca, nIndex=-16) returned 1174405120 [0029.018] GetWindowLongW (hWnd=0x201ca, nIndex=-12) returned 0 [0029.018] SetWindowLongW (hWnd=0x201ca, nIndex=-12, dwNewLong=131530) returned 0 [0029.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0029.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0029.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0029.019] GetWindow (hWnd=0x201ca, uCmd=0x3) returned 0x201c8 [0029.019] GetClientRect (in: hWnd=0x201ca, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0029.019] GetWindowRect (in: hWnd=0x201ca, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0029.019] GetParent (hWnd=0x201ca) returned 0x301ba [0029.019] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5b4, cPoints=0x2 | out: lpPoints=0x1ee5b4) returned -11534661 [0029.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0x5, wParam=0x0, lParam=0x1a800f1) returned 0x0 [0029.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0x3, wParam=0x0, lParam=0x90046) returned 0x0 [0029.019] GetClientRect (in: hWnd=0x201ca, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0029.019] GetWindowRect (in: hWnd=0x201ca, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0029.019] GetParent (hWnd=0x201ca) returned 0x301ba [0029.019] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee60c, cPoints=0x2 | out: lpPoints=0x1ee60c) returned -11534661 [0029.019] SendMessageW (hWnd=0x201ca, Msg=0x2210, wParam=0x1ca0001, lParam=0x201ca) returned 0x0 [0029.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0x2210, wParam=0x1ca0001, lParam=0x201ca) returned 0x0 [0029.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0029.019] GetParent (hWnd=0x201ca) returned 0x301ba [0029.019] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0029.020] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.020] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0029.020] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=320, Y=156, nWidth=132, nHeight=115, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201e2 [0029.020] SetWindowLongW (hWnd=0x201e2, nIndex=-4, dwNewLong=1997940189) returned 79300582 [0029.020] GetWindowLongW (hWnd=0x201e2, nIndex=-4) returned 1997940189 [0029.020] SetWindowLongW (hWnd=0x201e2, nIndex=-4, dwNewLong=79345726) returned 1997940189 [0029.020] GetWindowLongW (hWnd=0x201e2, nIndex=-4) returned 79345726 [0029.020] GetWindowLongW (hWnd=0x201e2, nIndex=-16) returned 1174405120 [0029.020] GetWindowLongW (hWnd=0x201e2, nIndex=-12) returned 0 [0029.020] SetWindowLongW (hWnd=0x201e2, nIndex=-12, dwNewLong=131554) returned 0 [0029.020] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0029.020] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0029.020] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0029.021] GetWindow (hWnd=0x201e2, uCmd=0x3) returned 0x201ca [0029.021] GetClientRect (in: hWnd=0x201e2, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0029.021] GetWindowRect (in: hWnd=0x201e2, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0029.021] GetParent (hWnd=0x201e2) returned 0x301ba [0029.021] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5b4, cPoints=0x2 | out: lpPoints=0x1ee5b4) returned -11534661 [0029.021] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0x5, wParam=0x0, lParam=0x730084) returned 0x0 [0029.021] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0x3, wParam=0x0, lParam=0x9c0140) returned 0x0 [0029.021] GetClientRect (in: hWnd=0x201e2, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0029.021] GetWindowRect (in: hWnd=0x201e2, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0029.021] GetParent (hWnd=0x201e2) returned 0x301ba [0029.021] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee60c, cPoints=0x2 | out: lpPoints=0x1ee60c) returned -11534661 [0029.021] SendMessageW (hWnd=0x201e2, Msg=0x2210, wParam=0x1e20001, lParam=0x201e2) returned 0x0 [0029.021] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0x2210, wParam=0x1e20001, lParam=0x201e2) returned 0x0 [0029.021] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0029.021] GetParent (hWnd=0x201e2) returned 0x301ba [0029.021] GetCurrentActCtx (in: lphActCtx=0x1eedb8 | out: lphActCtx=0x1eedb8*=0x384454) returned 1 [0029.021] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.021] GetModuleHandleW (lpModuleName=0x0) returned 0x1090000 [0029.021] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=526, Y=156, nWidth=116, nHeight=115, hWndParent=0x301ba, hMenu=0x0, hInstance=0x1090000, lpParam=0x0) returned 0x201e4 [0029.022] SetWindowLongW (hWnd=0x201e4, nIndex=-4, dwNewLong=1997940189) returned 79300582 [0029.022] GetWindowLongW (hWnd=0x201e4, nIndex=-4) returned 1997940189 [0029.022] SetWindowLongW (hWnd=0x201e4, nIndex=-4, dwNewLong=79345766) returned 1997940189 [0029.022] GetWindowLongW (hWnd=0x201e4, nIndex=-4) returned 79345766 [0029.022] GetWindowLongW (hWnd=0x201e4, nIndex=-16) returned 1174405120 [0029.022] GetWindowLongW (hWnd=0x201e4, nIndex=-12) returned 0 [0029.022] SetWindowLongW (hWnd=0x201e4, nIndex=-12, dwNewLong=131556) returned 0 [0029.022] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0x81, wParam=0x0, lParam=0x1ee84c) returned 0x1 [0029.022] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0x83, wParam=0x0, lParam=0x1ee838) returned 0x0 [0029.022] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0x1, wParam=0x0, lParam=0x1ee84c) returned 0x0 [0029.022] GetWindow (hWnd=0x201e4, uCmd=0x3) returned 0x201e2 [0029.022] GetClientRect (in: hWnd=0x201e4, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0029.022] GetWindowRect (in: hWnd=0x201e4, lpRect=0x1ee5b4 | out: lpRect=0x1ee5b4) returned 1 [0029.022] GetParent (hWnd=0x201e4) returned 0x301ba [0029.022] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee5b4, cPoints=0x2 | out: lpPoints=0x1ee5b4) returned -11534661 [0029.022] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0x5, wParam=0x0, lParam=0x730074) returned 0x0 [0029.023] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0x3, wParam=0x0, lParam=0x9c020e) returned 0x0 [0029.023] GetClientRect (in: hWnd=0x201e4, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0029.023] GetWindowRect (in: hWnd=0x201e4, lpRect=0x1ee60c | out: lpRect=0x1ee60c) returned 1 [0029.023] GetParent (hWnd=0x201e4) returned 0x301ba [0029.023] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301ba, lpPoints=0x1ee60c, cPoints=0x2 | out: lpPoints=0x1ee60c) returned -11534661 [0029.023] SendMessageW (hWnd=0x201e4, Msg=0x2210, wParam=0x1e40001, lParam=0x201e4) returned 0x0 [0029.023] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0x2210, wParam=0x1e40001, lParam=0x201e4) returned 0x0 [0029.023] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0029.023] GetParent (hWnd=0x201e4) returned 0x301ba [0029.024] GetWindowThreadProcessId (in: hWnd=0x301ba, lpdwProcessId=0x1eedcc | out: lpdwProcessId=0x1eedcc) returned 0x950 [0029.024] GetCurrentThreadId () returned 0x950 [0029.025] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc13f [0029.025] PostMessageW (hWnd=0x301ba, Msg=0xc13f, wParam=0x0, lParam=0x0) returned 1 [0029.025] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.025] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.025] GetSystemMetrics (nIndex=42) returned 0 [0029.025] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1eed40, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.025] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1eed40) returned 0xb [0029.026] GdipImageGetFrameDimensionsCount (image=0x455f080, count=0x1eed30) returned 0x0 [0029.026] GdipImageGetFrameDimensionsList (image=0x455f080, dimensionIDs=0x410f20*(Data1=0x6e0065, Data2=0x6b, Data3=0x6e, Data4=([0]=0x6f, [1]=0x0, [2]=0x77, [3]=0x0, [4]=0x6e, [5]=0x0, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0029.028] LocalFree (hMem=0x410f20) returned 0x0 [0029.030] GdipImageGetFrameDimensionsCount (image=0x455fc90, count=0x1eed30) returned 0x0 [0029.030] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x410f50 [0029.030] GdipImageGetFrameDimensionsList (image=0x455fc90, dimensionIDs=0x410f50*(Data1=0x6b, Data2=0xd2, Data3=0x0, Data4=([0]=0x2, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xfa, [5]=0x2, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0029.030] LocalFree (hMem=0x410f50) returned 0x0 [0029.030] GdipImageGetFrameDimensionsCount (image=0x4560250, count=0x1eed30) returned 0x0 [0029.030] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x410f50 [0029.030] GdipImageGetFrameDimensionsList (image=0x4560250, dimensionIDs=0x410f50*(Data1=0x7462006b, Data2=0x6180, Data3=0x4c7e, Data4=([0]=0x8e, [1]=0x3f, [2]=0xee, [3]=0x73, [4]=0x33, [5]=0xa7, [6]=0xa4, [7]=0x83)), count=0x1) returned 0x0 [0029.030] LocalFree (hMem=0x410f50) returned 0x0 [0029.030] GdipImageGetFrameDimensionsCount (image=0x4560810, count=0x1eed30) returned 0x0 [0029.030] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x410f50 [0029.030] GdipImageGetFrameDimensionsList (image=0x4560810, dimensionIDs=0x410f50*(Data1=0x7462006b, Data2=0x6180, Data3=0x4c7e, Data4=([0]=0x8e, [1]=0x3f, [2]=0xee, [3]=0x73, [4]=0x33, [5]=0xa7, [6]=0xa4, [7]=0x83)), count=0x1) returned 0x0 [0029.031] LocalFree (hMem=0x410f50) returned 0x0 [0029.031] GdipImageGetFrameDimensionsCount (image=0x5078df0, count=0x1eed30) returned 0x0 [0029.031] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x410f50 [0029.031] GdipImageGetFrameDimensionsList (image=0x5078df0, dimensionIDs=0x410f50*(Data1=0x7462006b, Data2=0x6180, Data3=0x4c7e, Data4=([0]=0x8e, [1]=0x3f, [2]=0xee, [3]=0x73, [4]=0x33, [5]=0xa7, [6]=0xa4, [7]=0x83)), count=0x1) returned 0x0 [0029.031] LocalFree (hMem=0x410f50) returned 0x0 [0029.031] GdipImageGetFrameDimensionsCount (image=0x5079320, count=0x1eed30) returned 0x0 [0029.031] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x410f50 [0029.031] GdipImageGetFrameDimensionsList (image=0x5079320, dimensionIDs=0x410f50*(Data1=0x7462006b, Data2=0x6180, Data3=0x4c7e, Data4=([0]=0x8e, [1]=0x3f, [2]=0xee, [3]=0x73, [4]=0x33, [5]=0xa7, [6]=0xa4, [7]=0x83)), count=0x1) returned 0x0 [0029.031] LocalFree (hMem=0x410f50) returned 0x0 [0029.031] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x46, wParam=0x0, lParam=0x1ef160) returned 0x0 [0029.034] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x46, wParam=0x0, lParam=0x1ef160) returned 0x0 [0029.035] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0029.035] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0029.035] NtdllDefWindowProc_W () returned 0x0 [0029.035] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0029.046] OleInitialize (pvReserved=0x0) returned 0x0 [0029.047] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x1eef20 | out: lplpMessageFilter=0x1eef20*=0x0) returned 0x0 [0029.048] InvalidateRect (hWnd=0x201d0, lpRect=0x0, bErase=0) returned 1 [0029.048] GetFocus () returned 0x0 [0029.048] SetFocus (hWnd=0x201d0) returned 0x0 [0029.062] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0029.064] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0029.064] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0029.064] GetParent (hWnd=0x301ba) returned 0x0 [0029.065] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0029.065] GetStockObject (i=5) returned 0x1900015 [0029.066] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0029.066] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0xd, wParam=0x8, lParam=0x4160b8) returned 0x7 [0029.066] GetDlgItem (hDlg=0x301ba, nIDDlgItem=131536) returned 0x201d0 [0029.066] SendMessageW (hWnd=0x201d0, Msg=0x202b, wParam=0x201d0, lParam=0x1ee958) returned 0x0 [0029.066] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x202b, wParam=0x201d0, lParam=0x1ee958) returned 0x0 [0029.066] InvalidateRect (hWnd=0x201d0, lpRect=0x0, bErase=0) returned 1 [0029.066] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.068] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1eef28 | out: lpwndpl=0x1eef28) returned 1 [0029.068] GetClientRect (in: hWnd=0x301ba, lpRect=0x1eeed4 | out: lpRect=0x1eeed4) returned 1 [0029.068] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.068] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.068] GetSystemMetrics (nIndex=42) returned 0 [0029.068] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1eed94, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.068] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1eed94) returned 0xb [0029.068] GetClientRect (in: hWnd=0x301ba, lpRect=0x1eeddc | out: lpRect=0x1eeddc) returned 1 [0029.071] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x4bab88e, dwData=0x0) returned 1 [0029.073] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1eea44 | out: lpmi=0x1eea44) returned 1 [0029.073] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x39010255 [0029.073] GetDeviceCaps (hdc=0x39010255, index=12) returned 32 [0029.073] GetDeviceCaps (hdc=0x39010255, index=14) returned 1 [0029.073] DeleteDC (hdc=0x39010255) returned 1 [0029.073] GetCurrentObject (hdc=0x160107c7, type=0x1) returned 0x1b00017 [0029.073] GetCurrentObject (hdc=0x160107c7, type=0x2) returned 0x1900010 [0029.073] GetCurrentObject (hdc=0x160107c7, type=0x7) returned 0x1050032 [0029.073] GetCurrentObject (hdc=0x160107c7, type=0x6) returned 0x18a002e [0029.073] SaveDC (hdc=0x160107c7) returned 1 [0029.074] GetNearestColor (hdc=0x160107c7, color=0xf5f5f5) returned 0xf5f5f5 [0029.074] CreateSolidBrush (color=0xf5f5f5) returned 0x19100244 [0029.075] FillRect (hDC=0x160107c7, lprc=0x1eec7c, hbr=0x19100244) returned 1 [0029.076] DeleteObject (ho=0x19100244) returned 1 [0029.076] RestoreDC (hdc=0x160107c7, nSavedDC=-1) returned 1 [0029.077] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.077] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.077] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.078] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.078] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.078] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.078] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.079] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.079] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.079] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.080] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.080] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.080] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.080] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.081] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.081] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0029.081] SetTextColor (hdc=0x120107ec, color=0x0) returned 0x0 [0029.081] SetBkColor (hdc=0x120107ec, color=0xffffff) returned 0xffffff [0029.092] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee9dc | out: lpwndpl=0x1ee9dc) returned 1 [0029.092] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee988 | out: lpRect=0x1ee988) returned 1 [0029.092] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.093] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.093] GetSystemMetrics (nIndex=42) returned 0 [0029.093] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee848, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.093] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee848) returned 0xb [0029.093] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee890 | out: lpRect=0x1ee890) returned 1 [0029.093] GetCurrentObject (hdc=0x75010763, type=0x1) returned 0x1b00017 [0029.093] GetCurrentObject (hdc=0x75010763, type=0x2) returned 0x1900010 [0029.093] GetCurrentObject (hdc=0x75010763, type=0x7) returned 0x25050810 [0029.093] GetCurrentObject (hdc=0x75010763, type=0x6) returned 0x18a002e [0029.093] SaveDC (hdc=0x75010763) returned 1 [0029.093] GetNearestColor (hdc=0x75010763, color=0xf5f5f5) returned 0xf5f5f5 [0029.093] CreateSolidBrush (color=0xf5f5f5) returned 0x1a100244 [0029.093] FillRect (hDC=0x75010763, lprc=0x1ee730, hbr=0x1a100244) returned 1 [0029.093] DeleteObject (ho=0x1a100244) returned 1 [0029.093] RestoreDC (hdc=0x75010763, nSavedDC=-1) returned 1 [0029.093] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.093] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.093] GetSystemMetrics (nIndex=42) returned 0 [0029.093] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee7e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.093] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee7e8) returned 0xb [0029.093] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee830 | out: lpRect=0x1ee830) returned 1 [0029.094] GetCurrentObject (hdc=0x75010763, type=0x1) returned 0x1b00017 [0029.094] GetCurrentObject (hdc=0x75010763, type=0x2) returned 0x1900010 [0029.094] GetCurrentObject (hdc=0x75010763, type=0x7) returned 0x25050810 [0029.094] GetCurrentObject (hdc=0x75010763, type=0x6) returned 0x18a002e [0029.094] SaveDC (hdc=0x75010763) returned 1 [0029.094] GetNearestColor (hdc=0x75010763, color=0xf5f5f5) returned 0xf5f5f5 [0029.094] CreateSolidBrush (color=0xf5f5f5) returned 0x1b100244 [0029.094] FillRect (hDC=0x75010763, lprc=0x1ee6d0, hbr=0x1b100244) returned 1 [0029.094] DeleteObject (ho=0x1b100244) returned 1 [0029.094] RestoreDC (hdc=0x75010763, nSavedDC=-1) returned 1 [0029.094] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.094] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.094] GetSystemMetrics (nIndex=42) returned 0 [0029.094] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee7e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.094] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee7e8) returned 0xb [0029.095] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0x14, wParam=0x120107ec, lParam=0x0) returned 0x1 [0029.095] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.095] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x14, wParam=0x160107c7, lParam=0x0) returned 0x1 [0029.095] GetStockObject (i=5) returned 0x1900015 [0029.095] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.096] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.096] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.096] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.096] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.097] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.097] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.097] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1eef10 | out: lpwndpl=0x1eef10) returned 1 [0029.097] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x47, wParam=0x0, lParam=0x1ef160) returned 0x0 [0029.097] GetClientRect (in: hWnd=0x301ba, lpRect=0x1eeec0 | out: lpRect=0x1eeec0) returned 1 [0029.097] GetWindowRect (in: hWnd=0x301ba, lpRect=0x1eeec0 | out: lpRect=0x1eeec0) returned 1 [0029.098] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x5, wParam=0x0, lParam=0x20f0316) returned 0x0 [0029.098] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x3, wParam=0x0, lParam=0xb10145) returned 0x0 [0029.098] GetClientRect (in: hWnd=0x301ba, lpRect=0x1eeeec | out: lpRect=0x1eeeec) returned 1 [0029.098] GetWindowRect (in: hWnd=0x301ba, lpRect=0x1eeeec | out: lpRect=0x1eeeec) returned 1 [0029.099] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.099] IsWindowUnicode (hWnd=0x301ba) returned 1 [0029.100] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.100] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.100] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.101] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.101] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.101] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.101] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0029.101] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.101] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950396) returned 0x1 [0029.102] IsWindowUnicode (hWnd=0x201d0) returned 1 [0029.102] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.102] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950396) returned 0x1 [0029.102] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0029.102] SetCursor (hCursor=0x10003) returned 0x10007 [0029.102] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.102] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.108] _TrackMouseEvent (in: lpEventTrack=0x260acdc | out: lpEventTrack=0x260acdc) returned 1 [0029.108] SendMessageW (hWnd=0x201d0, Msg=0xc134, wParam=0x0, lParam=0x0) returned 0x0 [0029.108] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0xc134, wParam=0x0, lParam=0x0) returned 0x0 [0029.110] InvalidateRect (hWnd=0x201d0, lpRect=0x0, bErase=0) returned 1 [0029.112] GetKeyState (nVirtKey=2) returned 0 [0029.112] GetKeyState (nVirtKey=4) returned 0 [0029.112] GetKeyState (nVirtKey=5) returned 0 [0029.112] GetKeyState (nVirtKey=6) returned 0 [0029.112] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.112] IsWindowUnicode (hWnd=0x301ba) returned 1 [0029.112] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.112] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.112] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.112] BeginPaint (in: hWnd=0x301ba, lpPaint=0x1eed5c | out: lpPaint=0x1eed5c) returned 0x120107ec [0029.113] GdipCreateHalftonePalette () returned 0x25080257 [0029.113] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.113] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.113] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.113] GetSystemMetrics (nIndex=42) returned 0 [0029.113] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1eecec, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.113] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1eecec) returned 0xb [0029.114] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.114] EndPaint (hWnd=0x301ba, lpPaint=0x1eed58) returned 1 [0029.114] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.114] IsWindowUnicode (hWnd=0x40120) returned 1 [0029.114] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.114] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.114] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.114] BeginPaint (in: hWnd=0x40120, lpPaint=0x1eed7c | out: lpPaint=0x1eed7c) returned 0x160107c7 [0029.114] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.115] CreateCompatibleDC (hdc=0x160107c7) returned 0x1c010252 [0029.115] GetObjectType (h=0x160107c7) returned 0x3 [0029.115] CreateCompatibleBitmap (hdc=0x160107c7, cx=1, cy=1) returned 0x26050265 [0029.115] GetDIBits (in: hdc=0x160107c7, hbm=0x26050265, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1ee86c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee86c) returned 1 [0029.116] GetDIBits (in: hdc=0x160107c7, hbm=0x26050265, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1ee86c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee86c) returned 1 [0029.116] DeleteObject (ho=0x26050265) returned 1 [0029.116] CreateDIBSection (in: hdc=0x160107c7, lpbmi=0x1ee8bc, usage=0x0, ppvBits=0x1eedb0, hSection=0x0, offset=0x0 | out: ppvBits=0x1eedb0) returned 0x440500d1 [0029.116] SelectObject (hdc=0x1c010252, h=0x440500d1) returned 0x185000f [0029.116] GdipCreateFromHDC (hdc=0x1c010252, graphics=0x1eed94) returned 0x0 [0029.116] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.117] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=100, height=89, combineMode=0x0) returned 0x0 [0029.118] GdipCreateMatrix (matrix=0x1eeddc) returned 0x0 [0029.118] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.119] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedf4) returned 0x0 [0029.119] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.119] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.119] LocalFree (hMem=0x416cb8) returned 0x0 [0029.120] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.120] GdipCreateRegion (region=0x1eeddc) returned 0x0 [0029.120] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.120] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eede8) returned 0x0 [0029.120] GdipSaveGraphics (graphics=0x507a150, state=0x1eee14) returned 0x0 [0029.120] GetWindowTextLengthW (hWnd=0x40120) returned 0 [0029.120] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.120] GetSystemMetrics (nIndex=42) returned 0 [0029.120] GetWindowTextW (in: hWnd=0x40120, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.120] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.120] GetClientRect (in: hWnd=0x40120, lpRect=0x1eeddc | out: lpRect=0x1eeddc) returned 1 [0029.121] GdipCreateRegion (region=0x1eec30) returned 0x0 [0029.121] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.121] GdipCreateMatrix (matrix=0x1eec30) returned 0x0 [0029.121] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.121] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec48) returned 0x0 [0029.121] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.121] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.121] LocalFree (hMem=0x416cb8) returned 0x0 [0029.121] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.122] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.122] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.122] LocalFree (hMem=0x416cb8) returned 0x0 [0029.122] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.122] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec70) returned 0x0 [0029.122] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec60) returned 0x0 [0029.122] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec60) returned 0x0 [0029.122] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.122] GdipGetDC (graphics=0x507a150, hdc=0x1eec78) returned 0x0 [0029.122] GetCurrentObject (hdc=0x1c010252, type=0x1) returned 0x1b00017 [0029.122] GetCurrentObject (hdc=0x1c010252, type=0x2) returned 0x1900010 [0029.122] GetCurrentObject (hdc=0x1c010252, type=0x7) returned 0x440500d1 [0029.122] GetCurrentObject (hdc=0x1c010252, type=0x6) returned 0x18a002e [0029.123] SaveDC (hdc=0x1c010252) returned 1 [0029.123] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1904024a [0029.123] GetClipRgn (hdc=0x1c010252, hrgn=0x1904024a) returned 0 [0029.123] SelectClipRgn (hdc=0x1c010252, hrgn=0x2b040813) returned 2 [0029.123] DeleteObject (ho=0x1904024a) returned 1 [0029.123] DeleteObject (ho=0x2b040813) returned 1 [0029.123] OffsetViewportOrgEx (in: hdc=0x1c010252, x=0, y=0, lppt=0x260c394 | out: lppt=0x260c394) returned 1 [0029.123] GetNearestColor (hdc=0x1c010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.123] CreateSolidBrush (color=0xf5f5f5) returned 0x1c100244 [0029.123] FillRect (hDC=0x1c010252, lprc=0x1eec7c, hbr=0x1c100244) returned 1 [0029.124] DeleteObject (ho=0x1c100244) returned 1 [0029.124] RestoreDC (hdc=0x1c010252, nSavedDC=-1) returned 1 [0029.124] GdipReleaseDC (graphics=0x507a150, hdc=0x1c010252) returned 0x0 [0029.124] GdipRestoreGraphics (graphics=0x507a150, state=0xfdb70dbd) returned 0x0 [0029.124] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.124] GetWindowTextLengthW (hWnd=0x40120) returned 0 [0029.124] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.124] GetSystemMetrics (nIndex=42) returned 0 [0029.124] GetWindowTextW (in: hWnd=0x40120, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.124] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40120, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.126] GdipGetImageWidth (image=0x455f080, width=0x1eecb0) returned 0x0 [0029.126] GdipGetImageHeight (image=0x455f080, height=0x1eecb0) returned 0x0 [0029.126] GdipDrawImageRectI (graphics=0x507a150, image=0x455f080, x=6, y=0, width=88, height=88) returned 0x0 [0029.131] GdipGetDC (graphics=0x507a150, hdc=0x1eedd4) returned 0x0 [0029.132] BitBlt (hdc=0x160107c7, x=0, y=0, cx=100, cy=89, hdcSrc=0x1c010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.132] GdipReleaseDC (graphics=0x507a150, hdc=0x1c010252) returned 0x0 [0029.132] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.132] SelectObject (hdc=0x1c010252, h=0x185000f) returned 0x440500d1 [0029.132] DeleteDC (hdc=0x1c010252) returned 1 [0029.132] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.132] EndPaint (hWnd=0x40120, lpPaint=0x1eed78) returned 1 [0029.132] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.132] IsWindowUnicode (hWnd=0x1701b0) returned 1 [0029.132] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.132] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.132] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.133] BeginPaint (in: hWnd=0x1701b0, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x120107ec [0029.133] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.133] CreateCompatibleDC (hdc=0x120107ec) returned 0x1e010252 [0029.133] SelectObject (hdc=0x1e010252, h=0x440500d1) returned 0x185000f [0029.133] GdipCreateFromHDC (hdc=0x1e010252, graphics=0x1eed58) returned 0x0 [0029.133] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.133] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=65, height=16, combineMode=0x0) returned 0x0 [0029.133] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.133] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.133] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.133] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.133] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.133] LocalFree (hMem=0x416cb8) returned 0x0 [0029.133] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.133] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.133] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.133] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.133] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.133] GetWindowTextLengthW (hWnd=0x1701b0) returned 11 [0029.133] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.133] GetSystemMetrics (nIndex=42) returned 0 [0029.133] GetWindowTextW (in: hWnd=0x1701b0, lpString=0x1eecdc, nMaxCount=12 | out: lpString="BTC wallet:") returned 11 [0029.134] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0xd, wParam=0xc, lParam=0x1eecdc) returned 0xb [0029.134] GetClientRect (in: hWnd=0x1701b0, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.134] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.134] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.134] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.134] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.134] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec0c) returned 0x0 [0029.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.134] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.134] LocalFree (hMem=0x416cb8) returned 0x0 [0029.134] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.134] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.134] LocalFree (hMem=0x416cb8) returned 0x0 [0029.134] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.134] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.134] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.134] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.134] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.134] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.134] GetCurrentObject (hdc=0x1e010252, type=0x1) returned 0x1b00017 [0029.134] GetCurrentObject (hdc=0x1e010252, type=0x2) returned 0x1900010 [0029.134] GetCurrentObject (hdc=0x1e010252, type=0x7) returned 0x440500d1 [0029.134] GetCurrentObject (hdc=0x1e010252, type=0x6) returned 0x18a002e [0029.135] SaveDC (hdc=0x1e010252) returned 1 [0029.135] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c040813 [0029.135] GetClipRgn (hdc=0x1e010252, hrgn=0x2c040813) returned 0 [0029.135] SelectClipRgn (hdc=0x1e010252, hrgn=0x1a04024a) returned 2 [0029.135] DeleteObject (ho=0x2c040813) returned 1 [0029.135] DeleteObject (ho=0x1a04024a) returned 1 [0029.135] OffsetViewportOrgEx (in: hdc=0x1e010252, x=0, y=0, lppt=0x260c834 | out: lppt=0x260c834) returned 1 [0029.135] GetNearestColor (hdc=0x1e010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.135] CreateSolidBrush (color=0xf5f5f5) returned 0x1d100244 [0029.135] FillRect (hDC=0x1e010252, lprc=0x1eec40, hbr=0x1d100244) returned 1 [0029.135] DeleteObject (ho=0x1d100244) returned 1 [0029.135] RestoreDC (hdc=0x1e010252, nSavedDC=-1) returned 1 [0029.135] GdipReleaseDC (graphics=0x507a150, hdc=0x1e010252) returned 0x0 [0029.135] GdipRestoreGraphics (graphics=0x507a150, state=0xfdb50dbd) returned 0x0 [0029.135] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.135] GetWindowTextLengthW (hWnd=0x1701b0) returned 11 [0029.135] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.135] GetSystemMetrics (nIndex=42) returned 0 [0029.135] GetWindowTextW (in: hWnd=0x1701b0, lpString=0x1eecdc, nMaxCount=12 | out: lpString="BTC wallet:") returned 11 [0029.135] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x1701b0, Msg=0xd, wParam=0xc, lParam=0x1eecdc) returned 0xb [0029.135] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.135] GetCurrentObject (hdc=0x1e010252, type=0x1) returned 0x1b00017 [0029.136] GetCurrentObject (hdc=0x1e010252, type=0x2) returned 0x1900010 [0029.136] GetCurrentObject (hdc=0x1e010252, type=0x7) returned 0x440500d1 [0029.136] GetCurrentObject (hdc=0x1e010252, type=0x6) returned 0x18a002e [0029.136] SaveDC (hdc=0x1e010252) returned 1 [0029.136] GetNearestColor (hdc=0x1e010252, color=0x0) returned 0x0 [0029.136] RestoreDC (hdc=0x1e010252, nSavedDC=-1) returned 1 [0029.136] GdipReleaseDC (graphics=0x507a150, hdc=0x1e010252) returned 0x0 [0029.136] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.136] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.136] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.136] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.137] GetCurrentObject (hdc=0x1e010252, type=0x1) returned 0x1b00017 [0029.137] GetCurrentObject (hdc=0x1e010252, type=0x2) returned 0x1900010 [0029.137] GetCurrentObject (hdc=0x1e010252, type=0x7) returned 0x440500d1 [0029.137] GetCurrentObject (hdc=0x1e010252, type=0x6) returned 0x18a002e [0029.137] SaveDC (hdc=0x1e010252) returned 1 [0029.137] GetTextAlign (hdc=0x1e010252) returned 0x0 [0029.137] GetTextColor (hdc=0x1e010252) returned 0x0 [0029.137] GetCurrentObject (hdc=0x1e010252, type=0x6) returned 0x18a002e [0029.137] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.137] SelectObject (hdc=0x1e010252, h=0x290a01d6) returned 0x18a002e [0029.138] GetBkMode (hdc=0x1e010252) returned 2 [0029.138] SetBkMode (hdc=0x1e010252, mode=1) returned 2 [0029.138] DrawTextExW (in: hdc=0x1e010252, lpchText="BTC wallet:", cchText=11, lprc=0x1eeb7c, format=0x100000, lpdtp=0x260ccc8 | out: lpchText="BTC wallet:", lprc=0x1eeb7c) returned 16 [0029.142] RestoreDC (hdc=0x1e010252, nSavedDC=-1) returned 1 [0029.142] GdipReleaseDC (graphics=0x507a150, hdc=0x1e010252) returned 0x0 [0029.142] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.142] BitBlt (hdc=0x120107ec, x=0, y=0, cx=65, cy=16, hdcSrc=0x1e010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.142] GdipReleaseDC (graphics=0x507a150, hdc=0x1e010252) returned 0x0 [0029.142] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.142] SelectObject (hdc=0x1e010252, h=0x185000f) returned 0x440500d1 [0029.142] DeleteDC (hdc=0x1e010252) returned 1 [0029.142] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.142] EndPaint (hWnd=0x1701b0, lpPaint=0x1eed3c) returned 1 [0029.142] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.142] IsWindowUnicode (hWnd=0x6011c) returned 1 [0029.142] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.142] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.142] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.142] BeginPaint (in: hWnd=0x6011c, lpPaint=0x1eed7c | out: lpPaint=0x1eed7c) returned 0x601084f [0029.142] SelectPalette (hdc=0x601084f, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.143] CreateCompatibleDC (hdc=0x601084f) returned 0x20010252 [0029.143] DeleteObject (ho=0x440500d1) returned 1 [0029.143] GetObjectType (h=0x601084f) returned 0x3 [0029.143] CreateCompatibleBitmap (hdc=0x601084f, cx=1, cy=1) returned 0x28050265 [0029.143] GetDIBits (in: hdc=0x601084f, hbm=0x28050265, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1ee86c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee86c) returned 1 [0029.143] GetDIBits (in: hdc=0x601084f, hbm=0x28050265, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1ee86c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee86c) returned 1 [0029.143] DeleteObject (ho=0x28050265) returned 1 [0029.143] CreateDIBSection (in: hdc=0x601084f, lpbmi=0x1ee8bc, usage=0x0, ppvBits=0x1eedb0, hSection=0x0, offset=0x0 | out: ppvBits=0x1eedb0) returned 0x450500d1 [0029.143] SelectObject (hdc=0x20010252, h=0x450500d1) returned 0x185000f [0029.143] GdipCreateFromHDC (hdc=0x20010252, graphics=0x1eed94) returned 0x0 [0029.143] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.143] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=231, height=89, combineMode=0x0) returned 0x0 [0029.143] GdipCreateMatrix (matrix=0x1eeddc) returned 0x0 [0029.143] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.143] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedf4) returned 0x0 [0029.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.144] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.144] LocalFree (hMem=0x416cb8) returned 0x0 [0029.144] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.144] GdipCreateRegion (region=0x1eeddc) returned 0x0 [0029.144] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.144] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eede8) returned 0x0 [0029.144] GdipSaveGraphics (graphics=0x507a150, state=0x1eee14) returned 0x0 [0029.144] GetWindowTextLengthW (hWnd=0x6011c) returned 0 [0029.144] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.144] GetSystemMetrics (nIndex=42) returned 0 [0029.144] GetWindowTextW (in: hWnd=0x6011c, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.144] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.144] GetClientRect (in: hWnd=0x6011c, lpRect=0x1eeddc | out: lpRect=0x1eeddc) returned 1 [0029.144] GdipCreateRegion (region=0x1eec30) returned 0x0 [0029.144] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.144] GdipCreateMatrix (matrix=0x1eec30) returned 0x0 [0029.144] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.144] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec48) returned 0x0 [0029.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.144] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.144] LocalFree (hMem=0x416cb8) returned 0x0 [0029.144] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.145] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.145] LocalFree (hMem=0x416cb8) returned 0x0 [0029.145] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.145] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec70) returned 0x0 [0029.145] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec60) returned 0x0 [0029.145] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec60) returned 0x0 [0029.145] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.145] GdipGetDC (graphics=0x507a150, hdc=0x1eec78) returned 0x0 [0029.145] GetCurrentObject (hdc=0x20010252, type=0x1) returned 0x1b00017 [0029.145] GetCurrentObject (hdc=0x20010252, type=0x2) returned 0x1900010 [0029.145] GetCurrentObject (hdc=0x20010252, type=0x7) returned 0x450500d1 [0029.145] GetCurrentObject (hdc=0x20010252, type=0x6) returned 0x18a002e [0029.145] SaveDC (hdc=0x20010252) returned 1 [0029.145] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b04024a [0029.145] GetClipRgn (hdc=0x20010252, hrgn=0x1b04024a) returned 0 [0029.145] SelectClipRgn (hdc=0x20010252, hrgn=0x2e040813) returned 2 [0029.145] DeleteObject (ho=0x1b04024a) returned 1 [0029.145] DeleteObject (ho=0x2e040813) returned 1 [0029.145] OffsetViewportOrgEx (in: hdc=0x20010252, x=0, y=0, lppt=0x260e0b8 | out: lppt=0x260e0b8) returned 1 [0029.145] GetNearestColor (hdc=0x20010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.145] CreateSolidBrush (color=0xf5f5f5) returned 0x1e100244 [0029.145] FillRect (hDC=0x20010252, lprc=0x1eec7c, hbr=0x1e100244) returned 1 [0029.146] DeleteObject (ho=0x1e100244) returned 1 [0029.146] RestoreDC (hdc=0x20010252, nSavedDC=-1) returned 1 [0029.146] GdipReleaseDC (graphics=0x507a150, hdc=0x20010252) returned 0x0 [0029.146] GdipRestoreGraphics (graphics=0x507a150, state=0xfdb30dbd) returned 0x0 [0029.146] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.146] GetWindowTextLengthW (hWnd=0x6011c) returned 0 [0029.146] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.146] GetSystemMetrics (nIndex=42) returned 0 [0029.146] GetWindowTextW (in: hWnd=0x6011c, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.146] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x6011c, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.146] GdipGetImageWidth (image=0x455fc90, width=0x1eecb0) returned 0x0 [0029.146] GdipGetImageHeight (image=0x455fc90, height=0x1eecb0) returned 0x0 [0029.146] GdipDrawImageRectI (graphics=0x507a150, image=0x455fc90, x=71, y=0, width=88, height=88) returned 0x0 [0029.148] GdipGetDC (graphics=0x507a150, hdc=0x1eedd4) returned 0x0 [0029.148] BitBlt (hdc=0x601084f, x=0, y=0, cx=231, cy=89, hdcSrc=0x20010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.148] GdipReleaseDC (graphics=0x507a150, hdc=0x20010252) returned 0x0 [0029.148] SelectPalette (hdc=0x601084f, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.148] SelectObject (hdc=0x20010252, h=0x185000f) returned 0x450500d1 [0029.148] DeleteDC (hdc=0x20010252) returned 1 [0029.148] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.148] EndPaint (hWnd=0x6011c, lpPaint=0x1eed78) returned 1 [0029.148] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.148] IsWindowUnicode (hWnd=0x201ee) returned 1 [0029.148] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.148] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.148] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.148] BeginPaint (in: hWnd=0x201ee, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x160107c7 [0029.148] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.148] CreateCompatibleDC (hdc=0x160107c7) returned 0x22010252 [0029.149] SelectObject (hdc=0x22010252, h=0x450500d1) returned 0x185000f [0029.149] GdipCreateFromHDC (hdc=0x22010252, graphics=0x1eed58) returned 0x0 [0029.149] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.149] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=24, height=16, combineMode=0x0) returned 0x0 [0029.149] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.149] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.149] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.149] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.149] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.149] LocalFree (hMem=0x416cb8) returned 0x0 [0029.149] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.149] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.149] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.149] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.149] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.149] GetWindowTextLengthW (hWnd=0x201ee) returned 3 [0029.149] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0029.149] GetSystemMetrics (nIndex=42) returned 0 [0029.149] GetWindowTextW (in: hWnd=0x201ee, lpString=0x1eecec, nMaxCount=4 | out: lpString="Or:") returned 3 [0029.149] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0xd, wParam=0x4, lParam=0x1eecec) returned 0x3 [0029.149] GetClientRect (in: hWnd=0x201ee, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.149] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.149] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.149] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.150] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.150] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec0c) returned 0x0 [0029.150] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.150] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.150] LocalFree (hMem=0x416cb8) returned 0x0 [0029.150] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.150] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.150] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.150] LocalFree (hMem=0x416cb8) returned 0x0 [0029.150] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.150] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.150] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.150] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.150] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.150] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.150] GetCurrentObject (hdc=0x22010252, type=0x1) returned 0x1b00017 [0029.150] GetCurrentObject (hdc=0x22010252, type=0x2) returned 0x1900010 [0029.150] GetCurrentObject (hdc=0x22010252, type=0x7) returned 0x450500d1 [0029.150] GetCurrentObject (hdc=0x22010252, type=0x6) returned 0x18a002e [0029.150] SaveDC (hdc=0x22010252) returned 1 [0029.150] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f040813 [0029.150] GetClipRgn (hdc=0x22010252, hrgn=0x2f040813) returned 0 [0029.150] SelectClipRgn (hdc=0x22010252, hrgn=0x1c04024a) returned 2 [0029.150] DeleteObject (ho=0x2f040813) returned 1 [0029.150] DeleteObject (ho=0x1c04024a) returned 1 [0029.151] OffsetViewportOrgEx (in: hdc=0x22010252, x=0, y=0, lppt=0x260e528 | out: lppt=0x260e528) returned 1 [0029.151] GetNearestColor (hdc=0x22010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.151] CreateSolidBrush (color=0xf5f5f5) returned 0x1f100244 [0029.151] FillRect (hDC=0x22010252, lprc=0x1eec40, hbr=0x1f100244) returned 1 [0029.151] DeleteObject (ho=0x1f100244) returned 1 [0029.151] RestoreDC (hdc=0x22010252, nSavedDC=-1) returned 1 [0029.151] GdipReleaseDC (graphics=0x507a150, hdc=0x22010252) returned 0x0 [0029.151] GdipRestoreGraphics (graphics=0x507a150, state=0xfdb10dbd) returned 0x0 [0029.151] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.151] GetWindowTextLengthW (hWnd=0x201ee) returned 3 [0029.151] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0029.151] GetSystemMetrics (nIndex=42) returned 0 [0029.151] GetWindowTextW (in: hWnd=0x201ee, lpString=0x1eecec, nMaxCount=4 | out: lpString="Or:") returned 3 [0029.151] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ee, Msg=0xd, wParam=0x4, lParam=0x1eecec) returned 0x3 [0029.151] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.151] GetCurrentObject (hdc=0x22010252, type=0x1) returned 0x1b00017 [0029.151] GetCurrentObject (hdc=0x22010252, type=0x2) returned 0x1900010 [0029.151] GetCurrentObject (hdc=0x22010252, type=0x7) returned 0x450500d1 [0029.151] GetCurrentObject (hdc=0x22010252, type=0x6) returned 0x18a002e [0029.151] SaveDC (hdc=0x22010252) returned 1 [0029.151] GetNearestColor (hdc=0x22010252, color=0x0) returned 0x0 [0029.151] RestoreDC (hdc=0x22010252, nSavedDC=-1) returned 1 [0029.151] GdipReleaseDC (graphics=0x507a150, hdc=0x22010252) returned 0x0 [0029.152] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.152] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.152] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.152] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.152] GetCurrentObject (hdc=0x22010252, type=0x1) returned 0x1b00017 [0029.152] GetCurrentObject (hdc=0x22010252, type=0x2) returned 0x1900010 [0029.152] GetCurrentObject (hdc=0x22010252, type=0x7) returned 0x450500d1 [0029.152] GetCurrentObject (hdc=0x22010252, type=0x6) returned 0x18a002e [0029.152] SaveDC (hdc=0x22010252) returned 1 [0029.152] GetTextAlign (hdc=0x22010252) returned 0x0 [0029.152] GetTextColor (hdc=0x22010252) returned 0x0 [0029.152] GetCurrentObject (hdc=0x22010252, type=0x6) returned 0x18a002e [0029.152] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.152] SelectObject (hdc=0x22010252, h=0x290a01d6) returned 0x18a002e [0029.152] GetBkMode (hdc=0x22010252) returned 2 [0029.152] SetBkMode (hdc=0x22010252, mode=1) returned 2 [0029.152] DrawTextExW (in: hdc=0x22010252, lpchText="Or:", cchText=3, lprc=0x1eeb7c, format=0x100000, lpdtp=0x260e98c | out: lpchText="Or:", lprc=0x1eeb7c) returned 16 [0029.152] RestoreDC (hdc=0x22010252, nSavedDC=-1) returned 1 [0029.153] GdipReleaseDC (graphics=0x507a150, hdc=0x22010252) returned 0x0 [0029.153] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.153] BitBlt (hdc=0x160107c7, x=0, y=0, cx=24, cy=16, hdcSrc=0x22010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.153] GdipReleaseDC (graphics=0x507a150, hdc=0x22010252) returned 0x0 [0029.153] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.153] SelectObject (hdc=0x22010252, h=0x185000f) returned 0x450500d1 [0029.153] DeleteDC (hdc=0x22010252) returned 1 [0029.153] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.153] EndPaint (hWnd=0x201ee, lpPaint=0x1eed3c) returned 1 [0029.153] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.153] IsWindowUnicode (hWnd=0x201ec) returned 1 [0029.153] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.153] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.153] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.153] BeginPaint (in: hWnd=0x201ec, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x120107ec [0029.153] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.153] CreateCompatibleDC (hdc=0x120107ec) returned 0x24010252 [0029.153] DeleteObject (ho=0x450500d1) returned 1 [0029.153] GetObjectType (h=0x120107ec) returned 0x3 [0029.153] CreateCompatibleBitmap (hdc=0x120107ec, cx=1, cy=1) returned 0x2a050265 [0029.154] GetDIBits (in: hdc=0x120107ec, hbm=0x2a050265, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1ee830, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee830) returned 1 [0029.154] GetDIBits (in: hdc=0x120107ec, hbm=0x2a050265, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1ee830, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee830) returned 1 [0029.154] DeleteObject (ho=0x2a050265) returned 1 [0029.154] CreateDIBSection (in: hdc=0x120107ec, lpbmi=0x1ee880, usage=0x0, ppvBits=0x1eed74, hSection=0x0, offset=0x0 | out: ppvBits=0x1eed74) returned 0x460500d1 [0029.154] SelectObject (hdc=0x24010252, h=0x460500d1) returned 0x185000f [0029.154] GdipCreateFromHDC (hdc=0x24010252, graphics=0x1eed58) returned 0x0 [0029.154] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.154] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=234, height=16, combineMode=0x0) returned 0x0 [0029.154] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.154] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.154] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.154] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.154] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.154] LocalFree (hMem=0x416cb8) returned 0x0 [0029.154] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.154] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.154] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.154] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.154] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.155] GetWindowTextLengthW (hWnd=0x201ec) returned 34 [0029.155] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0029.155] GetSystemMetrics (nIndex=42) returned 0 [0029.155] GetWindowTextW (in: hWnd=0x201ec, lpString=0x1eecac, nMaxCount=35 | out: lpString="18Fh68NJrMZCiTqq1VoWaQsSb8pxDjEw6N") returned 34 [0029.155] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0xd, wParam=0x23, lParam=0x1eecac) returned 0x22 [0029.155] GetClientRect (in: hWnd=0x201ec, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.155] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.155] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.155] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.155] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.155] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec0c) returned 0x0 [0029.155] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.155] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.155] LocalFree (hMem=0x416cb8) returned 0x0 [0029.155] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.155] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.155] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.155] LocalFree (hMem=0x416cb8) returned 0x0 [0029.155] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.155] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.155] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.155] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.155] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.155] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.156] GetCurrentObject (hdc=0x24010252, type=0x1) returned 0x1b00017 [0029.156] GetCurrentObject (hdc=0x24010252, type=0x2) returned 0x1900010 [0029.156] GetCurrentObject (hdc=0x24010252, type=0x7) returned 0x460500d1 [0029.156] GetCurrentObject (hdc=0x24010252, type=0x6) returned 0x18a002e [0029.156] SaveDC (hdc=0x24010252) returned 1 [0029.156] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1d04024a [0029.156] GetClipRgn (hdc=0x24010252, hrgn=0x1d04024a) returned 0 [0029.156] SelectClipRgn (hdc=0x24010252, hrgn=0x31040813) returned 2 [0029.156] DeleteObject (ho=0x1d04024a) returned 1 [0029.156] DeleteObject (ho=0x31040813) returned 1 [0029.156] OffsetViewportOrgEx (in: hdc=0x24010252, x=0, y=0, lppt=0x260fe80 | out: lppt=0x260fe80) returned 1 [0029.156] GetNearestColor (hdc=0x24010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.156] CreateSolidBrush (color=0xf5f5f5) returned 0x20100244 [0029.156] FillRect (hDC=0x24010252, lprc=0x1eec40, hbr=0x20100244) returned 1 [0029.156] DeleteObject (ho=0x20100244) returned 1 [0029.156] RestoreDC (hdc=0x24010252, nSavedDC=-1) returned 1 [0029.156] GdipReleaseDC (graphics=0x507a150, hdc=0x24010252) returned 0x0 [0029.156] GdipRestoreGraphics (graphics=0x507a150, state=0xfdaf0dbd) returned 0x0 [0029.156] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.156] GetWindowTextLengthW (hWnd=0x201ec) returned 34 [0029.156] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0029.157] GetSystemMetrics (nIndex=42) returned 0 [0029.157] GetWindowTextW (in: hWnd=0x201ec, lpString=0x1eecac, nMaxCount=35 | out: lpString="18Fh68NJrMZCiTqq1VoWaQsSb8pxDjEw6N") returned 34 [0029.157] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ec, Msg=0xd, wParam=0x23, lParam=0x1eecac) returned 0x22 [0029.157] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.157] GetCurrentObject (hdc=0x24010252, type=0x1) returned 0x1b00017 [0029.157] GetCurrentObject (hdc=0x24010252, type=0x2) returned 0x1900010 [0029.157] GetCurrentObject (hdc=0x24010252, type=0x7) returned 0x460500d1 [0029.157] GetCurrentObject (hdc=0x24010252, type=0x6) returned 0x18a002e [0029.157] SaveDC (hdc=0x24010252) returned 1 [0029.157] GetNearestColor (hdc=0x24010252, color=0x0) returned 0x0 [0029.157] RestoreDC (hdc=0x24010252, nSavedDC=-1) returned 1 [0029.157] GdipReleaseDC (graphics=0x507a150, hdc=0x24010252) returned 0x0 [0029.157] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.157] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.157] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.157] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.157] GetCurrentObject (hdc=0x24010252, type=0x1) returned 0x1b00017 [0029.157] GetCurrentObject (hdc=0x24010252, type=0x2) returned 0x1900010 [0029.157] GetCurrentObject (hdc=0x24010252, type=0x7) returned 0x460500d1 [0029.157] GetCurrentObject (hdc=0x24010252, type=0x6) returned 0x18a002e [0029.157] SaveDC (hdc=0x24010252) returned 1 [0029.158] GetTextAlign (hdc=0x24010252) returned 0x0 [0029.158] GetTextColor (hdc=0x24010252) returned 0x0 [0029.158] GetCurrentObject (hdc=0x24010252, type=0x6) returned 0x18a002e [0029.158] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.158] SelectObject (hdc=0x24010252, h=0x290a01d6) returned 0x18a002e [0029.158] GetBkMode (hdc=0x24010252) returned 2 [0029.158] SetBkMode (hdc=0x24010252, mode=1) returned 2 [0029.158] DrawTextExW (in: hdc=0x24010252, lpchText="18Fh68NJrMZCiTqq1VoWaQsSb8pxDjEw6N", cchText=34, lprc=0x1eeb7c, format=0x100000, lpdtp=0x26103a4 | out: lpchText="18Fh68NJrMZCiTqq1VoWaQsSb8pxDjEw6N", lprc=0x1eeb7c) returned 16 [0029.159] RestoreDC (hdc=0x24010252, nSavedDC=-1) returned 1 [0029.159] GdipReleaseDC (graphics=0x507a150, hdc=0x24010252) returned 0x0 [0029.159] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.159] BitBlt (hdc=0x120107ec, x=0, y=0, cx=234, cy=16, hdcSrc=0x24010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.159] GdipReleaseDC (graphics=0x507a150, hdc=0x24010252) returned 0x0 [0029.159] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.159] SelectObject (hdc=0x24010252, h=0x185000f) returned 0x460500d1 [0029.159] DeleteDC (hdc=0x24010252) returned 1 [0029.159] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.159] EndPaint (hWnd=0x201ec, lpPaint=0x1eed3c) returned 1 [0029.160] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.160] IsWindowUnicode (hWnd=0x401be) returned 1 [0029.160] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.160] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.160] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.160] BeginPaint (in: hWnd=0x401be, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x601084f [0029.160] SelectPalette (hdc=0x601084f, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.160] CreateCompatibleDC (hdc=0x601084f) returned 0x26010252 [0029.160] SelectObject (hdc=0x26010252, h=0x460500d1) returned 0x185000f [0029.160] GdipCreateFromHDC (hdc=0x26010252, graphics=0x1eed58) returned 0x0 [0029.160] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.160] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=163, height=16, combineMode=0x0) returned 0x0 [0029.160] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.161] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.161] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.161] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.161] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.161] LocalFree (hMem=0x416cb8) returned 0x0 [0029.161] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.161] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.161] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.161] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.161] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.161] GetWindowTextLengthW (hWnd=0x401be) returned 30 [0029.161] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0029.161] GetSystemMetrics (nIndex=42) returned 0 [0029.161] GetWindowTextW (in: hWnd=0x401be, lpString=0x1eecb4, nMaxCount=31 | out: lpString="Donate 0.15 BTC to this wallet") returned 30 [0029.161] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0xd, wParam=0x1f, lParam=0x1eecb4) returned 0x1e [0029.161] GetClientRect (in: hWnd=0x401be, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.161] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.161] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.161] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.161] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.161] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec0c) returned 0x0 [0029.161] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.161] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.161] LocalFree (hMem=0x416cb8) returned 0x0 [0029.161] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.162] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.162] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.162] LocalFree (hMem=0x416cb8) returned 0x0 [0029.162] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.162] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.162] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.162] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.162] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.162] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.162] GetCurrentObject (hdc=0x26010252, type=0x1) returned 0x1b00017 [0029.162] GetCurrentObject (hdc=0x26010252, type=0x2) returned 0x1900010 [0029.162] GetCurrentObject (hdc=0x26010252, type=0x7) returned 0x460500d1 [0029.162] GetCurrentObject (hdc=0x26010252, type=0x6) returned 0x18a002e [0029.162] SaveDC (hdc=0x26010252) returned 1 [0029.162] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x32040813 [0029.162] GetClipRgn (hdc=0x26010252, hrgn=0x32040813) returned 0 [0029.162] SelectClipRgn (hdc=0x26010252, hrgn=0x1f04024a) returned 2 [0029.162] DeleteObject (ho=0x32040813) returned 1 [0029.162] DeleteObject (ho=0x1f04024a) returned 1 [0029.162] OffsetViewportOrgEx (in: hdc=0x26010252, x=0, y=0, lppt=0x2610850 | out: lppt=0x2610850) returned 1 [0029.162] GetNearestColor (hdc=0x26010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.162] CreateSolidBrush (color=0xf5f5f5) returned 0x21100244 [0029.162] FillRect (hDC=0x26010252, lprc=0x1eec40, hbr=0x21100244) returned 1 [0029.163] DeleteObject (ho=0x21100244) returned 1 [0029.163] RestoreDC (hdc=0x26010252, nSavedDC=-1) returned 1 [0029.163] GdipReleaseDC (graphics=0x507a150, hdc=0x26010252) returned 0x0 [0029.163] GdipRestoreGraphics (graphics=0x507a150, state=0xfdad0dbd) returned 0x0 [0029.163] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.163] GetWindowTextLengthW (hWnd=0x401be) returned 30 [0029.163] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1e [0029.163] GetSystemMetrics (nIndex=42) returned 0 [0029.163] GetWindowTextW (in: hWnd=0x401be, lpString=0x1eecb4, nMaxCount=31 | out: lpString="Donate 0.15 BTC to this wallet") returned 30 [0029.163] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x401be, Msg=0xd, wParam=0x1f, lParam=0x1eecb4) returned 0x1e [0029.163] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.163] GetCurrentObject (hdc=0x26010252, type=0x1) returned 0x1b00017 [0029.163] GetCurrentObject (hdc=0x26010252, type=0x2) returned 0x1900010 [0029.163] GetCurrentObject (hdc=0x26010252, type=0x7) returned 0x460500d1 [0029.163] GetCurrentObject (hdc=0x26010252, type=0x6) returned 0x18a002e [0029.163] SaveDC (hdc=0x26010252) returned 1 [0029.163] GetNearestColor (hdc=0x26010252, color=0x0) returned 0x0 [0029.163] RestoreDC (hdc=0x26010252, nSavedDC=-1) returned 1 [0029.163] GdipReleaseDC (graphics=0x507a150, hdc=0x26010252) returned 0x0 [0029.163] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.163] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.164] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.164] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.164] GetCurrentObject (hdc=0x26010252, type=0x1) returned 0x1b00017 [0029.164] GetCurrentObject (hdc=0x26010252, type=0x2) returned 0x1900010 [0029.164] GetCurrentObject (hdc=0x26010252, type=0x7) returned 0x460500d1 [0029.164] GetCurrentObject (hdc=0x26010252, type=0x6) returned 0x18a002e [0029.164] SaveDC (hdc=0x26010252) returned 1 [0029.164] GetTextAlign (hdc=0x26010252) returned 0x0 [0029.164] GetTextColor (hdc=0x26010252) returned 0x0 [0029.164] GetCurrentObject (hdc=0x26010252, type=0x6) returned 0x18a002e [0029.164] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.164] SelectObject (hdc=0x26010252, h=0x290a01d6) returned 0x18a002e [0029.164] GetBkMode (hdc=0x26010252) returned 2 [0029.164] SetBkMode (hdc=0x26010252, mode=1) returned 2 [0029.164] DrawTextExW (in: hdc=0x26010252, lpchText="Donate 0.15 BTC to this wallet", cchText=30, lprc=0x1eeb7c, format=0x100000, lpdtp=0x2610d5c | out: lpchText="Donate 0.15 BTC to this wallet", lprc=0x1eeb7c) returned 16 [0029.164] RestoreDC (hdc=0x26010252, nSavedDC=-1) returned 1 [0029.165] GdipReleaseDC (graphics=0x507a150, hdc=0x26010252) returned 0x0 [0029.165] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.165] BitBlt (hdc=0x601084f, x=0, y=0, cx=163, cy=16, hdcSrc=0x26010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.165] GdipReleaseDC (graphics=0x507a150, hdc=0x26010252) returned 0x0 [0029.165] SelectPalette (hdc=0x601084f, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.165] SelectObject (hdc=0x26010252, h=0x185000f) returned 0x460500d1 [0029.165] DeleteDC (hdc=0x26010252) returned 1 [0029.165] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.165] EndPaint (hWnd=0x401be, lpPaint=0x1eed3c) returned 1 [0029.165] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.165] IsWindowUnicode (hWnd=0x301c2) returned 1 [0029.165] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.165] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.165] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.165] BeginPaint (in: hWnd=0x301c2, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x160107c7 [0029.165] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.165] CreateCompatibleDC (hdc=0x160107c7) returned 0x28010252 [0029.165] DeleteObject (ho=0x460500d1) returned 1 [0029.165] GetObjectType (h=0x160107c7) returned 0x3 [0029.165] CreateCompatibleBitmap (hdc=0x160107c7, cx=1, cy=1) returned 0x2c050265 [0029.166] GetDIBits (in: hdc=0x160107c7, hbm=0x2c050265, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1ee830, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee830) returned 1 [0029.166] GetDIBits (in: hdc=0x160107c7, hbm=0x2c050265, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1ee830, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee830) returned 1 [0029.166] DeleteObject (ho=0x2c050265) returned 1 [0029.166] CreateDIBSection (in: hdc=0x160107c7, lpbmi=0x1ee880, usage=0x0, ppvBits=0x1eed74, hSection=0x0, offset=0x0 | out: ppvBits=0x1eed74) returned 0x470500d1 [0029.166] SelectObject (hdc=0x28010252, h=0x470500d1) returned 0x185000f [0029.166] GdipCreateFromHDC (hdc=0x28010252, graphics=0x1eed58) returned 0x0 [0029.166] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.166] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=359, height=16, combineMode=0x0) returned 0x0 [0029.166] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.166] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.166] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.166] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.166] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.166] LocalFree (hMem=0x416cb8) returned 0x0 [0029.166] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.166] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.166] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.167] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.167] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.167] GetWindowTextLengthW (hWnd=0x301c2) returned 68 [0029.167] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x44 [0029.167] GetSystemMetrics (nIndex=42) returned 0 [0029.167] GetWindowTextW (in: hWnd=0x301c2, lpString=0x1eec68, nMaxCount=69 | out: lpString="WARNING: If you turn your PC off you will not get your files back!!!") returned 68 [0029.167] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0xd, wParam=0x45, lParam=0x1eec68) returned 0x44 [0029.167] GetClientRect (in: hWnd=0x301c2, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.167] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.167] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.167] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.167] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.167] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec0c) returned 0x0 [0029.167] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.167] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.167] LocalFree (hMem=0x416cb8) returned 0x0 [0029.167] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.167] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.167] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.167] LocalFree (hMem=0x416cb8) returned 0x0 [0029.167] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.167] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.167] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.168] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.168] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.168] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.168] GetCurrentObject (hdc=0x28010252, type=0x1) returned 0x1b00017 [0029.168] GetCurrentObject (hdc=0x28010252, type=0x2) returned 0x1900010 [0029.168] GetCurrentObject (hdc=0x28010252, type=0x7) returned 0x470500d1 [0029.168] GetCurrentObject (hdc=0x28010252, type=0x6) returned 0x18a002e [0029.168] SaveDC (hdc=0x28010252) returned 1 [0029.168] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2004024a [0029.168] GetClipRgn (hdc=0x28010252, hrgn=0x2004024a) returned 0 [0029.168] SelectClipRgn (hdc=0x28010252, hrgn=0x34040813) returned 2 [0029.168] DeleteObject (ho=0x2004024a) returned 1 [0029.168] DeleteObject (ho=0x34040813) returned 1 [0029.168] OffsetViewportOrgEx (in: hdc=0x28010252, x=0, y=0, lppt=0x261231c | out: lppt=0x261231c) returned 1 [0029.168] GetNearestColor (hdc=0x28010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.168] CreateSolidBrush (color=0xf5f5f5) returned 0x22100244 [0029.168] FillRect (hDC=0x28010252, lprc=0x1eec40, hbr=0x22100244) returned 1 [0029.168] DeleteObject (ho=0x22100244) returned 1 [0029.168] RestoreDC (hdc=0x28010252, nSavedDC=-1) returned 1 [0029.169] GdipReleaseDC (graphics=0x507a150, hdc=0x28010252) returned 0x0 [0029.169] GdipRestoreGraphics (graphics=0x507a150, state=0xfdab0dbd) returned 0x0 [0029.169] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.169] GetWindowTextLengthW (hWnd=0x301c2) returned 68 [0029.169] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x44 [0029.169] GetSystemMetrics (nIndex=42) returned 0 [0029.169] GetWindowTextW (in: hWnd=0x301c2, lpString=0x1eec68, nMaxCount=69 | out: lpString="WARNING: If you turn your PC off you will not get your files back!!!") returned 68 [0029.169] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301c2, Msg=0xd, wParam=0x45, lParam=0x1eec68) returned 0x44 [0029.169] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.169] GetCurrentObject (hdc=0x28010252, type=0x1) returned 0x1b00017 [0029.169] GetCurrentObject (hdc=0x28010252, type=0x2) returned 0x1900010 [0029.169] GetCurrentObject (hdc=0x28010252, type=0x7) returned 0x470500d1 [0029.169] GetCurrentObject (hdc=0x28010252, type=0x6) returned 0x18a002e [0029.169] SaveDC (hdc=0x28010252) returned 1 [0029.169] GetNearestColor (hdc=0x28010252, color=0x0) returned 0x0 [0029.169] RestoreDC (hdc=0x28010252, nSavedDC=-1) returned 1 [0029.169] GdipReleaseDC (graphics=0x507a150, hdc=0x28010252) returned 0x0 [0029.169] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.169] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.169] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.169] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.170] GetCurrentObject (hdc=0x28010252, type=0x1) returned 0x1b00017 [0029.170] GetCurrentObject (hdc=0x28010252, type=0x2) returned 0x1900010 [0029.170] GetCurrentObject (hdc=0x28010252, type=0x7) returned 0x470500d1 [0029.170] GetCurrentObject (hdc=0x28010252, type=0x6) returned 0x18a002e [0029.170] SaveDC (hdc=0x28010252) returned 1 [0029.170] GetTextAlign (hdc=0x28010252) returned 0x0 [0029.170] GetTextColor (hdc=0x28010252) returned 0x0 [0029.170] GetCurrentObject (hdc=0x28010252, type=0x6) returned 0x18a002e [0029.170] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.170] SelectObject (hdc=0x28010252, h=0x290a01d6) returned 0x18a002e [0029.170] GetBkMode (hdc=0x28010252) returned 2 [0029.170] SetBkMode (hdc=0x28010252, mode=1) returned 2 [0029.170] DrawTextExW (in: hdc=0x28010252, lpchText="WARNING: If you turn your PC off you will not get your files back!!!", cchText=68, lprc=0x1eeb7c, format=0x100000, lpdtp=0x261290c | out: lpchText="WARNING: If you turn your PC off you will not get your files back!!!", lprc=0x1eeb7c) returned 16 [0029.171] RestoreDC (hdc=0x28010252, nSavedDC=-1) returned 1 [0029.171] GdipReleaseDC (graphics=0x507a150, hdc=0x28010252) returned 0x0 [0029.171] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.171] BitBlt (hdc=0x160107c7, x=0, y=0, cx=359, cy=16, hdcSrc=0x28010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.171] GdipReleaseDC (graphics=0x507a150, hdc=0x28010252) returned 0x0 [0029.171] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.171] SelectObject (hdc=0x28010252, h=0x185000f) returned 0x470500d1 [0029.171] DeleteDC (hdc=0x28010252) returned 1 [0029.171] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.171] EndPaint (hWnd=0x301c2, lpPaint=0x1eed3c) returned 1 [0029.171] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.171] IsWindowUnicode (hWnd=0x301e0) returned 1 [0029.171] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.171] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.171] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.171] BeginPaint (in: hWnd=0x301e0, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x120107ec [0029.171] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.171] CreateCompatibleDC (hdc=0x120107ec) returned 0x2a010252 [0029.171] SelectObject (hdc=0x2a010252, h=0x470500d1) returned 0x185000f [0029.172] GdipCreateFromHDC (hdc=0x2a010252, graphics=0x1eed58) returned 0x0 [0029.172] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.172] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=108, height=16, combineMode=0x0) returned 0x0 [0029.172] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.172] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.172] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.172] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.172] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.172] LocalFree (hMem=0x416cb8) returned 0x0 [0029.172] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.172] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.172] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.172] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.172] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.172] GetWindowTextLengthW (hWnd=0x301e0) returned 18 [0029.172] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12 [0029.172] GetSystemMetrics (nIndex=42) returned 0 [0029.172] GetWindowTextW (in: hWnd=0x301e0, lpString=0x1eeccc, nMaxCount=19 | out: lpString="have been infected") returned 18 [0029.172] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0xd, wParam=0x13, lParam=0x1eeccc) returned 0x12 [0029.172] GetClientRect (in: hWnd=0x301e0, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.172] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.172] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.172] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.172] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.173] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec0c) returned 0x0 [0029.173] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.173] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.173] LocalFree (hMem=0x416cb8) returned 0x0 [0029.173] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.173] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.173] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.173] LocalFree (hMem=0x416cb8) returned 0x0 [0029.173] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.173] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.173] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.173] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.173] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.173] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.173] GetCurrentObject (hdc=0x2a010252, type=0x1) returned 0x1b00017 [0029.173] GetCurrentObject (hdc=0x2a010252, type=0x2) returned 0x1900010 [0029.173] GetCurrentObject (hdc=0x2a010252, type=0x7) returned 0x470500d1 [0029.173] GetCurrentObject (hdc=0x2a010252, type=0x6) returned 0x18a002e [0029.173] SaveDC (hdc=0x2a010252) returned 1 [0029.173] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x35040813 [0029.173] GetClipRgn (hdc=0x2a010252, hrgn=0x35040813) returned 0 [0029.173] SelectClipRgn (hdc=0x2a010252, hrgn=0x2204024a) returned 2 [0029.173] DeleteObject (ho=0x35040813) returned 1 [0029.173] DeleteObject (ho=0x2204024a) returned 1 [0029.174] OffsetViewportOrgEx (in: hdc=0x2a010252, x=0, y=0, lppt=0x2612d70 | out: lppt=0x2612d70) returned 1 [0029.174] GetNearestColor (hdc=0x2a010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.174] CreateSolidBrush (color=0xf5f5f5) returned 0x23100244 [0029.174] FillRect (hDC=0x2a010252, lprc=0x1eec40, hbr=0x23100244) returned 1 [0029.174] DeleteObject (ho=0x23100244) returned 1 [0029.174] RestoreDC (hdc=0x2a010252, nSavedDC=-1) returned 1 [0029.174] GdipReleaseDC (graphics=0x507a150, hdc=0x2a010252) returned 0x0 [0029.174] GdipRestoreGraphics (graphics=0x507a150, state=0xfda90dbd) returned 0x0 [0029.174] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.174] GetWindowTextLengthW (hWnd=0x301e0) returned 18 [0029.174] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x12 [0029.174] GetSystemMetrics (nIndex=42) returned 0 [0029.174] GetWindowTextW (in: hWnd=0x301e0, lpString=0x1eeccc, nMaxCount=19 | out: lpString="have been infected") returned 18 [0029.174] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x301e0, Msg=0xd, wParam=0x13, lParam=0x1eeccc) returned 0x12 [0029.174] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.174] GetCurrentObject (hdc=0x2a010252, type=0x1) returned 0x1b00017 [0029.174] GetCurrentObject (hdc=0x2a010252, type=0x2) returned 0x1900010 [0029.174] GetCurrentObject (hdc=0x2a010252, type=0x7) returned 0x470500d1 [0029.174] GetCurrentObject (hdc=0x2a010252, type=0x6) returned 0x18a002e [0029.174] SaveDC (hdc=0x2a010252) returned 1 [0029.174] GetNearestColor (hdc=0x2a010252, color=0x0) returned 0x0 [0029.174] RestoreDC (hdc=0x2a010252, nSavedDC=-1) returned 1 [0029.174] GdipReleaseDC (graphics=0x507a150, hdc=0x2a010252) returned 0x0 [0029.175] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.175] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.175] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.175] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.175] GetCurrentObject (hdc=0x2a010252, type=0x1) returned 0x1b00017 [0029.175] GetCurrentObject (hdc=0x2a010252, type=0x2) returned 0x1900010 [0029.175] GetCurrentObject (hdc=0x2a010252, type=0x7) returned 0x470500d1 [0029.175] GetCurrentObject (hdc=0x2a010252, type=0x6) returned 0x18a002e [0029.175] SaveDC (hdc=0x2a010252) returned 1 [0029.175] GetTextAlign (hdc=0x2a010252) returned 0x0 [0029.175] GetTextColor (hdc=0x2a010252) returned 0x0 [0029.175] GetCurrentObject (hdc=0x2a010252, type=0x6) returned 0x18a002e [0029.175] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.175] SelectObject (hdc=0x2a010252, h=0x290a01d6) returned 0x18a002e [0029.175] GetBkMode (hdc=0x2a010252) returned 2 [0029.175] SetBkMode (hdc=0x2a010252, mode=1) returned 2 [0029.175] DrawTextExW (in: hdc=0x2a010252, lpchText="have been infected", cchText=18, lprc=0x1eeb7c, format=0x100000, lpdtp=0x2613234 | out: lpchText="have been infected", lprc=0x1eeb7c) returned 16 [0029.176] RestoreDC (hdc=0x2a010252, nSavedDC=-1) returned 1 [0029.176] GdipReleaseDC (graphics=0x507a150, hdc=0x2a010252) returned 0x0 [0029.176] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.176] BitBlt (hdc=0x120107ec, x=0, y=0, cx=108, cy=16, hdcSrc=0x2a010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.176] GdipReleaseDC (graphics=0x507a150, hdc=0x2a010252) returned 0x0 [0029.176] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.176] SelectObject (hdc=0x2a010252, h=0x185000f) returned 0x470500d1 [0029.176] DeleteDC (hdc=0x2a010252) returned 1 [0029.176] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.176] EndPaint (hWnd=0x301e0, lpPaint=0x1eed3c) returned 1 [0029.176] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.176] IsWindowUnicode (hWnd=0x201e8) returned 1 [0029.176] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.176] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.176] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.176] BeginPaint (in: hWnd=0x201e8, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x601084f [0029.176] SelectPalette (hdc=0x601084f, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.176] CreateCompatibleDC (hdc=0x601084f) returned 0x2c010252 [0029.176] SelectObject (hdc=0x2c010252, h=0x470500d1) returned 0x185000f [0029.177] GdipCreateFromHDC (hdc=0x2c010252, graphics=0x1eed58) returned 0x0 [0029.177] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.177] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=117, height=20, combineMode=0x0) returned 0x0 [0029.177] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.177] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.177] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.177] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.177] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.177] LocalFree (hMem=0x416cb8) returned 0x0 [0029.177] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.177] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.177] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.177] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.177] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.177] GetWindowTextLengthW (hWnd=0x201e8) returned 16 [0029.177] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0029.177] GetSystemMetrics (nIndex=42) returned 0 [0029.177] GetWindowTextW (in: hWnd=0x201e8, lpString=0x1eecd0, nMaxCount=17 | out: lpString="infected your PC") returned 16 [0029.177] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0xd, wParam=0x11, lParam=0x1eecd0) returned 0x10 [0029.177] GetClientRect (in: hWnd=0x201e8, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.177] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.177] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.177] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.177] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.178] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec0c) returned 0x0 [0029.178] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.178] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.178] LocalFree (hMem=0x416cb8) returned 0x0 [0029.178] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.178] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.178] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.178] LocalFree (hMem=0x416cb8) returned 0x0 [0029.178] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.178] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.178] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.178] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.178] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.178] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.178] GetCurrentObject (hdc=0x2c010252, type=0x1) returned 0x1b00017 [0029.178] GetCurrentObject (hdc=0x2c010252, type=0x2) returned 0x1900010 [0029.178] GetCurrentObject (hdc=0x2c010252, type=0x7) returned 0x470500d1 [0029.178] GetCurrentObject (hdc=0x2c010252, type=0x6) returned 0x18a002e [0029.178] SaveDC (hdc=0x2c010252) returned 1 [0029.178] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2304024a [0029.178] GetClipRgn (hdc=0x2c010252, hrgn=0x2304024a) returned 0 [0029.178] SelectClipRgn (hdc=0x2c010252, hrgn=0x37040813) returned 2 [0029.178] DeleteObject (ho=0x2304024a) returned 1 [0029.178] DeleteObject (ho=0x37040813) returned 1 [0029.179] OffsetViewportOrgEx (in: hdc=0x2c010252, x=0, y=0, lppt=0x261368c | out: lppt=0x261368c) returned 1 [0029.179] GetNearestColor (hdc=0x2c010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.179] CreateSolidBrush (color=0xf5f5f5) returned 0x24100244 [0029.179] FillRect (hDC=0x2c010252, lprc=0x1eec40, hbr=0x24100244) returned 1 [0029.179] DeleteObject (ho=0x24100244) returned 1 [0029.179] RestoreDC (hdc=0x2c010252, nSavedDC=-1) returned 1 [0029.179] GdipReleaseDC (graphics=0x507a150, hdc=0x2c010252) returned 0x0 [0029.179] GdipRestoreGraphics (graphics=0x507a150, state=0xfda70dbd) returned 0x0 [0029.179] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.179] GetWindowTextLengthW (hWnd=0x201e8) returned 16 [0029.179] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0029.179] GetSystemMetrics (nIndex=42) returned 0 [0029.179] GetWindowTextW (in: hWnd=0x201e8, lpString=0x1eecd0, nMaxCount=17 | out: lpString="infected your PC") returned 16 [0029.179] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201e8, Msg=0xd, wParam=0x11, lParam=0x1eecd0) returned 0x10 [0029.179] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.179] GetCurrentObject (hdc=0x2c010252, type=0x1) returned 0x1b00017 [0029.179] GetCurrentObject (hdc=0x2c010252, type=0x2) returned 0x1900010 [0029.179] GetCurrentObject (hdc=0x2c010252, type=0x7) returned 0x470500d1 [0029.179] GetCurrentObject (hdc=0x2c010252, type=0x6) returned 0x18a002e [0029.179] SaveDC (hdc=0x2c010252) returned 1 [0029.179] GetNearestColor (hdc=0x2c010252, color=0x0) returned 0x0 [0029.179] RestoreDC (hdc=0x2c010252, nSavedDC=-1) returned 1 [0029.180] GdipReleaseDC (graphics=0x507a150, hdc=0x2c010252) returned 0x0 [0029.180] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.180] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.180] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.180] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.180] GetCurrentObject (hdc=0x2c010252, type=0x1) returned 0x1b00017 [0029.180] GetCurrentObject (hdc=0x2c010252, type=0x2) returned 0x1900010 [0029.180] GetCurrentObject (hdc=0x2c010252, type=0x7) returned 0x470500d1 [0029.180] GetCurrentObject (hdc=0x2c010252, type=0x6) returned 0x18a002e [0029.180] SaveDC (hdc=0x2c010252) returned 1 [0029.180] GetTextAlign (hdc=0x2c010252) returned 0x0 [0029.180] GetTextColor (hdc=0x2c010252) returned 0x0 [0029.180] GetCurrentObject (hdc=0x2c010252, type=0x6) returned 0x18a002e [0029.180] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.180] SelectObject (hdc=0x2c010252, h=0x400a085c) returned 0x18a002e [0029.180] GetBkMode (hdc=0x2c010252) returned 2 [0029.180] SetBkMode (hdc=0x2c010252, mode=1) returned 2 [0029.180] DrawTextExW (in: hdc=0x2c010252, lpchText="infected your PC", cchText=16, lprc=0x1eeb7c, format=0x100000, lpdtp=0x2613b44 | out: lpchText="infected your PC", lprc=0x1eeb7c) returned 20 [0029.182] RestoreDC (hdc=0x2c010252, nSavedDC=-1) returned 1 [0029.182] GdipReleaseDC (graphics=0x507a150, hdc=0x2c010252) returned 0x0 [0029.182] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.182] BitBlt (hdc=0x601084f, x=0, y=0, cx=117, cy=20, hdcSrc=0x2c010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.182] GdipReleaseDC (graphics=0x507a150, hdc=0x2c010252) returned 0x0 [0029.182] SelectPalette (hdc=0x601084f, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.182] SelectObject (hdc=0x2c010252, h=0x185000f) returned 0x470500d1 [0029.182] DeleteDC (hdc=0x2c010252) returned 1 [0029.182] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.182] EndPaint (hWnd=0x201e8, lpPaint=0x1eed3c) returned 1 [0029.182] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.182] IsWindowUnicode (hWnd=0x201ea) returned 1 [0029.182] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.182] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.182] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.183] BeginPaint (in: hWnd=0x201ea, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x160107c7 [0029.183] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.183] CreateCompatibleDC (hdc=0x160107c7) returned 0x2e010252 [0029.183] SelectObject (hdc=0x2e010252, h=0x470500d1) returned 0x185000f [0029.183] GdipCreateFromHDC (hdc=0x2e010252, graphics=0x1eed58) returned 0x0 [0029.183] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.183] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=121, height=16, combineMode=0x0) returned 0x0 [0029.183] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.183] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.183] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.183] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.183] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.183] LocalFree (hMem=0x416cb8) returned 0x0 [0029.183] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.183] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.183] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.183] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.183] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.183] GetWindowTextLengthW (hWnd=0x201ea) returned 23 [0029.183] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0029.183] GetSystemMetrics (nIndex=42) returned 0 [0029.183] GetWindowTextW (in: hWnd=0x201ea, lpString=0x1eecc4, nMaxCount=24 | out: lpString="to get your files back.") returned 23 [0029.183] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0xd, wParam=0x18, lParam=0x1eecc4) returned 0x17 [0029.184] GetClientRect (in: hWnd=0x201ea, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.184] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.184] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.184] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.184] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.184] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec0c) returned 0x0 [0029.184] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.184] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.184] LocalFree (hMem=0x416cb8) returned 0x0 [0029.184] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.184] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.184] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.184] LocalFree (hMem=0x416cb8) returned 0x0 [0029.184] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.184] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.184] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.184] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.184] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.184] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.184] GetCurrentObject (hdc=0x2e010252, type=0x1) returned 0x1b00017 [0029.184] GetCurrentObject (hdc=0x2e010252, type=0x2) returned 0x1900010 [0029.184] GetCurrentObject (hdc=0x2e010252, type=0x7) returned 0x470500d1 [0029.184] GetCurrentObject (hdc=0x2e010252, type=0x6) returned 0x18a002e [0029.184] SaveDC (hdc=0x2e010252) returned 1 [0029.185] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x38040813 [0029.185] GetClipRgn (hdc=0x2e010252, hrgn=0x38040813) returned 0 [0029.185] SelectClipRgn (hdc=0x2e010252, hrgn=0x2504024a) returned 2 [0029.185] DeleteObject (ho=0x38040813) returned 1 [0029.185] DeleteObject (ho=0x2504024a) returned 1 [0029.185] OffsetViewportOrgEx (in: hdc=0x2e010252, x=0, y=0, lppt=0x2613fc0 | out: lppt=0x2613fc0) returned 1 [0029.185] GetNearestColor (hdc=0x2e010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.185] CreateSolidBrush (color=0xf5f5f5) returned 0x25100244 [0029.185] FillRect (hDC=0x2e010252, lprc=0x1eec40, hbr=0x25100244) returned 1 [0029.185] DeleteObject (ho=0x25100244) returned 1 [0029.185] RestoreDC (hdc=0x2e010252, nSavedDC=-1) returned 1 [0029.185] GdipReleaseDC (graphics=0x507a150, hdc=0x2e010252) returned 0x0 [0029.185] GdipRestoreGraphics (graphics=0x507a150, state=0xfda50dbd) returned 0x0 [0029.185] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.185] GetWindowTextLengthW (hWnd=0x201ea) returned 23 [0029.185] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x17 [0029.185] GetSystemMetrics (nIndex=42) returned 0 [0029.185] GetWindowTextW (in: hWnd=0x201ea, lpString=0x1eecc4, nMaxCount=24 | out: lpString="to get your files back.") returned 23 [0029.185] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ea, Msg=0xd, wParam=0x18, lParam=0x1eecc4) returned 0x17 [0029.185] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.185] GetCurrentObject (hdc=0x2e010252, type=0x1) returned 0x1b00017 [0029.185] GetCurrentObject (hdc=0x2e010252, type=0x2) returned 0x1900010 [0029.185] GetCurrentObject (hdc=0x2e010252, type=0x7) returned 0x470500d1 [0029.185] GetCurrentObject (hdc=0x2e010252, type=0x6) returned 0x18a002e [0029.186] SaveDC (hdc=0x2e010252) returned 1 [0029.186] GetNearestColor (hdc=0x2e010252, color=0x0) returned 0x0 [0029.186] RestoreDC (hdc=0x2e010252, nSavedDC=-1) returned 1 [0029.186] GdipReleaseDC (graphics=0x507a150, hdc=0x2e010252) returned 0x0 [0029.186] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.186] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.186] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.186] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.186] GetCurrentObject (hdc=0x2e010252, type=0x1) returned 0x1b00017 [0029.186] GetCurrentObject (hdc=0x2e010252, type=0x2) returned 0x1900010 [0029.186] GetCurrentObject (hdc=0x2e010252, type=0x7) returned 0x470500d1 [0029.186] GetCurrentObject (hdc=0x2e010252, type=0x6) returned 0x18a002e [0029.186] SaveDC (hdc=0x2e010252) returned 1 [0029.186] GetTextAlign (hdc=0x2e010252) returned 0x0 [0029.186] GetTextColor (hdc=0x2e010252) returned 0x0 [0029.186] GetCurrentObject (hdc=0x2e010252, type=0x6) returned 0x18a002e [0029.186] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.186] SelectObject (hdc=0x2e010252, h=0x290a01d6) returned 0x18a002e [0029.186] GetBkMode (hdc=0x2e010252) returned 2 [0029.187] SetBkMode (hdc=0x2e010252, mode=1) returned 2 [0029.187] DrawTextExW (in: hdc=0x2e010252, lpchText="to get your files back.", cchText=23, lprc=0x1eeb7c, format=0x100000, lpdtp=0x261449c | out: lpchText="to get your files back.", lprc=0x1eeb7c) returned 16 [0029.187] RestoreDC (hdc=0x2e010252, nSavedDC=-1) returned 1 [0029.187] GdipReleaseDC (graphics=0x507a150, hdc=0x2e010252) returned 0x0 [0029.187] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.187] BitBlt (hdc=0x160107c7, x=0, y=0, cx=121, cy=16, hdcSrc=0x2e010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.187] GdipReleaseDC (graphics=0x507a150, hdc=0x2e010252) returned 0x0 [0029.187] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.187] SelectObject (hdc=0x2e010252, h=0x185000f) returned 0x470500d1 [0029.187] DeleteDC (hdc=0x2e010252) returned 1 [0029.187] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.187] EndPaint (hWnd=0x201ea, lpPaint=0x1eed3c) returned 1 [0029.187] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.187] IsWindowUnicode (hWnd=0x201dc) returned 1 [0029.187] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.187] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.187] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.187] BeginPaint (in: hWnd=0x201dc, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x120107ec [0029.187] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.188] CreateCompatibleDC (hdc=0x120107ec) returned 0x30010252 [0029.188] SelectObject (hdc=0x30010252, h=0x470500d1) returned 0x185000f [0029.188] GdipCreateFromHDC (hdc=0x30010252, graphics=0x1eed58) returned 0x0 [0029.188] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.188] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=326, height=16, combineMode=0x0) returned 0x0 [0029.188] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.188] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.188] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.188] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.188] LocalFree (hMem=0x416cb8) returned 0x0 [0029.188] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.188] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.188] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.188] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.188] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.188] GetWindowTextLengthW (hWnd=0x201dc) returned 58 [0029.188] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3a [0029.188] GetSystemMetrics (nIndex=42) returned 0 [0029.188] GetWindowTextW (in: hWnd=0x201dc, lpString=0x1eec7c, nMaxCount=59 | out: lpString="Your computer has been infected. You must do as instructed") returned 58 [0029.188] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0xd, wParam=0x3b, lParam=0x1eec7c) returned 0x3a [0029.188] GetClientRect (in: hWnd=0x201dc, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.188] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.188] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.188] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.189] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.189] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec0c) returned 0x0 [0029.189] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.189] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.189] LocalFree (hMem=0x416cb8) returned 0x0 [0029.189] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.189] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.189] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.189] LocalFree (hMem=0x416cb8) returned 0x0 [0029.189] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.189] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.189] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.189] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.189] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.189] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.189] GetCurrentObject (hdc=0x30010252, type=0x1) returned 0x1b00017 [0029.189] GetCurrentObject (hdc=0x30010252, type=0x2) returned 0x1900010 [0029.189] GetCurrentObject (hdc=0x30010252, type=0x7) returned 0x470500d1 [0029.189] GetCurrentObject (hdc=0x30010252, type=0x6) returned 0x18a002e [0029.189] SaveDC (hdc=0x30010252) returned 1 [0029.189] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2604024a [0029.189] GetClipRgn (hdc=0x30010252, hrgn=0x2604024a) returned 0 [0029.189] SelectClipRgn (hdc=0x30010252, hrgn=0x3a040813) returned 2 [0029.189] DeleteObject (ho=0x2604024a) returned 1 [0029.190] DeleteObject (ho=0x3a040813) returned 1 [0029.190] OffsetViewportOrgEx (in: hdc=0x30010252, x=0, y=0, lppt=0x26149f0 | out: lppt=0x26149f0) returned 1 [0029.190] GetNearestColor (hdc=0x30010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.190] CreateSolidBrush (color=0xf5f5f5) returned 0x26100244 [0029.190] FillRect (hDC=0x30010252, lprc=0x1eec40, hbr=0x26100244) returned 1 [0029.190] DeleteObject (ho=0x26100244) returned 1 [0029.190] RestoreDC (hdc=0x30010252, nSavedDC=-1) returned 1 [0029.190] GdipReleaseDC (graphics=0x507a150, hdc=0x30010252) returned 0x0 [0029.190] GdipRestoreGraphics (graphics=0x507a150, state=0xfda30dbd) returned 0x0 [0029.190] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.190] GetWindowTextLengthW (hWnd=0x201dc) returned 58 [0029.190] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3a [0029.190] GetSystemMetrics (nIndex=42) returned 0 [0029.190] GetWindowTextW (in: hWnd=0x201dc, lpString=0x1eec7c, nMaxCount=59 | out: lpString="Your computer has been infected. You must do as instructed") returned 58 [0029.190] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201dc, Msg=0xd, wParam=0x3b, lParam=0x1eec7c) returned 0x3a [0029.190] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.190] GetCurrentObject (hdc=0x30010252, type=0x1) returned 0x1b00017 [0029.190] GetCurrentObject (hdc=0x30010252, type=0x2) returned 0x1900010 [0029.190] GetCurrentObject (hdc=0x30010252, type=0x7) returned 0x470500d1 [0029.190] GetCurrentObject (hdc=0x30010252, type=0x6) returned 0x18a002e [0029.190] SaveDC (hdc=0x30010252) returned 1 [0029.190] GetNearestColor (hdc=0x30010252, color=0x0) returned 0x0 [0029.190] RestoreDC (hdc=0x30010252, nSavedDC=-1) returned 1 [0029.190] GdipReleaseDC (graphics=0x507a150, hdc=0x30010252) returned 0x0 [0029.191] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.191] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.191] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.191] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.191] GetCurrentObject (hdc=0x30010252, type=0x1) returned 0x1b00017 [0029.191] GetCurrentObject (hdc=0x30010252, type=0x2) returned 0x1900010 [0029.191] GetCurrentObject (hdc=0x30010252, type=0x7) returned 0x470500d1 [0029.191] GetCurrentObject (hdc=0x30010252, type=0x6) returned 0x18a002e [0029.191] SaveDC (hdc=0x30010252) returned 1 [0029.191] GetTextAlign (hdc=0x30010252) returned 0x0 [0029.191] GetTextColor (hdc=0x30010252) returned 0x0 [0029.191] GetCurrentObject (hdc=0x30010252, type=0x6) returned 0x18a002e [0029.192] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.192] SelectObject (hdc=0x30010252, h=0x290a01d6) returned 0x18a002e [0029.192] GetBkMode (hdc=0x30010252) returned 2 [0029.192] SetBkMode (hdc=0x30010252, mode=1) returned 2 [0029.192] DrawTextExW (in: hdc=0x30010252, lpchText="Your computer has been infected. You must do as instructed", cchText=58, lprc=0x1eeb7c, format=0x100000, lpdtp=0x2614fa4 | out: lpchText="Your computer has been infected. You must do as instructed", lprc=0x1eeb7c) returned 16 [0029.192] RestoreDC (hdc=0x30010252, nSavedDC=-1) returned 1 [0029.192] GdipReleaseDC (graphics=0x507a150, hdc=0x30010252) returned 0x0 [0029.192] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.192] BitBlt (hdc=0x120107ec, x=0, y=0, cx=326, cy=16, hdcSrc=0x30010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.192] GdipReleaseDC (graphics=0x507a150, hdc=0x30010252) returned 0x0 [0029.193] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.193] SelectObject (hdc=0x30010252, h=0x185000f) returned 0x470500d1 [0029.193] DeleteDC (hdc=0x30010252) returned 1 [0029.193] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.193] EndPaint (hWnd=0x201dc, lpPaint=0x1eed3c) returned 1 [0029.193] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.193] IsWindowUnicode (hWnd=0x201de) returned 1 [0029.193] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.193] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.193] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.193] BeginPaint (in: hWnd=0x201de, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x601084f [0029.193] SelectPalette (hdc=0x601084f, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.193] CreateCompatibleDC (hdc=0x601084f) returned 0x32010252 [0029.193] SelectObject (hdc=0x32010252, h=0x470500d1) returned 0x185000f [0029.193] GdipCreateFromHDC (hdc=0x32010252, graphics=0x1eed58) returned 0x0 [0029.193] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.193] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=118, height=20, combineMode=0x0) returned 0x0 [0029.193] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.193] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.193] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.193] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.193] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.194] LocalFree (hMem=0x416cb8) returned 0x0 [0029.194] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.194] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.194] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.194] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.194] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.194] GetWindowTextLengthW (hWnd=0x201de) returned 16 [0029.194] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0029.194] GetSystemMetrics (nIndex=42) returned 0 [0029.194] GetWindowTextW (in: hWnd=0x201de, lpString=0x1eecd0, nMaxCount=17 | out: lpString="c0hen locker has") returned 16 [0029.194] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0xd, wParam=0x11, lParam=0x1eecd0) returned 0x10 [0029.194] GetClientRect (in: hWnd=0x201de, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.194] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.194] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.194] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.194] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.194] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec0c) returned 0x0 [0029.194] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.194] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.194] LocalFree (hMem=0x416cb8) returned 0x0 [0029.194] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.194] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.194] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.194] LocalFree (hMem=0x416cb8) returned 0x0 [0029.195] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.195] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.195] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.195] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.195] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.195] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.195] GetCurrentObject (hdc=0x32010252, type=0x1) returned 0x1b00017 [0029.195] GetCurrentObject (hdc=0x32010252, type=0x2) returned 0x1900010 [0029.195] GetCurrentObject (hdc=0x32010252, type=0x7) returned 0x470500d1 [0029.195] GetCurrentObject (hdc=0x32010252, type=0x6) returned 0x18a002e [0029.195] SaveDC (hdc=0x32010252) returned 1 [0029.195] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b040813 [0029.195] GetClipRgn (hdc=0x32010252, hrgn=0x3b040813) returned 0 [0029.195] SelectClipRgn (hdc=0x32010252, hrgn=0x2804024a) returned 2 [0029.195] DeleteObject (ho=0x3b040813) returned 1 [0029.195] DeleteObject (ho=0x2804024a) returned 1 [0029.195] OffsetViewportOrgEx (in: hdc=0x32010252, x=0, y=0, lppt=0x26153fc | out: lppt=0x26153fc) returned 1 [0029.195] GetNearestColor (hdc=0x32010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.195] CreateSolidBrush (color=0xf5f5f5) returned 0x27100244 [0029.195] FillRect (hDC=0x32010252, lprc=0x1eec40, hbr=0x27100244) returned 1 [0029.195] DeleteObject (ho=0x27100244) returned 1 [0029.195] RestoreDC (hdc=0x32010252, nSavedDC=-1) returned 1 [0029.195] GdipReleaseDC (graphics=0x507a150, hdc=0x32010252) returned 0x0 [0029.196] GdipRestoreGraphics (graphics=0x507a150, state=0xfda10dbd) returned 0x0 [0029.196] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.196] GetWindowTextLengthW (hWnd=0x201de) returned 16 [0029.196] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0029.196] GetSystemMetrics (nIndex=42) returned 0 [0029.196] GetWindowTextW (in: hWnd=0x201de, lpString=0x1eecd0, nMaxCount=17 | out: lpString="c0hen locker has") returned 16 [0029.196] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201de, Msg=0xd, wParam=0x11, lParam=0x1eecd0) returned 0x10 [0029.196] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.196] GetCurrentObject (hdc=0x32010252, type=0x1) returned 0x1b00017 [0029.196] GetCurrentObject (hdc=0x32010252, type=0x2) returned 0x1900010 [0029.196] GetCurrentObject (hdc=0x32010252, type=0x7) returned 0x470500d1 [0029.196] GetCurrentObject (hdc=0x32010252, type=0x6) returned 0x18a002e [0029.196] SaveDC (hdc=0x32010252) returned 1 [0029.196] GetNearestColor (hdc=0x32010252, color=0x0) returned 0x0 [0029.196] RestoreDC (hdc=0x32010252, nSavedDC=-1) returned 1 [0029.196] GdipReleaseDC (graphics=0x507a150, hdc=0x32010252) returned 0x0 [0029.196] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.196] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.196] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.196] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.196] GetCurrentObject (hdc=0x32010252, type=0x1) returned 0x1b00017 [0029.197] GetCurrentObject (hdc=0x32010252, type=0x2) returned 0x1900010 [0029.197] GetCurrentObject (hdc=0x32010252, type=0x7) returned 0x470500d1 [0029.197] GetCurrentObject (hdc=0x32010252, type=0x6) returned 0x18a002e [0029.197] SaveDC (hdc=0x32010252) returned 1 [0029.197] GetTextAlign (hdc=0x32010252) returned 0x0 [0029.197] GetTextColor (hdc=0x32010252) returned 0x0 [0029.197] GetCurrentObject (hdc=0x32010252, type=0x6) returned 0x18a002e [0029.197] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.197] SelectObject (hdc=0x32010252, h=0x400a085c) returned 0x18a002e [0029.197] GetBkMode (hdc=0x32010252) returned 2 [0029.197] SetBkMode (hdc=0x32010252, mode=1) returned 2 [0029.197] DrawTextExW (in: hdc=0x32010252, lpchText="c0hen locker has", cchText=16, lprc=0x1eeb7c, format=0x100000, lpdtp=0x26158b4 | out: lpchText="c0hen locker has", lprc=0x1eeb7c) returned 20 [0029.197] RestoreDC (hdc=0x32010252, nSavedDC=-1) returned 1 [0029.198] GdipReleaseDC (graphics=0x507a150, hdc=0x32010252) returned 0x0 [0029.198] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.198] BitBlt (hdc=0x601084f, x=0, y=0, cx=118, cy=20, hdcSrc=0x32010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.198] GdipReleaseDC (graphics=0x507a150, hdc=0x32010252) returned 0x0 [0029.198] SelectPalette (hdc=0x601084f, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.198] SelectObject (hdc=0x32010252, h=0x185000f) returned 0x470500d1 [0029.198] DeleteDC (hdc=0x32010252) returned 1 [0029.198] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.198] EndPaint (hWnd=0x201de, lpPaint=0x1eed3c) returned 1 [0029.198] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.198] IsWindowUnicode (hWnd=0x201d8) returned 1 [0029.198] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.198] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.198] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.198] BeginPaint (in: hWnd=0x201d8, lpPaint=0x1eed7c | out: lpPaint=0x1eed7c) returned 0x160107c7 [0029.198] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.198] CreateCompatibleDC (hdc=0x160107c7) returned 0x34010252 [0029.198] DeleteObject (ho=0x470500d1) returned 1 [0029.198] GetObjectType (h=0x160107c7) returned 0x3 [0029.198] CreateCompatibleBitmap (hdc=0x160107c7, cx=1, cy=1) returned 0x2e050265 [0029.199] GetDIBits (in: hdc=0x160107c7, hbm=0x2e050265, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1ee86c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee86c) returned 1 [0029.199] GetDIBits (in: hdc=0x160107c7, hbm=0x2e050265, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1ee86c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee86c) returned 1 [0029.199] DeleteObject (ho=0x2e050265) returned 1 [0029.199] CreateDIBSection (in: hdc=0x160107c7, lpbmi=0x1ee8bc, usage=0x0, ppvBits=0x1eedb0, hSection=0x0, offset=0x0 | out: ppvBits=0x1eedb0) returned 0x480500d1 [0029.199] SelectObject (hdc=0x34010252, h=0x480500d1) returned 0x185000f [0029.199] GdipCreateFromHDC (hdc=0x34010252, graphics=0x1eed94) returned 0x0 [0029.199] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.199] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=123, height=104, combineMode=0x0) returned 0x0 [0029.199] GdipCreateMatrix (matrix=0x1eeddc) returned 0x0 [0029.199] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.199] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedf4) returned 0x0 [0029.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.199] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.199] LocalFree (hMem=0x416cb8) returned 0x0 [0029.199] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.199] GdipCreateRegion (region=0x1eeddc) returned 0x0 [0029.199] GdipGetClip (graphics=0x507a150, region=0x507a430) returned 0x0 [0029.200] GdipIsInfiniteRegion (region=0x507a430, graphics=0x507a150, result=0x1eede8) returned 0x0 [0029.200] GdipSaveGraphics (graphics=0x507a150, state=0x1eee14) returned 0x0 [0029.200] GetWindowTextLengthW (hWnd=0x201d8) returned 0 [0029.200] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.200] GetSystemMetrics (nIndex=42) returned 0 [0029.200] GetWindowTextW (in: hWnd=0x201d8, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.200] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.200] GetClientRect (in: hWnd=0x201d8, lpRect=0x1eeddc | out: lpRect=0x1eeddc) returned 1 [0029.200] GdipCreateRegion (region=0x1eec30) returned 0x0 [0029.200] GdipGetClip (graphics=0x507a150, region=0x507a720) returned 0x0 [0029.200] GdipCreateMatrix (matrix=0x1eec30) returned 0x0 [0029.200] GdipGetWorldTransform (graphics=0x507a150, matrix=0x507a7b0) returned 0x0 [0029.200] GdipIsMatrixIdentity (matrix=0x507a7b0, result=0x1eec48) returned 0x0 [0029.200] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.200] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.200] LocalFree (hMem=0x416cb8) returned 0x0 [0029.200] GdipCombineRegionRegion (region=0x507a720, region2=0x507a430, combineMode=0x1) returned 0x0 [0029.200] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.200] GdipGetMatrixElements (matrix=0x507a7b0, matrixOut=0x416cb8) returned 0x0 [0029.200] LocalFree (hMem=0x416cb8) returned 0x0 [0029.200] GdipDeleteMatrix (matrix=0x507a7b0) returned 0x0 [0029.200] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec70) returned 0x0 [0029.200] GdipIsInfiniteRegion (region=0x507a720, graphics=0x507a150, result=0x1eec60) returned 0x0 [0029.200] GdipGetRegionHRgn (region=0x507a720, graphics=0x507a150, hRgn=0x1eec60) returned 0x0 [0029.201] GdipDeleteRegion (region=0x507a720) returned 0x0 [0029.201] GdipGetDC (graphics=0x507a150, hdc=0x1eec78) returned 0x0 [0029.201] GetCurrentObject (hdc=0x34010252, type=0x1) returned 0x1b00017 [0029.201] GetCurrentObject (hdc=0x34010252, type=0x2) returned 0x1900010 [0029.201] GetCurrentObject (hdc=0x34010252, type=0x7) returned 0x480500d1 [0029.201] GetCurrentObject (hdc=0x34010252, type=0x6) returned 0x18a002e [0029.201] SaveDC (hdc=0x34010252) returned 1 [0029.201] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2904024a [0029.201] GetClipRgn (hdc=0x34010252, hrgn=0x2904024a) returned 0 [0029.201] SelectClipRgn (hdc=0x34010252, hrgn=0x3d040813) returned 2 [0029.201] DeleteObject (ho=0x2904024a) returned 1 [0029.201] DeleteObject (ho=0x3d040813) returned 1 [0029.201] OffsetViewportOrgEx (in: hdc=0x34010252, x=0, y=0, lppt=0x2616ca4 | out: lppt=0x2616ca4) returned 1 [0029.201] GetNearestColor (hdc=0x34010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.201] CreateSolidBrush (color=0xf5f5f5) returned 0x28100244 [0029.201] FillRect (hDC=0x34010252, lprc=0x1eec7c, hbr=0x28100244) returned 1 [0029.202] DeleteObject (ho=0x28100244) returned 1 [0029.202] RestoreDC (hdc=0x34010252, nSavedDC=-1) returned 1 [0029.202] GdipReleaseDC (graphics=0x507a150, hdc=0x34010252) returned 0x0 [0029.202] GdipRestoreGraphics (graphics=0x507a150, state=0xfd9f0dbd) returned 0x0 [0029.202] GdipDeleteRegion (region=0x507a430) returned 0x0 [0029.202] GetWindowTextLengthW (hWnd=0x201d8) returned 0 [0029.202] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.202] GetSystemMetrics (nIndex=42) returned 0 [0029.202] GetWindowTextW (in: hWnd=0x201d8, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.202] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201d8, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.202] GdipGetImageWidth (image=0x4560250, width=0x1eecb0) returned 0x0 [0029.202] GdipGetImageHeight (image=0x4560250, height=0x1eecb0) returned 0x0 [0029.202] GdipDrawImageRectI (graphics=0x507a150, image=0x4560250, x=9, y=0, width=104, height=104) returned 0x0 [0029.205] GdipGetDC (graphics=0x507a150, hdc=0x1eedd4) returned 0x0 [0029.205] BitBlt (hdc=0x160107c7, x=0, y=0, cx=123, cy=104, hdcSrc=0x34010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.205] GdipReleaseDC (graphics=0x507a150, hdc=0x34010252) returned 0x0 [0029.205] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.205] SelectObject (hdc=0x34010252, h=0x185000f) returned 0x480500d1 [0029.205] DeleteDC (hdc=0x34010252) returned 1 [0029.205] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.205] EndPaint (hWnd=0x201d8, lpPaint=0x1eed78) returned 1 [0029.205] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.205] IsWindowUnicode (hWnd=0x201da) returned 1 [0029.205] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.205] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.205] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.206] BeginPaint (in: hWnd=0x201da, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x601084f [0029.206] SelectPalette (hdc=0x601084f, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.206] CreateCompatibleDC (hdc=0x601084f) returned 0x36010252 [0029.206] SelectObject (hdc=0x36010252, h=0x480500d1) returned 0x185000f [0029.206] GdipCreateFromHDC (hdc=0x36010252, graphics=0x1eed58) returned 0x0 [0029.206] GdipTranslateWorldTransform (graphics=0x507a150, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.206] GdipSetClipRectI (graphics=0x507a150, x=0, y=0, width=131, height=16, combineMode=0x0) returned 0x0 [0029.206] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.206] GdipGetWorldTransform (graphics=0x507a150, matrix=0x4560d10) returned 0x0 [0029.206] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eedb8) returned 0x0 [0029.206] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.206] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.206] LocalFree (hMem=0x416cb8) returned 0x0 [0029.206] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.206] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.206] GdipGetClip (graphics=0x507a150, region=0x504fb58) returned 0x0 [0029.206] GdipIsInfiniteRegion (region=0x504fb58, graphics=0x507a150, result=0x1eedac) returned 0x0 [0029.206] GdipSaveGraphics (graphics=0x507a150, state=0x1eedd8) returned 0x0 [0029.206] GetWindowTextLengthW (hWnd=0x201da) returned 20 [0029.206] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0029.206] GetSystemMetrics (nIndex=42) returned 0 [0029.206] GetWindowTextW (in: hWnd=0x201da, lpString=0x1eecc8, nMaxCount=21 | out: lpString="discord.com/download") returned 20 [0029.206] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0xd, wParam=0x15, lParam=0x1eecc8) returned 0x14 [0029.207] GetClientRect (in: hWnd=0x201da, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.207] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.207] GdipGetClip (graphics=0x507a150, region=0x504fe48) returned 0x0 [0029.207] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.207] GdipGetWorldTransform (graphics=0x507a150, matrix=0x504fed8) returned 0x0 [0029.207] GdipIsMatrixIdentity (matrix=0x504fed8, result=0x1eec0c) returned 0x0 [0029.207] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.207] GdipGetMatrixElements (matrix=0x504fed8, matrixOut=0x416cb8) returned 0x0 [0029.207] LocalFree (hMem=0x416cb8) returned 0x0 [0029.207] GdipCombineRegionRegion (region=0x504fe48, region2=0x504fb58, combineMode=0x1) returned 0x0 [0029.207] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.207] GdipGetMatrixElements (matrix=0x504fed8, matrixOut=0x416cb8) returned 0x0 [0029.207] LocalFree (hMem=0x416cb8) returned 0x0 [0029.207] GdipDeleteMatrix (matrix=0x504fed8) returned 0x0 [0029.207] GdipIsInfiniteRegion (region=0x504fe48, graphics=0x507a150, result=0x1eec34) returned 0x0 [0029.207] GdipIsInfiniteRegion (region=0x504fe48, graphics=0x507a150, result=0x1eec24) returned 0x0 [0029.207] GdipGetRegionHRgn (region=0x504fe48, graphics=0x507a150, hRgn=0x1eec24) returned 0x0 [0029.208] GdipDeleteRegion (region=0x504fe48) returned 0x0 [0029.208] GdipGetDC (graphics=0x507a150, hdc=0x1eec3c) returned 0x0 [0029.208] GetCurrentObject (hdc=0x36010252, type=0x1) returned 0x1b00017 [0029.208] GetCurrentObject (hdc=0x36010252, type=0x2) returned 0x1900010 [0029.208] GetCurrentObject (hdc=0x36010252, type=0x7) returned 0x480500d1 [0029.208] GetCurrentObject (hdc=0x36010252, type=0x6) returned 0x18a002e [0029.208] SaveDC (hdc=0x36010252) returned 1 [0029.208] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3e040813 [0029.208] GetClipRgn (hdc=0x36010252, hrgn=0x3e040813) returned 0 [0029.208] SelectClipRgn (hdc=0x36010252, hrgn=0x2a04024a) returned 2 [0029.208] DeleteObject (ho=0x3e040813) returned 1 [0029.208] DeleteObject (ho=0x2a04024a) returned 1 [0029.208] OffsetViewportOrgEx (in: hdc=0x36010252, x=0, y=0, lppt=0x2617180 | out: lppt=0x2617180) returned 1 [0029.208] GetNearestColor (hdc=0x36010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.208] CreateSolidBrush (color=0xf5f5f5) returned 0x29100244 [0029.208] FillRect (hDC=0x36010252, lprc=0x1eec40, hbr=0x29100244) returned 1 [0029.208] DeleteObject (ho=0x29100244) returned 1 [0029.208] RestoreDC (hdc=0x36010252, nSavedDC=-1) returned 1 [0029.208] GdipReleaseDC (graphics=0x507a150, hdc=0x36010252) returned 0x0 [0029.208] GdipRestoreGraphics (graphics=0x507a150, state=0xfd9d0dbd) returned 0x0 [0029.208] GdipDeleteRegion (region=0x504fb58) returned 0x0 [0029.208] GetWindowTextLengthW (hWnd=0x201da) returned 20 [0029.208] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0029.208] GetSystemMetrics (nIndex=42) returned 0 [0029.208] GetWindowTextW (in: hWnd=0x201da, lpString=0x1eecc8, nMaxCount=21 | out: lpString="discord.com/download") returned 20 [0029.208] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201da, Msg=0xd, wParam=0x15, lParam=0x1eecc8) returned 0x14 [0029.209] GdipGetDC (graphics=0x507a150, hdc=0x1eec5c) returned 0x0 [0029.209] GetCurrentObject (hdc=0x36010252, type=0x1) returned 0x1b00017 [0029.209] GetCurrentObject (hdc=0x36010252, type=0x2) returned 0x1900010 [0029.209] GetCurrentObject (hdc=0x36010252, type=0x7) returned 0x480500d1 [0029.209] GetCurrentObject (hdc=0x36010252, type=0x6) returned 0x18a002e [0029.209] SaveDC (hdc=0x36010252) returned 1 [0029.209] GetNearestColor (hdc=0x36010252, color=0x0) returned 0x0 [0029.209] RestoreDC (hdc=0x36010252, nSavedDC=-1) returned 1 [0029.209] GdipReleaseDC (graphics=0x507a150, hdc=0x36010252) returned 0x0 [0029.209] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.209] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.209] GdipGetTextRenderingHint (graphics=0x507a150, mode=0x1eebfc) returned 0x0 [0029.209] GdipGetDC (graphics=0x507a150, hdc=0x1eebe8) returned 0x0 [0029.209] GetCurrentObject (hdc=0x36010252, type=0x1) returned 0x1b00017 [0029.209] GetCurrentObject (hdc=0x36010252, type=0x2) returned 0x1900010 [0029.209] GetCurrentObject (hdc=0x36010252, type=0x7) returned 0x480500d1 [0029.209] GetCurrentObject (hdc=0x36010252, type=0x6) returned 0x18a002e [0029.209] SaveDC (hdc=0x36010252) returned 1 [0029.209] GetTextAlign (hdc=0x36010252) returned 0x0 [0029.209] GetTextColor (hdc=0x36010252) returned 0x0 [0029.209] GetCurrentObject (hdc=0x36010252, type=0x6) returned 0x18a002e [0029.209] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.210] SelectObject (hdc=0x36010252, h=0x290a01d6) returned 0x18a002e [0029.210] GetBkMode (hdc=0x36010252) returned 2 [0029.210] SetBkMode (hdc=0x36010252, mode=1) returned 2 [0029.210] DrawTextExW (in: hdc=0x36010252, lpchText="discord.com/download", cchText=20, lprc=0x1eeb7c, format=0x100000, lpdtp=0x2617650 | out: lpchText="discord.com/download", lprc=0x1eeb7c) returned 16 [0029.210] RestoreDC (hdc=0x36010252, nSavedDC=-1) returned 1 [0029.210] GdipReleaseDC (graphics=0x507a150, hdc=0x36010252) returned 0x0 [0029.210] GdipGetDC (graphics=0x507a150, hdc=0x1eed98) returned 0x0 [0029.210] BitBlt (hdc=0x601084f, x=0, y=0, cx=131, cy=16, hdcSrc=0x36010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.210] GdipReleaseDC (graphics=0x507a150, hdc=0x36010252) returned 0x0 [0029.210] SelectPalette (hdc=0x601084f, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.210] SelectObject (hdc=0x36010252, h=0x185000f) returned 0x480500d1 [0029.210] DeleteDC (hdc=0x36010252) returned 1 [0029.210] GdipDeleteGraphics (graphics=0x507a150) returned 0x0 [0029.210] EndPaint (hWnd=0x201da, lpPaint=0x1eed3c) returned 1 [0029.210] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.210] IsWindowUnicode (hWnd=0x201d4) returned 1 [0029.210] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.210] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.210] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.211] BeginPaint (in: hWnd=0x201d4, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x160107c7 [0029.211] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.211] CreateCompatibleDC (hdc=0x160107c7) returned 0x38010252 [0029.211] SelectObject (hdc=0x38010252, h=0x480500d1) returned 0x185000f [0029.211] GdipCreateFromHDC (hdc=0x38010252, graphics=0x1eed58) returned 0x0 [0029.211] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.211] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=315, height=16, combineMode=0x0) returned 0x0 [0029.211] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.211] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0029.211] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eedb8) returned 0x0 [0029.211] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.211] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0029.211] LocalFree (hMem=0x416cb8) returned 0x0 [0029.211] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0029.211] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.211] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.211] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eedac) returned 0x0 [0029.211] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eedd8) returned 0x0 [0029.211] GetWindowTextLengthW (hWnd=0x201d4) returned 54 [0029.211] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x36 [0029.211] GetSystemMetrics (nIndex=42) returned 0 [0029.211] GetWindowTextW (in: hWnd=0x201d4, lpString=0x1eec84, nMaxCount=55 | out: lpString="Download discord and add c0hen#7722 for decryption key") returned 54 [0029.212] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0xd, wParam=0x37, lParam=0x1eec84) returned 0x36 [0029.212] GetClientRect (in: hWnd=0x201d4, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.212] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.212] GdipGetClip (graphics=0x504fbc8, region=0x50501c8) returned 0x0 [0029.212] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.212] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.212] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eec0c) returned 0x0 [0029.212] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.212] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.212] LocalFree (hMem=0x416cb8) returned 0x0 [0029.212] GdipCombineRegionRegion (region=0x50501c8, region2=0x504fed8, combineMode=0x1) returned 0x0 [0029.212] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.212] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.212] LocalFree (hMem=0x416cb8) returned 0x0 [0029.212] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.212] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec34) returned 0x0 [0029.212] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec24) returned 0x0 [0029.212] GdipGetRegionHRgn (region=0x50501c8, graphics=0x504fbc8, hRgn=0x1eec24) returned 0x0 [0029.212] GdipDeleteRegion (region=0x50501c8) returned 0x0 [0029.212] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec3c) returned 0x0 [0029.212] GetCurrentObject (hdc=0x38010252, type=0x1) returned 0x1b00017 [0029.212] GetCurrentObject (hdc=0x38010252, type=0x2) returned 0x1900010 [0029.212] GetCurrentObject (hdc=0x38010252, type=0x7) returned 0x480500d1 [0029.213] GetCurrentObject (hdc=0x38010252, type=0x6) returned 0x18a002e [0029.213] SaveDC (hdc=0x38010252) returned 1 [0029.213] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b04024a [0029.213] GetClipRgn (hdc=0x38010252, hrgn=0x2b04024a) returned 0 [0029.213] SelectClipRgn (hdc=0x38010252, hrgn=0x40040813) returned 2 [0029.213] DeleteObject (ho=0x2b04024a) returned 1 [0029.213] DeleteObject (ho=0x40040813) returned 1 [0029.213] OffsetViewportOrgEx (in: hdc=0x38010252, x=0, y=0, lppt=0x2617b8c | out: lppt=0x2617b8c) returned 1 [0029.213] GetNearestColor (hdc=0x38010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.213] CreateSolidBrush (color=0xf5f5f5) returned 0x2a100244 [0029.213] FillRect (hDC=0x38010252, lprc=0x1eec40, hbr=0x2a100244) returned 1 [0029.213] DeleteObject (ho=0x2a100244) returned 1 [0029.213] RestoreDC (hdc=0x38010252, nSavedDC=-1) returned 1 [0029.213] GdipReleaseDC (graphics=0x504fbc8, hdc=0x38010252) returned 0x0 [0029.213] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd9b0dbd) returned 0x0 [0029.213] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.213] GetWindowTextLengthW (hWnd=0x201d4) returned 54 [0029.213] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x36 [0029.213] GetSystemMetrics (nIndex=42) returned 0 [0029.213] GetWindowTextW (in: hWnd=0x201d4, lpString=0x1eec84, nMaxCount=55 | out: lpString="Download discord and add c0hen#7722 for decryption key") returned 54 [0029.213] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d4, Msg=0xd, wParam=0x37, lParam=0x1eec84) returned 0x36 [0029.213] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec5c) returned 0x0 [0029.214] GetCurrentObject (hdc=0x38010252, type=0x1) returned 0x1b00017 [0029.214] GetCurrentObject (hdc=0x38010252, type=0x2) returned 0x1900010 [0029.214] GetCurrentObject (hdc=0x38010252, type=0x7) returned 0x480500d1 [0029.214] GetCurrentObject (hdc=0x38010252, type=0x6) returned 0x18a002e [0029.214] SaveDC (hdc=0x38010252) returned 1 [0029.214] GetNearestColor (hdc=0x38010252, color=0x0) returned 0x0 [0029.214] RestoreDC (hdc=0x38010252, nSavedDC=-1) returned 1 [0029.214] GdipReleaseDC (graphics=0x504fbc8, hdc=0x38010252) returned 0x0 [0029.214] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.214] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.214] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1eebfc) returned 0x0 [0029.214] GdipGetDC (graphics=0x504fbc8, hdc=0x1eebe8) returned 0x0 [0029.214] GetCurrentObject (hdc=0x38010252, type=0x1) returned 0x1b00017 [0029.214] GetCurrentObject (hdc=0x38010252, type=0x2) returned 0x1900010 [0029.214] GetCurrentObject (hdc=0x38010252, type=0x7) returned 0x480500d1 [0029.214] GetCurrentObject (hdc=0x38010252, type=0x6) returned 0x18a002e [0029.214] SaveDC (hdc=0x38010252) returned 1 [0029.214] GetTextAlign (hdc=0x38010252) returned 0x0 [0029.214] GetTextColor (hdc=0x38010252) returned 0x0 [0029.214] GetCurrentObject (hdc=0x38010252, type=0x6) returned 0x18a002e [0029.215] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.215] SelectObject (hdc=0x38010252, h=0x290a01d6) returned 0x18a002e [0029.215] GetBkMode (hdc=0x38010252) returned 2 [0029.215] SetBkMode (hdc=0x38010252, mode=1) returned 2 [0029.215] DrawTextExW (in: hdc=0x38010252, lpchText="Download discord and add c0hen#7722 for decryption key", cchText=54, lprc=0x1eeb7c, format=0x100000, lpdtp=0x2618128 | out: lpchText="Download discord and add c0hen#7722 for decryption key", lprc=0x1eeb7c) returned 16 [0029.215] RestoreDC (hdc=0x38010252, nSavedDC=-1) returned 1 [0029.215] GdipReleaseDC (graphics=0x504fbc8, hdc=0x38010252) returned 0x0 [0029.215] GdipGetDC (graphics=0x504fbc8, hdc=0x1eed98) returned 0x0 [0029.215] BitBlt (hdc=0x160107c7, x=0, y=0, cx=315, cy=16, hdcSrc=0x38010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.215] GdipReleaseDC (graphics=0x504fbc8, hdc=0x38010252) returned 0x0 [0029.215] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.215] SelectObject (hdc=0x38010252, h=0x185000f) returned 0x480500d1 [0029.215] DeleteDC (hdc=0x38010252) returned 1 [0029.215] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0029.216] EndPaint (hWnd=0x201d4, lpPaint=0x1eed3c) returned 1 [0029.216] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.216] IsWindowUnicode (hWnd=0x201d6) returned 1 [0029.216] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.216] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.216] DispatchMessageW (lpMsg=0x1ef250) returned 0x1 [0029.216] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0029.217] SetTextColor (hdc=0x76010763, color=0x0) returned 0x0 [0029.217] SetBkColor (hdc=0x76010763, color=0xffffff) returned 0xffffff [0029.217] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.217] IsWindowUnicode (hWnd=0x201d0) returned 1 [0029.217] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.217] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.217] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.217] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eed34 | out: lpPaint=0x1eed34) returned 0x601084f [0029.217] SelectPalette (hdc=0x601084f, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.217] CreateCompatibleDC (hdc=0x601084f) returned 0x3b010252 [0029.218] SelectObject (hdc=0x3b010252, h=0x480500d1) returned 0x185000f [0029.218] GdipCreateFromHDC (hdc=0x3b010252, graphics=0x1eed4c) returned 0x0 [0029.218] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.218] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0029.218] GdipCreateMatrix (matrix=0x1eed94) returned 0x0 [0029.218] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0029.218] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eedac) returned 0x0 [0029.218] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.218] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0029.218] LocalFree (hMem=0x416cb8) returned 0x0 [0029.218] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0029.218] GdipCreateRegion (region=0x1eed94) returned 0x0 [0029.218] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.218] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeda0) returned 0x0 [0029.218] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eedcc) returned 0x0 [0029.218] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd990dbd) returned 0x0 [0029.218] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.220] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0x1eec44, fWinIni=0x0 | out: pvParam=0x1eec44) returned 1 [0029.221] GdipGetDC (graphics=0x504fbc8, hdc=0x1eebac) returned 0x0 [0029.221] GetCurrentObject (hdc=0x3b010252, type=0x1) returned 0x1b00017 [0029.221] GetCurrentObject (hdc=0x3b010252, type=0x2) returned 0x1900010 [0029.221] GetCurrentObject (hdc=0x3b010252, type=0x7) returned 0x480500d1 [0029.221] GetCurrentObject (hdc=0x3b010252, type=0x6) returned 0x18a002e [0029.221] SaveDC (hdc=0x3b010252) returned 1 [0029.221] GetNearestColor (hdc=0x3b010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.221] GetNearestColor (hdc=0x3b010252, color=0x515151) returned 0x515151 [0029.222] GetNearestColor (hdc=0x3b010252, color=0x0) returned 0x0 [0029.222] GetNearestColor (hdc=0x3b010252, color=0x515151) returned 0x515151 [0029.222] GetNearestColor (hdc=0x3b010252, color=0x0) returned 0x0 [0029.222] GetNearestColor (hdc=0x3b010252, color=0xfafafa) returned 0xfafafa [0029.222] GetNearestColor (hdc=0x3b010252, color=0xe0e0e0) returned 0xe0e0e0 [0029.222] GetNearestColor (hdc=0x3b010252, color=0xdcdcdc) returned 0xdcdcdc [0029.222] GetNearestColor (hdc=0x3b010252, color=0x0) returned 0x0 [0029.222] RestoreDC (hdc=0x3b010252, nSavedDC=-1) returned 1 [0029.222] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010252) returned 0x0 [0029.225] IsAppThemed () returned 0x1 [0029.225] GetThemeAppProperties () returned 0x3 [0029.225] GetThemeAppProperties () returned 0x3 [0029.225] OpenThemeData () returned 0x10003 [0029.225] IsAppThemed () returned 0x1 [0029.225] GetThemeAppProperties () returned 0x3 [0029.225] GetThemeAppProperties () returned 0x3 [0029.226] GdipGetFamilyName (in: family=0x55f6b8, name=0x1ee970, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0029.226] GetDeviceCaps (hdc=0x17010869, index=90) returned 96 [0029.226] CoTaskMemAlloc (cb=0x5c) returned 0x390c88 [0029.226] CreateFontIndirectW (lplf=0x390c88) returned 0x220a081a [0029.226] CoTaskMemFree (pv=0x390c88) [0029.226] GetObjectW (in: h=0x220a081a, c=92, pv=0x1ee948 | out: pv=0x1ee948) returned 92 [0029.226] SelectObject (hdc=0x17010869, h=0x220a081a) returned 0x290a01d6 [0029.226] GetMapMode (hdc=0x17010869) returned 1 [0029.226] GetTextMetricsW (in: hdc=0x17010869, lptm=0x1ee954 | out: lptm=0x1ee954) returned 1 [0029.227] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1eea68, format=0x102415, lpdtp=0x2618cb0 | out: lpchText="decrypt", lprc=0x1eea68) returned 13 [0029.234] IsAppThemed () returned 0x1 [0029.234] GetThemeAppProperties () returned 0x3 [0029.234] GetThemeAppProperties () returned 0x3 [0029.234] IsAppThemed () returned 0x1 [0029.234] GetThemeAppProperties () returned 0x3 [0029.234] GetThemeAppProperties () returned 0x3 [0029.236] IsAppThemed () returned 0x1 [0029.236] GetThemeAppProperties () returned 0x3 [0029.236] GetThemeAppProperties () returned 0x3 [0029.236] IsAppThemed () returned 0x1 [0029.236] GetThemeAppProperties () returned 0x3 [0029.236] GetThemeAppProperties () returned 0x3 [0029.236] IsThemePartDefined () returned 0x1 [0029.236] IsAppThemed () returned 0x1 [0029.236] GetThemeAppProperties () returned 0x3 [0029.236] GetThemeAppProperties () returned 0x3 [0029.236] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0029.236] IsAppThemed () returned 0x1 [0029.236] GetThemeAppProperties () returned 0x3 [0029.237] GetThemeAppProperties () returned 0x3 [0029.237] IsAppThemed () returned 0x1 [0029.237] GetThemeAppProperties () returned 0x3 [0029.237] GetThemeAppProperties () returned 0x3 [0029.237] IsThemePartDefined () returned 0x1 [0029.237] GdipCreateRegion (region=0x1eeab0) returned 0x0 [0029.237] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.237] GdipCreateMatrix (matrix=0x1eeab0) returned 0x0 [0029.237] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.237] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eeac8) returned 0x0 [0029.237] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.237] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.237] LocalFree (hMem=0x416cb8) returned 0x0 [0029.237] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.237] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.237] LocalFree (hMem=0x416cb8) returned 0x0 [0029.237] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.237] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeaf0) returned 0x0 [0029.237] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeae0) returned 0x0 [0029.237] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1eeae0) returned 0x0 [0029.237] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.237] GdipGetDC (graphics=0x504fbc8, hdc=0x1eeaf8) returned 0x0 [0029.237] GetCurrentObject (hdc=0x3b010252, type=0x1) returned 0x1b00017 [0029.237] GetCurrentObject (hdc=0x3b010252, type=0x2) returned 0x1900010 [0029.237] GetCurrentObject (hdc=0x3b010252, type=0x7) returned 0x480500d1 [0029.237] GetCurrentObject (hdc=0x3b010252, type=0x6) returned 0x18a002e [0029.238] SaveDC (hdc=0x3b010252) returned 1 [0029.238] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x42040813 [0029.238] GetClipRgn (hdc=0x3b010252, hrgn=0x42040813) returned 0 [0029.238] SelectClipRgn (hdc=0x3b010252, hrgn=0x2f04024a) returned 2 [0029.238] DeleteObject (ho=0x42040813) returned 1 [0029.238] DeleteObject (ho=0x2f04024a) returned 1 [0029.238] OffsetViewportOrgEx (in: hdc=0x3b010252, x=0, y=0, lppt=0x261938c | out: lppt=0x261938c) returned 1 [0029.238] DrawThemeParentBackground () returned 0x0 [0029.238] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee86c | out: lpwndpl=0x1ee86c) returned 1 [0029.238] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee818 | out: lpRect=0x1ee818) returned 1 [0029.238] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.238] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.238] GetSystemMetrics (nIndex=42) returned 0 [0029.238] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee6d8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.238] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee6d8) returned 0xb [0029.238] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee720 | out: lpRect=0x1ee720) returned 1 [0029.238] GetCurrentObject (hdc=0x3b010252, type=0x1) returned 0x1b00017 [0029.239] GetCurrentObject (hdc=0x3b010252, type=0x2) returned 0x1900010 [0029.239] GetCurrentObject (hdc=0x3b010252, type=0x7) returned 0x480500d1 [0029.239] GetCurrentObject (hdc=0x3b010252, type=0x6) returned 0x18a002e [0029.239] SaveDC (hdc=0x3b010252) returned 2 [0029.239] GetNearestColor (hdc=0x3b010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.239] CreateSolidBrush (color=0xf5f5f5) returned 0x2b100244 [0029.239] FillRect (hDC=0x3b010252, lprc=0x1ee5c0, hbr=0x2b100244) returned 1 [0029.239] DeleteObject (ho=0x2b100244) returned 1 [0029.239] RestoreDC (hdc=0x3b010252, nSavedDC=-1) returned 1 [0029.239] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.239] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.239] GetSystemMetrics (nIndex=42) returned 0 [0029.239] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee678, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.239] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee678) returned 0xb [0029.239] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee6c0 | out: lpRect=0x1ee6c0) returned 1 [0029.239] GetCurrentObject (hdc=0x3b010252, type=0x1) returned 0x1b00017 [0029.239] GetCurrentObject (hdc=0x3b010252, type=0x2) returned 0x1900010 [0029.239] GetCurrentObject (hdc=0x3b010252, type=0x7) returned 0x480500d1 [0029.239] GetCurrentObject (hdc=0x3b010252, type=0x6) returned 0x18a002e [0029.239] SaveDC (hdc=0x3b010252) returned 2 [0029.240] GetNearestColor (hdc=0x3b010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.240] CreateSolidBrush (color=0xf5f5f5) returned 0x2c100244 [0029.240] FillRect (hDC=0x3b010252, lprc=0x1ee560, hbr=0x2c100244) returned 1 [0029.240] DeleteObject (ho=0x2c100244) returned 1 [0029.240] RestoreDC (hdc=0x3b010252, nSavedDC=-1) returned 1 [0029.240] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.240] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.240] GetSystemMetrics (nIndex=42) returned 0 [0029.240] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee678, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.240] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee678) returned 0xb [0029.240] RestoreDC (hdc=0x3b010252, nSavedDC=-1) returned 1 [0029.240] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010252) returned 0x0 [0029.240] IsAppThemed () returned 0x1 [0029.240] GetThemeAppProperties () returned 0x3 [0029.240] GetThemeAppProperties () returned 0x3 [0029.240] IsAppThemed () returned 0x1 [0029.240] GetThemeAppProperties () returned 0x3 [0029.240] GetThemeAppProperties () returned 0x3 [0029.240] IsThemePartDefined () returned 0x1 [0029.240] GdipCreateRegion (region=0x1eea54) returned 0x0 [0029.240] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0029.240] GdipCreateMatrix (matrix=0x1eea54) returned 0x0 [0029.240] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0029.240] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1eea6c) returned 0x0 [0029.240] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.241] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0029.241] LocalFree (hMem=0x416cb8) returned 0x0 [0029.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.241] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0029.241] LocalFree (hMem=0x416cb8) returned 0x0 [0029.241] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0029.241] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1eea94) returned 0x0 [0029.241] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1eea84) returned 0x0 [0029.241] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1eea84) returned 0x0 [0029.241] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0029.241] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0029.241] GetCurrentObject (hdc=0x3b010252, type=0x1) returned 0x1b00017 [0029.241] GetCurrentObject (hdc=0x3b010252, type=0x2) returned 0x1900010 [0029.241] GetCurrentObject (hdc=0x3b010252, type=0x7) returned 0x480500d1 [0029.241] GetCurrentObject (hdc=0x3b010252, type=0x6) returned 0x18a002e [0029.241] SaveDC (hdc=0x3b010252) returned 1 [0029.241] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3004024a [0029.241] GetClipRgn (hdc=0x3b010252, hrgn=0x3004024a) returned 0 [0029.241] SelectClipRgn (hdc=0x3b010252, hrgn=0x44040813) returned 2 [0029.241] DeleteObject (ho=0x3004024a) returned 1 [0029.241] DeleteObject (ho=0x44040813) returned 1 [0029.241] OffsetViewportOrgEx (in: hdc=0x3b010252, x=0, y=0, lppt=0x2619bcc | out: lppt=0x2619bcc) returned 1 [0029.241] IsAppThemed () returned 0x1 [0029.241] GetThemeAppProperties () returned 0x3 [0029.242] GetThemeAppProperties () returned 0x3 [0029.242] DrawThemeBackground () returned 0x0 [0029.242] RestoreDC (hdc=0x3b010252, nSavedDC=-1) returned 1 [0029.242] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010252) returned 0x0 [0029.242] GdipCreateRegion (region=0x1eea3c) returned 0x0 [0029.242] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0029.242] GdipCreateMatrix (matrix=0x1eea3c) returned 0x0 [0029.242] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.242] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eea54) returned 0x0 [0029.242] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.242] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.242] LocalFree (hMem=0x416cb8) returned 0x0 [0029.242] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.242] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.242] LocalFree (hMem=0x416cb8) returned 0x0 [0029.242] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.242] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1eea7c) returned 0x0 [0029.243] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1eea6c) returned 0x0 [0029.243] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1eea6c) returned 0x0 [0029.243] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0029.243] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea84) returned 0x0 [0029.243] GetCurrentObject (hdc=0x3b010252, type=0x1) returned 0x1b00017 [0029.243] GetCurrentObject (hdc=0x3b010252, type=0x2) returned 0x1900010 [0029.243] GetCurrentObject (hdc=0x3b010252, type=0x7) returned 0x480500d1 [0029.243] GetCurrentObject (hdc=0x3b010252, type=0x6) returned 0x18a002e [0029.243] SaveDC (hdc=0x3b010252) returned 1 [0029.243] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x45040813 [0029.243] GetClipRgn (hdc=0x3b010252, hrgn=0x45040813) returned 0 [0029.243] SelectClipRgn (hdc=0x3b010252, hrgn=0x3104024a) returned 2 [0029.243] DeleteObject (ho=0x45040813) returned 1 [0029.243] DeleteObject (ho=0x3104024a) returned 1 [0029.243] OffsetViewportOrgEx (in: hdc=0x3b010252, x=0, y=0, lppt=0x2619ea0 | out: lppt=0x2619ea0) returned 1 [0029.243] IsAppThemed () returned 0x1 [0029.243] GetThemeAppProperties () returned 0x3 [0029.243] GetThemeAppProperties () returned 0x3 [0029.243] GetThemeBackgroundContentRect () returned 0x0 [0029.244] RestoreDC (hdc=0x3b010252, nSavedDC=-1) returned 1 [0029.244] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010252) returned 0x0 [0029.244] IsAppThemed () returned 0x1 [0029.244] GetThemeAppProperties () returned 0x3 [0029.244] GetThemeAppProperties () returned 0x3 [0029.244] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1eebb4) returned 0x0 [0029.244] GdipGetDC (graphics=0x504fbc8, hdc=0x1eeba0) returned 0x0 [0029.244] GetCurrentObject (hdc=0x3b010252, type=0x1) returned 0x1b00017 [0029.244] GetCurrentObject (hdc=0x3b010252, type=0x2) returned 0x1900010 [0029.244] GetCurrentObject (hdc=0x3b010252, type=0x7) returned 0x480500d1 [0029.244] GetCurrentObject (hdc=0x3b010252, type=0x6) returned 0x18a002e [0029.244] SaveDC (hdc=0x3b010252) returned 1 [0029.244] GetTextAlign (hdc=0x3b010252) returned 0x0 [0029.245] GetTextColor (hdc=0x3b010252) returned 0x0 [0029.245] GetCurrentObject (hdc=0x3b010252, type=0x6) returned 0x18a002e [0029.245] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8a8 | out: pv=0x1ee8a8) returned 92 [0029.245] SelectObject (hdc=0x3b010252, h=0x220a081a) returned 0x18a002e [0029.245] GetBkMode (hdc=0x3b010252) returned 2 [0029.245] SetBkMode (hdc=0x3b010252, mode=1) returned 2 [0029.245] DrawTextExW (in: hdc=0x3b010252, lpchText="decrypt", cchText=7, lprc=0x1ee97c, format=0x102415, lpdtp=0x261a234 | out: lpchText="decrypt", lprc=0x1ee97c) returned 13 [0029.245] DrawTextExW (in: hdc=0x3b010252, lpchText="decrypt", cchText=7, lprc=0x1eeb34, format=0x102015, lpdtp=0x261a234 | out: lpchText="decrypt", lprc=0x1eeb34) returned 13 [0029.246] RestoreDC (hdc=0x3b010252, nSavedDC=-1) returned 1 [0029.246] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010252) returned 0x0 [0029.246] GetFocus () returned 0x201d0 [0029.246] IsAppThemed () returned 0x1 [0029.246] GetThemeAppProperties () returned 0x3 [0029.246] GetThemeAppProperties () returned 0x3 [0029.246] GdipGetDC (graphics=0x504fbc8, hdc=0x1eed8c) returned 0x0 [0029.246] BitBlt (hdc=0x601084f, x=0, y=0, cx=231, cy=23, hdcSrc=0x3b010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.246] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010252) returned 0x0 [0029.246] SelectPalette (hdc=0x601084f, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.246] SelectObject (hdc=0x3b010252, h=0x185000f) returned 0x480500d1 [0029.246] DeleteDC (hdc=0x3b010252) returned 1 [0029.246] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0029.246] EndPaint (hWnd=0x201d0, lpPaint=0x1eed30) returned 1 [0029.246] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.246] IsWindowUnicode (hWnd=0x201d2) returned 1 [0029.246] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.246] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.247] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.247] BeginPaint (in: hWnd=0x201d2, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x160107c7 [0029.247] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.247] CreateCompatibleDC (hdc=0x160107c7) returned 0x3d010252 [0029.247] SelectObject (hdc=0x3d010252, h=0x480500d1) returned 0x185000f [0029.247] GdipCreateFromHDC (hdc=0x3d010252, graphics=0x1eed58) returned 0x0 [0029.247] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.247] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=106, height=16, combineMode=0x0) returned 0x0 [0029.247] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.247] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0029.247] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eedb8) returned 0x0 [0029.247] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.247] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0029.247] LocalFree (hMem=0x416cb8) returned 0x0 [0029.247] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0029.247] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.247] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.247] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eedac) returned 0x0 [0029.247] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eedd8) returned 0x0 [0029.247] GetWindowTextLengthW (hWnd=0x201d2) returned 16 [0029.247] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0029.247] GetSystemMetrics (nIndex=42) returned 0 [0029.248] GetWindowTextW (in: hWnd=0x201d2, lpString=0x1eecd0, nMaxCount=17 | out: lpString="Whats happening?") returned 16 [0029.248] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0xd, wParam=0x11, lParam=0x1eecd0) returned 0x10 [0029.248] GetClientRect (in: hWnd=0x201d2, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.248] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.248] GdipGetClip (graphics=0x504fbc8, region=0x50501c8) returned 0x0 [0029.248] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.248] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.248] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eec0c) returned 0x0 [0029.248] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.248] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.248] LocalFree (hMem=0x416cb8) returned 0x0 [0029.248] GdipCombineRegionRegion (region=0x50501c8, region2=0x504fed8, combineMode=0x1) returned 0x0 [0029.248] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.248] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.248] LocalFree (hMem=0x416cb8) returned 0x0 [0029.248] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.248] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec34) returned 0x0 [0029.248] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec24) returned 0x0 [0029.248] GdipGetRegionHRgn (region=0x50501c8, graphics=0x504fbc8, hRgn=0x1eec24) returned 0x0 [0029.248] GdipDeleteRegion (region=0x50501c8) returned 0x0 [0029.248] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec3c) returned 0x0 [0029.248] GetCurrentObject (hdc=0x3d010252, type=0x1) returned 0x1b00017 [0029.248] GetCurrentObject (hdc=0x3d010252, type=0x2) returned 0x1900010 [0029.249] GetCurrentObject (hdc=0x3d010252, type=0x7) returned 0x480500d1 [0029.249] GetCurrentObject (hdc=0x3d010252, type=0x6) returned 0x18a002e [0029.249] SaveDC (hdc=0x3d010252) returned 1 [0029.249] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3204024a [0029.249] GetClipRgn (hdc=0x3d010252, hrgn=0x3204024a) returned 0 [0029.249] SelectClipRgn (hdc=0x3d010252, hrgn=0x48040813) returned 2 [0029.249] DeleteObject (ho=0x3204024a) returned 1 [0029.249] DeleteObject (ho=0x48040813) returned 1 [0029.249] OffsetViewportOrgEx (in: hdc=0x3d010252, x=0, y=0, lppt=0x261a74c | out: lppt=0x261a74c) returned 1 [0029.249] GetNearestColor (hdc=0x3d010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.249] CreateSolidBrush (color=0xf5f5f5) returned 0x2d100244 [0029.249] FillRect (hDC=0x3d010252, lprc=0x1eec40, hbr=0x2d100244) returned 1 [0029.249] DeleteObject (ho=0x2d100244) returned 1 [0029.249] RestoreDC (hdc=0x3d010252, nSavedDC=-1) returned 1 [0029.249] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3d010252) returned 0x0 [0029.249] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd970dbd) returned 0x0 [0029.249] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.249] GetWindowTextLengthW (hWnd=0x201d2) returned 16 [0029.249] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0029.249] GetSystemMetrics (nIndex=42) returned 0 [0029.249] GetWindowTextW (in: hWnd=0x201d2, lpString=0x1eecd0, nMaxCount=17 | out: lpString="Whats happening?") returned 16 [0029.249] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201d2, Msg=0xd, wParam=0x11, lParam=0x1eecd0) returned 0x10 [0029.249] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec5c) returned 0x0 [0029.249] GetCurrentObject (hdc=0x3d010252, type=0x1) returned 0x1b00017 [0029.250] GetCurrentObject (hdc=0x3d010252, type=0x2) returned 0x1900010 [0029.250] GetCurrentObject (hdc=0x3d010252, type=0x7) returned 0x480500d1 [0029.250] GetCurrentObject (hdc=0x3d010252, type=0x6) returned 0x18a002e [0029.250] SaveDC (hdc=0x3d010252) returned 1 [0029.250] GetNearestColor (hdc=0x3d010252, color=0x0) returned 0x0 [0029.250] RestoreDC (hdc=0x3d010252, nSavedDC=-1) returned 1 [0029.250] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3d010252) returned 0x0 [0029.250] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.250] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.250] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x1eebfc, fWinIni=0x0 | out: pvParam=0x1eebfc) returned 1 [0029.250] SendMessageW (hWnd=0x301ba, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0029.250] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0029.250] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1eebfc) returned 0x0 [0029.250] GdipGetDC (graphics=0x504fbc8, hdc=0x1eebe8) returned 0x0 [0029.250] GetCurrentObject (hdc=0x3d010252, type=0x1) returned 0x1b00017 [0029.250] GetCurrentObject (hdc=0x3d010252, type=0x2) returned 0x1900010 [0029.250] GetCurrentObject (hdc=0x3d010252, type=0x7) returned 0x480500d1 [0029.250] GetCurrentObject (hdc=0x3d010252, type=0x6) returned 0x18a002e [0029.251] SaveDC (hdc=0x3d010252) returned 1 [0029.251] GetTextAlign (hdc=0x3d010252) returned 0x0 [0029.251] GetTextColor (hdc=0x3d010252) returned 0x0 [0029.251] GetCurrentObject (hdc=0x3d010252, type=0x6) returned 0x18a002e [0029.251] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.251] SelectObject (hdc=0x3d010252, h=0x290a01d6) returned 0x18a002e [0029.251] GetBkMode (hdc=0x3d010252) returned 2 [0029.251] SetBkMode (hdc=0x3d010252, mode=1) returned 2 [0029.251] DrawTextExW (in: hdc=0x3d010252, lpchText="Whats happening?", cchText=16, lprc=0x1eeb7c, format=0x100000, lpdtp=0x261ac04 | out: lpchText="Whats happening?", lprc=0x1eeb7c) returned 16 [0029.251] RestoreDC (hdc=0x3d010252, nSavedDC=-1) returned 1 [0029.251] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3d010252) returned 0x0 [0029.251] GdipGetDC (graphics=0x504fbc8, hdc=0x1eed98) returned 0x0 [0029.251] BitBlt (hdc=0x160107c7, x=0, y=0, cx=106, cy=16, hdcSrc=0x3d010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.251] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3d010252) returned 0x0 [0029.251] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.251] SelectObject (hdc=0x3d010252, h=0x185000f) returned 0x480500d1 [0029.251] DeleteDC (hdc=0x3d010252) returned 1 [0029.251] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0029.252] EndPaint (hWnd=0x201d2, lpPaint=0x1eed3c) returned 1 [0029.252] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.252] IsWindowUnicode (hWnd=0x201cc) returned 1 [0029.252] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.252] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.252] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.252] BeginPaint (in: hWnd=0x201cc, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x120107ec [0029.252] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.252] CreateCompatibleDC (hdc=0x120107ec) returned 0x3f010252 [0029.252] SelectObject (hdc=0x3f010252, h=0x480500d1) returned 0x185000f [0029.252] GdipCreateFromHDC (hdc=0x3f010252, graphics=0x1eed58) returned 0x0 [0029.252] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.252] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=154, height=16, combineMode=0x0) returned 0x0 [0029.252] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.252] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0029.252] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eedb8) returned 0x0 [0029.252] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.252] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0029.252] LocalFree (hMem=0x416cb8) returned 0x0 [0029.252] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0029.252] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.252] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.253] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eedac) returned 0x0 [0029.253] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eedd8) returned 0x0 [0029.253] GetWindowTextLengthW (hWnd=0x201cc) returned 27 [0029.253] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1b [0029.253] GetSystemMetrics (nIndex=42) returned 0 [0029.253] GetWindowTextW (in: hWnd=0x201cc, lpString=0x1eecbc, nMaxCount=28 | out: lpString="All devices on your network") returned 27 [0029.253] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0xd, wParam=0x1c, lParam=0x1eecbc) returned 0x1b [0029.253] GetClientRect (in: hWnd=0x201cc, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.253] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.253] GdipGetClip (graphics=0x504fbc8, region=0x50501c8) returned 0x0 [0029.253] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.253] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.253] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eec0c) returned 0x0 [0029.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.253] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.253] LocalFree (hMem=0x416cb8) returned 0x0 [0029.253] GdipCombineRegionRegion (region=0x50501c8, region2=0x504fed8, combineMode=0x1) returned 0x0 [0029.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.253] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.253] LocalFree (hMem=0x416cb8) returned 0x0 [0029.253] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.253] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec34) returned 0x0 [0029.253] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec24) returned 0x0 [0029.253] GdipGetRegionHRgn (region=0x50501c8, graphics=0x504fbc8, hRgn=0x1eec24) returned 0x0 [0029.253] GdipDeleteRegion (region=0x50501c8) returned 0x0 [0029.254] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec3c) returned 0x0 [0029.254] GetCurrentObject (hdc=0x3f010252, type=0x1) returned 0x1b00017 [0029.254] GetCurrentObject (hdc=0x3f010252, type=0x2) returned 0x1900010 [0029.254] GetCurrentObject (hdc=0x3f010252, type=0x7) returned 0x480500d1 [0029.254] GetCurrentObject (hdc=0x3f010252, type=0x6) returned 0x18a002e [0029.254] SaveDC (hdc=0x3f010252) returned 1 [0029.254] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x49040813 [0029.254] GetClipRgn (hdc=0x3f010252, hrgn=0x49040813) returned 0 [0029.254] SelectClipRgn (hdc=0x3f010252, hrgn=0x3404024a) returned 2 [0029.254] DeleteObject (ho=0x49040813) returned 1 [0029.254] DeleteObject (ho=0x3404024a) returned 1 [0029.254] OffsetViewportOrgEx (in: hdc=0x3f010252, x=0, y=0, lppt=0x261b098 | out: lppt=0x261b098) returned 1 [0029.254] GetNearestColor (hdc=0x3f010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.254] CreateSolidBrush (color=0xf5f5f5) returned 0x2e100244 [0029.254] FillRect (hDC=0x3f010252, lprc=0x1eec40, hbr=0x2e100244) returned 1 [0029.254] DeleteObject (ho=0x2e100244) returned 1 [0029.254] RestoreDC (hdc=0x3f010252, nSavedDC=-1) returned 1 [0029.255] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3f010252) returned 0x0 [0029.255] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd950dbd) returned 0x0 [0029.255] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.255] GetWindowTextLengthW (hWnd=0x201cc) returned 27 [0029.255] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1b [0029.255] GetSystemMetrics (nIndex=42) returned 0 [0029.255] GetWindowTextW (in: hWnd=0x201cc, lpString=0x1eecbc, nMaxCount=28 | out: lpString="All devices on your network") returned 27 [0029.255] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201cc, Msg=0xd, wParam=0x1c, lParam=0x1eecbc) returned 0x1b [0029.255] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec5c) returned 0x0 [0029.255] GetCurrentObject (hdc=0x3f010252, type=0x1) returned 0x1b00017 [0029.255] GetCurrentObject (hdc=0x3f010252, type=0x2) returned 0x1900010 [0029.255] GetCurrentObject (hdc=0x3f010252, type=0x7) returned 0x480500d1 [0029.255] GetCurrentObject (hdc=0x3f010252, type=0x6) returned 0x18a002e [0029.255] SaveDC (hdc=0x3f010252) returned 1 [0029.255] GetNearestColor (hdc=0x3f010252, color=0x0) returned 0x0 [0029.255] RestoreDC (hdc=0x3f010252, nSavedDC=-1) returned 1 [0029.255] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3f010252) returned 0x0 [0029.255] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.255] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.255] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x1eebfc, fWinIni=0x0 | out: pvParam=0x1eebfc) returned 1 [0029.256] SendMessageW (hWnd=0x301ba, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0029.256] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0029.256] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1eebfc) returned 0x0 [0029.256] GdipGetDC (graphics=0x504fbc8, hdc=0x1eebe8) returned 0x0 [0029.256] GetCurrentObject (hdc=0x3f010252, type=0x1) returned 0x1b00017 [0029.256] GetCurrentObject (hdc=0x3f010252, type=0x2) returned 0x1900010 [0029.256] GetCurrentObject (hdc=0x3f010252, type=0x7) returned 0x480500d1 [0029.256] GetCurrentObject (hdc=0x3f010252, type=0x6) returned 0x18a002e [0029.256] SaveDC (hdc=0x3f010252) returned 1 [0029.256] GetTextAlign (hdc=0x3f010252) returned 0x0 [0029.256] GetTextColor (hdc=0x3f010252) returned 0x0 [0029.256] GetCurrentObject (hdc=0x3f010252, type=0x6) returned 0x18a002e [0029.256] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.256] SelectObject (hdc=0x3f010252, h=0x290a01d6) returned 0x18a002e [0029.256] GetBkMode (hdc=0x3f010252) returned 2 [0029.256] SetBkMode (hdc=0x3f010252, mode=1) returned 2 [0029.256] DrawTextExW (in: hdc=0x3f010252, lpchText="All devices on your network", cchText=27, lprc=0x1eeb7c, format=0x100000, lpdtp=0x261b58c | out: lpchText="All devices on your network", lprc=0x1eeb7c) returned 16 [0029.256] RestoreDC (hdc=0x3f010252, nSavedDC=-1) returned 1 [0029.256] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3f010252) returned 0x0 [0029.257] GdipGetDC (graphics=0x504fbc8, hdc=0x1eed98) returned 0x0 [0029.257] BitBlt (hdc=0x120107ec, x=0, y=0, cx=154, cy=16, hdcSrc=0x3f010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.257] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3f010252) returned 0x0 [0029.257] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.257] SelectObject (hdc=0x3f010252, h=0x185000f) returned 0x480500d1 [0029.257] DeleteDC (hdc=0x3f010252) returned 1 [0029.257] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0029.257] EndPaint (hWnd=0x201cc, lpPaint=0x1eed3c) returned 1 [0029.257] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.257] IsWindowUnicode (hWnd=0x201ce) returned 1 [0029.257] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.257] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.257] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.257] BeginPaint (in: hWnd=0x201ce, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x601084f [0029.257] SelectPalette (hdc=0x601084f, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.257] CreateCompatibleDC (hdc=0x601084f) returned 0x41010252 [0029.257] SelectObject (hdc=0x41010252, h=0x480500d1) returned 0x185000f [0029.257] GdipCreateFromHDC (hdc=0x41010252, graphics=0x1eed58) returned 0x0 [0029.257] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.258] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=154, height=16, combineMode=0x0) returned 0x0 [0029.258] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.258] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0029.258] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eedb8) returned 0x0 [0029.258] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.258] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0029.258] LocalFree (hMem=0x416cb8) returned 0x0 [0029.258] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0029.258] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.258] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.258] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eedac) returned 0x0 [0029.258] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eedd8) returned 0x0 [0029.258] GetWindowTextLengthW (hWnd=0x201ce) returned 25 [0029.258] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0029.258] GetSystemMetrics (nIndex=42) returned 0 [0029.258] GetWindowTextW (in: hWnd=0x201ce, lpString=0x1eecc0, nMaxCount=26 | out: lpString="encrypted with ransomware") returned 25 [0029.258] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0xd, wParam=0x1a, lParam=0x1eecc0) returned 0x19 [0029.258] GetClientRect (in: hWnd=0x201ce, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.258] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.258] GdipGetClip (graphics=0x504fbc8, region=0x50501c8) returned 0x0 [0029.258] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.258] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.258] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eec0c) returned 0x0 [0029.259] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.259] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.259] LocalFree (hMem=0x416cb8) returned 0x0 [0029.259] GdipCombineRegionRegion (region=0x50501c8, region2=0x504fed8, combineMode=0x1) returned 0x0 [0029.259] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.259] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.259] LocalFree (hMem=0x416cb8) returned 0x0 [0029.259] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.259] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec34) returned 0x0 [0029.259] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec24) returned 0x0 [0029.259] GdipGetRegionHRgn (region=0x50501c8, graphics=0x504fbc8, hRgn=0x1eec24) returned 0x0 [0029.259] GdipDeleteRegion (region=0x50501c8) returned 0x0 [0029.259] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec3c) returned 0x0 [0029.259] GetCurrentObject (hdc=0x41010252, type=0x1) returned 0x1b00017 [0029.259] GetCurrentObject (hdc=0x41010252, type=0x2) returned 0x1900010 [0029.259] GetCurrentObject (hdc=0x41010252, type=0x7) returned 0x480500d1 [0029.259] GetCurrentObject (hdc=0x41010252, type=0x6) returned 0x18a002e [0029.259] SaveDC (hdc=0x41010252) returned 1 [0029.259] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3504024a [0029.259] GetClipRgn (hdc=0x41010252, hrgn=0x3504024a) returned 0 [0029.259] SelectClipRgn (hdc=0x41010252, hrgn=0x4b040813) returned 2 [0029.259] DeleteObject (ho=0x3504024a) returned 1 [0029.260] DeleteObject (ho=0x4b040813) returned 1 [0029.260] OffsetViewportOrgEx (in: hdc=0x41010252, x=0, y=0, lppt=0x261ba14 | out: lppt=0x261ba14) returned 1 [0029.260] GetNearestColor (hdc=0x41010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.260] CreateSolidBrush (color=0xf5f5f5) returned 0x2f100244 [0029.260] FillRect (hDC=0x41010252, lprc=0x1eec40, hbr=0x2f100244) returned 1 [0029.260] DeleteObject (ho=0x2f100244) returned 1 [0029.260] RestoreDC (hdc=0x41010252, nSavedDC=-1) returned 1 [0029.260] GdipReleaseDC (graphics=0x504fbc8, hdc=0x41010252) returned 0x0 [0029.260] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd930dbd) returned 0x0 [0029.260] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.260] GetWindowTextLengthW (hWnd=0x201ce) returned 25 [0029.260] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0029.260] GetSystemMetrics (nIndex=42) returned 0 [0029.260] GetWindowTextW (in: hWnd=0x201ce, lpString=0x1eecc0, nMaxCount=26 | out: lpString="encrypted with ransomware") returned 25 [0029.260] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201ce, Msg=0xd, wParam=0x1a, lParam=0x1eecc0) returned 0x19 [0029.260] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec5c) returned 0x0 [0029.260] GetCurrentObject (hdc=0x41010252, type=0x1) returned 0x1b00017 [0029.260] GetCurrentObject (hdc=0x41010252, type=0x2) returned 0x1900010 [0029.260] GetCurrentObject (hdc=0x41010252, type=0x7) returned 0x480500d1 [0029.260] GetCurrentObject (hdc=0x41010252, type=0x6) returned 0x18a002e [0029.260] SaveDC (hdc=0x41010252) returned 1 [0029.261] GetNearestColor (hdc=0x41010252, color=0x0) returned 0x0 [0029.261] RestoreDC (hdc=0x41010252, nSavedDC=-1) returned 1 [0029.261] GdipReleaseDC (graphics=0x504fbc8, hdc=0x41010252) returned 0x0 [0029.261] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.261] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.261] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x1eebfc, fWinIni=0x0 | out: pvParam=0x1eebfc) returned 1 [0029.261] SendMessageW (hWnd=0x301ba, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0029.261] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0029.261] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1eebfc) returned 0x0 [0029.261] GdipGetDC (graphics=0x504fbc8, hdc=0x1eebe8) returned 0x0 [0029.261] GetCurrentObject (hdc=0x41010252, type=0x1) returned 0x1b00017 [0029.261] GetCurrentObject (hdc=0x41010252, type=0x2) returned 0x1900010 [0029.261] GetCurrentObject (hdc=0x41010252, type=0x7) returned 0x480500d1 [0029.261] GetCurrentObject (hdc=0x41010252, type=0x6) returned 0x18a002e [0029.261] SaveDC (hdc=0x41010252) returned 1 [0029.261] GetTextAlign (hdc=0x41010252) returned 0x0 [0029.261] GetTextColor (hdc=0x41010252) returned 0x0 [0029.261] GetCurrentObject (hdc=0x41010252, type=0x6) returned 0x18a002e [0029.261] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.261] SelectObject (hdc=0x41010252, h=0x290a01d6) returned 0x18a002e [0029.262] GetBkMode (hdc=0x41010252) returned 2 [0029.262] SetBkMode (hdc=0x41010252, mode=1) returned 2 [0029.262] DrawTextExW (in: hdc=0x41010252, lpchText="encrypted with ransomware", cchText=25, lprc=0x1eeb7c, format=0x100000, lpdtp=0x261befc | out: lpchText="encrypted with ransomware", lprc=0x1eeb7c) returned 16 [0029.262] RestoreDC (hdc=0x41010252, nSavedDC=-1) returned 1 [0029.262] GdipReleaseDC (graphics=0x504fbc8, hdc=0x41010252) returned 0x0 [0029.262] GdipGetDC (graphics=0x504fbc8, hdc=0x1eed98) returned 0x0 [0029.262] BitBlt (hdc=0x601084f, x=0, y=0, cx=154, cy=16, hdcSrc=0x41010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.262] GdipReleaseDC (graphics=0x504fbc8, hdc=0x41010252) returned 0x0 [0029.262] SelectPalette (hdc=0x601084f, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.262] SelectObject (hdc=0x41010252, h=0x185000f) returned 0x480500d1 [0029.262] DeleteDC (hdc=0x41010252) returned 1 [0029.262] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0029.262] EndPaint (hWnd=0x201ce, lpPaint=0x1eed3c) returned 1 [0029.262] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.262] IsWindowUnicode (hWnd=0x201c8) returned 1 [0029.262] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.262] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.262] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.262] BeginPaint (in: hWnd=0x201c8, lpPaint=0x1eed40 | out: lpPaint=0x1eed40) returned 0x160107c7 [0029.262] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.263] CreateCompatibleDC (hdc=0x160107c7) returned 0x43010252 [0029.263] SelectObject (hdc=0x43010252, h=0x480500d1) returned 0x185000f [0029.263] GdipCreateFromHDC (hdc=0x43010252, graphics=0x1eed58) returned 0x0 [0029.263] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.263] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=206, height=16, combineMode=0x0) returned 0x0 [0029.263] GdipCreateMatrix (matrix=0x1eeda0) returned 0x0 [0029.263] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0029.263] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eedb8) returned 0x0 [0029.263] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0029.263] LocalFree (hMem=0x416cb8) returned 0x0 [0029.263] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0029.263] GdipCreateRegion (region=0x1eeda0) returned 0x0 [0029.263] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.263] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eedac) returned 0x0 [0029.263] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eedd8) returned 0x0 [0029.263] GetWindowTextLengthW (hWnd=0x201c8) returned 38 [0029.263] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x26 [0029.263] GetSystemMetrics (nIndex=42) returned 0 [0029.263] GetWindowTextW (in: hWnd=0x201c8, lpString=0x1eeca4, nMaxCount=39 | out: lpString="All of your computers files have been ") returned 38 [0029.263] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0xd, wParam=0x27, lParam=0x1eeca4) returned 0x26 [0029.263] GetClientRect (in: hWnd=0x201c8, lpRect=0x1eeda0 | out: lpRect=0x1eeda0) returned 1 [0029.263] GdipCreateRegion (region=0x1eebf4) returned 0x0 [0029.263] GdipGetClip (graphics=0x504fbc8, region=0x50501c8) returned 0x0 [0029.264] GdipCreateMatrix (matrix=0x1eebf4) returned 0x0 [0029.264] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.264] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eec0c) returned 0x0 [0029.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.264] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.264] LocalFree (hMem=0x416cb8) returned 0x0 [0029.264] GdipCombineRegionRegion (region=0x50501c8, region2=0x504fed8, combineMode=0x1) returned 0x0 [0029.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.264] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.264] LocalFree (hMem=0x416cb8) returned 0x0 [0029.264] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.264] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec34) returned 0x0 [0029.264] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec24) returned 0x0 [0029.264] GdipGetRegionHRgn (region=0x50501c8, graphics=0x504fbc8, hRgn=0x1eec24) returned 0x0 [0029.264] GdipDeleteRegion (region=0x50501c8) returned 0x0 [0029.264] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec3c) returned 0x0 [0029.264] GetCurrentObject (hdc=0x43010252, type=0x1) returned 0x1b00017 [0029.264] GetCurrentObject (hdc=0x43010252, type=0x2) returned 0x1900010 [0029.264] GetCurrentObject (hdc=0x43010252, type=0x7) returned 0x480500d1 [0029.264] GetCurrentObject (hdc=0x43010252, type=0x6) returned 0x18a002e [0029.264] SaveDC (hdc=0x43010252) returned 1 [0029.264] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c040813 [0029.264] GetClipRgn (hdc=0x43010252, hrgn=0x4c040813) returned 0 [0029.265] SelectClipRgn (hdc=0x43010252, hrgn=0x3704024a) returned 2 [0029.265] DeleteObject (ho=0x4c040813) returned 1 [0029.265] DeleteObject (ho=0x3704024a) returned 1 [0029.265] OffsetViewportOrgEx (in: hdc=0x43010252, x=0, y=0, lppt=0x261c3d8 | out: lppt=0x261c3d8) returned 1 [0029.265] GetNearestColor (hdc=0x43010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.265] CreateSolidBrush (color=0xf5f5f5) returned 0x30100244 [0029.265] FillRect (hDC=0x43010252, lprc=0x1eec40, hbr=0x30100244) returned 1 [0029.265] DeleteObject (ho=0x30100244) returned 1 [0029.265] RestoreDC (hdc=0x43010252, nSavedDC=-1) returned 1 [0029.265] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010252) returned 0x0 [0029.265] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd910dbd) returned 0x0 [0029.265] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.265] GetWindowTextLengthW (hWnd=0x201c8) returned 38 [0029.265] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x26 [0029.265] GetSystemMetrics (nIndex=42) returned 0 [0029.265] GetWindowTextW (in: hWnd=0x201c8, lpString=0x1eeca4, nMaxCount=39 | out: lpString="All of your computers files have been ") returned 38 [0029.265] CallWindowProcW (lpPrevWndFunc=0x73cfb8c9, hWnd=0x201c8, Msg=0xd, wParam=0x27, lParam=0x1eeca4) returned 0x26 [0029.265] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec5c) returned 0x0 [0029.265] GetCurrentObject (hdc=0x43010252, type=0x1) returned 0x1b00017 [0029.265] GetCurrentObject (hdc=0x43010252, type=0x2) returned 0x1900010 [0029.265] GetCurrentObject (hdc=0x43010252, type=0x7) returned 0x480500d1 [0029.265] GetCurrentObject (hdc=0x43010252, type=0x6) returned 0x18a002e [0029.266] SaveDC (hdc=0x43010252) returned 1 [0029.266] GetNearestColor (hdc=0x43010252, color=0x0) returned 0x0 [0029.266] RestoreDC (hdc=0x43010252, nSavedDC=-1) returned 1 [0029.266] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010252) returned 0x0 [0029.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73ce0000 [0029.266] AdjustWindowRectEx (in: lpRect=0x1eeb80, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1eeb80) returned 1 [0029.266] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x1eebfc, fWinIni=0x0 | out: pvParam=0x1eebfc) returned 1 [0029.266] SendMessageW (hWnd=0x301ba, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0029.266] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0029.266] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1eebfc) returned 0x0 [0029.266] GdipGetDC (graphics=0x504fbc8, hdc=0x1eebe8) returned 0x0 [0029.266] GetCurrentObject (hdc=0x43010252, type=0x1) returned 0x1b00017 [0029.266] GetCurrentObject (hdc=0x43010252, type=0x2) returned 0x1900010 [0029.266] GetCurrentObject (hdc=0x43010252, type=0x7) returned 0x480500d1 [0029.266] GetCurrentObject (hdc=0x43010252, type=0x6) returned 0x18a002e [0029.266] SaveDC (hdc=0x43010252) returned 1 [0029.267] GetTextAlign (hdc=0x43010252) returned 0x0 [0029.267] GetTextColor (hdc=0x43010252) returned 0x0 [0029.267] GetCurrentObject (hdc=0x43010252, type=0x6) returned 0x18a002e [0029.267] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee8f0 | out: pv=0x1ee8f0) returned 92 [0029.267] SelectObject (hdc=0x43010252, h=0x290a01d6) returned 0x18a002e [0029.267] GetBkMode (hdc=0x43010252) returned 2 [0029.267] SetBkMode (hdc=0x43010252, mode=1) returned 2 [0029.267] DrawTextExW (in: hdc=0x43010252, lpchText="All of your computers files have been ", cchText=38, lprc=0x1eeb7c, format=0x100000, lpdtp=0x261c914 | out: lpchText="All of your computers files have been ", lprc=0x1eeb7c) returned 16 [0029.267] RestoreDC (hdc=0x43010252, nSavedDC=-1) returned 1 [0029.267] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010252) returned 0x0 [0029.267] GdipGetDC (graphics=0x504fbc8, hdc=0x1eed98) returned 0x0 [0029.267] BitBlt (hdc=0x160107c7, x=0, y=0, cx=206, cy=16, hdcSrc=0x43010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.267] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010252) returned 0x0 [0029.267] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.267] SelectObject (hdc=0x43010252, h=0x185000f) returned 0x480500d1 [0029.267] DeleteDC (hdc=0x43010252) returned 1 [0029.267] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0029.267] EndPaint (hWnd=0x201c8, lpPaint=0x1eed3c) returned 1 [0029.268] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.268] IsWindowUnicode (hWnd=0x201ca) returned 1 [0029.268] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.268] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.268] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.268] BeginPaint (in: hWnd=0x201ca, lpPaint=0x1eed7c | out: lpPaint=0x1eed7c) returned 0x120107ec [0029.268] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.268] CreateCompatibleDC (hdc=0x120107ec) returned 0x45010252 [0029.268] GetObjectType (h=0x120107ec) returned 0x3 [0029.268] CreateCompatibleBitmap (hdc=0x120107ec, cx=1, cy=1) returned 0x1d05082b [0029.268] GetDIBits (in: hdc=0x120107ec, hbm=0x1d05082b, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1ee82c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee82c) returned 1 [0029.268] GetDIBits (in: hdc=0x120107ec, hbm=0x1d05082b, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1ee82c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee82c) returned 1 [0029.268] DeleteObject (ho=0x1d05082b) returned 1 [0029.268] CreateDIBSection (in: hdc=0x120107ec, lpbmi=0x1ee87c, usage=0x0, ppvBits=0x1eed70, hSection=0x0, offset=0x0 | out: ppvBits=0x1eed70) returned 0x10050822 [0029.268] SelectObject (hdc=0x45010252, h=0x10050822) returned 0x185000f [0029.268] GdipCreateFromHDC (hdc=0x45010252, graphics=0x1eed54) returned 0x0 [0029.269] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.269] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=241, height=424, combineMode=0x0) returned 0x0 [0029.269] GdipCreateMatrix (matrix=0x1eeddc) returned 0x0 [0029.269] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0029.269] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eedf4) returned 0x0 [0029.269] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.269] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0029.269] LocalFree (hMem=0x416cb8) returned 0x0 [0029.269] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0029.269] GdipCreateRegion (region=0x1eeddc) returned 0x0 [0029.269] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.269] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eede8) returned 0x0 [0029.269] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eee14) returned 0x0 [0029.269] GetWindowTextLengthW (hWnd=0x201ca) returned 0 [0029.269] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.269] GetSystemMetrics (nIndex=42) returned 0 [0029.269] GetWindowTextW (in: hWnd=0x201ca, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.269] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.269] GetClientRect (in: hWnd=0x201ca, lpRect=0x1eeddc | out: lpRect=0x1eeddc) returned 1 [0029.269] GdipCreateRegion (region=0x1eec30) returned 0x0 [0029.269] GdipGetClip (graphics=0x504fbc8, region=0x50501c8) returned 0x0 [0029.270] GdipCreateMatrix (matrix=0x1eec30) returned 0x0 [0029.270] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.270] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eec48) returned 0x0 [0029.270] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.270] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.270] LocalFree (hMem=0x416cb8) returned 0x0 [0029.270] GdipCombineRegionRegion (region=0x50501c8, region2=0x504fed8, combineMode=0x1) returned 0x0 [0029.270] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.270] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.270] LocalFree (hMem=0x416cb8) returned 0x0 [0029.270] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.270] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec70) returned 0x0 [0029.270] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec60) returned 0x0 [0029.270] GdipGetRegionHRgn (region=0x50501c8, graphics=0x504fbc8, hRgn=0x1eec60) returned 0x0 [0029.270] GdipDeleteRegion (region=0x50501c8) returned 0x0 [0029.270] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec78) returned 0x0 [0029.270] GetCurrentObject (hdc=0x45010252, type=0x1) returned 0x1b00017 [0029.270] GetCurrentObject (hdc=0x45010252, type=0x2) returned 0x1900010 [0029.270] GetCurrentObject (hdc=0x45010252, type=0x7) returned 0x10050822 [0029.270] GetCurrentObject (hdc=0x45010252, type=0x6) returned 0x18a002e [0029.270] SaveDC (hdc=0x45010252) returned 1 [0029.270] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3804024a [0029.270] GetClipRgn (hdc=0x45010252, hrgn=0x3804024a) returned 0 [0029.270] SelectClipRgn (hdc=0x45010252, hrgn=0x4e040813) returned 2 [0029.271] DeleteObject (ho=0x3804024a) returned 1 [0029.271] DeleteObject (ho=0x4e040813) returned 1 [0029.271] OffsetViewportOrgEx (in: hdc=0x45010252, x=0, y=0, lppt=0x261dd48 | out: lppt=0x261dd48) returned 1 [0029.271] GetNearestColor (hdc=0x45010252, color=0xf5f5f5) returned 0xf5f5f5 [0029.271] CreateSolidBrush (color=0xf5f5f5) returned 0x31100244 [0029.271] FillRect (hDC=0x45010252, lprc=0x1eec7c, hbr=0x31100244) returned 1 [0029.273] DeleteObject (ho=0x31100244) returned 1 [0029.273] RestoreDC (hdc=0x45010252, nSavedDC=-1) returned 1 [0029.273] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010252) returned 0x0 [0029.273] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd8f0dbd) returned 0x0 [0029.273] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.273] GetWindowTextLengthW (hWnd=0x201ca) returned 0 [0029.273] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.273] GetSystemMetrics (nIndex=42) returned 0 [0029.273] GetWindowTextW (in: hWnd=0x201ca, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.273] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201ca, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.273] GdipGetImageWidth (image=0x4560810, width=0x1eecb0) returned 0x0 [0029.273] GdipGetImageHeight (image=0x4560810, height=0x1eecb0) returned 0x0 [0029.273] GdipDrawImageRectI (graphics=0x504fbc8, image=0x4560810, x=0, y=150, width=240, height=123) returned 0x0 [0029.276] GdipGetDC (graphics=0x504fbc8, hdc=0x1eedd4) returned 0x0 [0029.276] BitBlt (hdc=0x120107ec, x=0, y=0, cx=241, cy=424, hdcSrc=0x45010252, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.276] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010252) returned 0x0 [0029.276] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.276] SelectObject (hdc=0x45010252, h=0x185000f) returned 0x10050822 [0029.276] DeleteDC (hdc=0x45010252) returned 1 [0029.276] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0029.277] DeleteObject (ho=0x10050822) returned 1 [0029.277] EndPaint (hWnd=0x201ca, lpPaint=0x1eed78) returned 1 [0029.277] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.277] IsWindowUnicode (hWnd=0x201e2) returned 1 [0029.277] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.277] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.277] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.277] BeginPaint (in: hWnd=0x201e2, lpPaint=0x1eed7c | out: lpPaint=0x1eed7c) returned 0x160107c7 [0029.277] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.277] CreateCompatibleDC (hdc=0x160107c7) returned 0x2001082b [0029.277] DeleteObject (ho=0x480500d1) returned 1 [0029.277] GetObjectType (h=0x160107c7) returned 0x3 [0029.277] CreateCompatibleBitmap (hdc=0x160107c7, cx=1, cy=1) returned 0x30050265 [0029.277] GetDIBits (in: hdc=0x160107c7, hbm=0x30050265, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1ee86c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee86c) returned 1 [0029.277] GetDIBits (in: hdc=0x160107c7, hbm=0x30050265, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1ee86c, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ee86c) returned 1 [0029.277] DeleteObject (ho=0x30050265) returned 1 [0029.277] CreateDIBSection (in: hdc=0x160107c7, lpbmi=0x1ee8bc, usage=0x0, ppvBits=0x1eedb0, hSection=0x0, offset=0x0 | out: ppvBits=0x1eedb0) returned 0x490500d1 [0029.278] SelectObject (hdc=0x2001082b, h=0x490500d1) returned 0x185000f [0029.278] GdipCreateFromHDC (hdc=0x2001082b, graphics=0x1eed94) returned 0x0 [0029.278] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.278] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=132, height=115, combineMode=0x0) returned 0x0 [0029.278] GdipCreateMatrix (matrix=0x1eeddc) returned 0x0 [0029.278] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0029.278] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eedf4) returned 0x0 [0029.278] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.278] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0029.278] LocalFree (hMem=0x416cb8) returned 0x0 [0029.278] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0029.278] GdipCreateRegion (region=0x1eeddc) returned 0x0 [0029.278] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.278] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eede8) returned 0x0 [0029.278] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eee14) returned 0x0 [0029.278] GetWindowTextLengthW (hWnd=0x201e2) returned 0 [0029.278] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.278] GetSystemMetrics (nIndex=42) returned 0 [0029.278] GetWindowTextW (in: hWnd=0x201e2, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.278] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.278] GetClientRect (in: hWnd=0x201e2, lpRect=0x1eeddc | out: lpRect=0x1eeddc) returned 1 [0029.278] GdipCreateRegion (region=0x1eec30) returned 0x0 [0029.278] GdipGetClip (graphics=0x504fbc8, region=0x50501c8) returned 0x0 [0029.279] GdipCreateMatrix (matrix=0x1eec30) returned 0x0 [0029.279] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.279] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eec48) returned 0x0 [0029.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.279] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.279] LocalFree (hMem=0x416cb8) returned 0x0 [0029.279] GdipCombineRegionRegion (region=0x50501c8, region2=0x504fed8, combineMode=0x1) returned 0x0 [0029.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.279] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.279] LocalFree (hMem=0x416cb8) returned 0x0 [0029.279] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.279] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec70) returned 0x0 [0029.279] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec60) returned 0x0 [0029.279] GdipGetRegionHRgn (region=0x50501c8, graphics=0x504fbc8, hRgn=0x1eec60) returned 0x0 [0029.279] GdipDeleteRegion (region=0x50501c8) returned 0x0 [0029.279] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec78) returned 0x0 [0029.279] GetCurrentObject (hdc=0x2001082b, type=0x1) returned 0x1b00017 [0029.279] GetCurrentObject (hdc=0x2001082b, type=0x2) returned 0x1900010 [0029.279] GetCurrentObject (hdc=0x2001082b, type=0x7) returned 0x490500d1 [0029.279] GetCurrentObject (hdc=0x2001082b, type=0x6) returned 0x18a002e [0029.279] SaveDC (hdc=0x2001082b) returned 1 [0029.279] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f040813 [0029.279] GetClipRgn (hdc=0x2001082b, hrgn=0x4f040813) returned 0 [0029.279] SelectClipRgn (hdc=0x2001082b, hrgn=0x3904024a) returned 2 [0029.279] DeleteObject (ho=0x4f040813) returned 1 [0029.280] DeleteObject (ho=0x3904024a) returned 1 [0029.280] OffsetViewportOrgEx (in: hdc=0x2001082b, x=0, y=0, lppt=0x261f1a4 | out: lppt=0x261f1a4) returned 1 [0029.280] GetNearestColor (hdc=0x2001082b, color=0xf5f5f5) returned 0xf5f5f5 [0029.280] CreateSolidBrush (color=0xf5f5f5) returned 0x32100244 [0029.280] FillRect (hDC=0x2001082b, lprc=0x1eec7c, hbr=0x32100244) returned 1 [0029.280] DeleteObject (ho=0x32100244) returned 1 [0029.280] RestoreDC (hdc=0x2001082b, nSavedDC=-1) returned 1 [0029.281] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2001082b) returned 0x0 [0029.281] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd8d0dbd) returned 0x0 [0029.281] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.281] GetWindowTextLengthW (hWnd=0x201e2) returned 0 [0029.281] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.281] GetSystemMetrics (nIndex=42) returned 0 [0029.281] GetWindowTextW (in: hWnd=0x201e2, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.281] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e2, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.281] GdipGetImageWidth (image=0x5078df0, width=0x1eecb0) returned 0x0 [0029.281] GdipGetImageHeight (image=0x5078df0, height=0x1eecb0) returned 0x0 [0029.281] GdipDrawImageRectI (graphics=0x504fbc8, image=0x5078df0, x=13, y=0, width=106, height=115) returned 0x0 [0029.284] GdipGetDC (graphics=0x504fbc8, hdc=0x1eedd4) returned 0x0 [0029.284] BitBlt (hdc=0x160107c7, x=0, y=0, cx=132, cy=115, hdcSrc=0x2001082b, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.285] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2001082b) returned 0x0 [0029.285] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.285] SelectObject (hdc=0x2001082b, h=0x185000f) returned 0x490500d1 [0029.285] DeleteDC (hdc=0x2001082b) returned 1 [0029.285] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0029.285] EndPaint (hWnd=0x201e2, lpPaint=0x1eed78) returned 1 [0029.286] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.286] IsWindowUnicode (hWnd=0x201e4) returned 1 [0029.286] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.286] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.286] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.286] BeginPaint (in: hWnd=0x201e4, lpPaint=0x1eed7c | out: lpPaint=0x1eed7c) returned 0x120107ec [0029.286] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.286] CreateCompatibleDC (hdc=0x120107ec) returned 0x2201082b [0029.286] SelectObject (hdc=0x2201082b, h=0x490500d1) returned 0x185000f [0029.286] GdipCreateFromHDC (hdc=0x2201082b, graphics=0x1eed94) returned 0x0 [0029.286] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.286] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=116, height=115, combineMode=0x0) returned 0x0 [0029.286] GdipCreateMatrix (matrix=0x1eeddc) returned 0x0 [0029.286] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0029.286] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eedf4) returned 0x0 [0029.286] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.286] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0029.286] LocalFree (hMem=0x416cb8) returned 0x0 [0029.286] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0029.286] GdipCreateRegion (region=0x1eeddc) returned 0x0 [0029.286] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.286] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eede8) returned 0x0 [0029.287] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eee14) returned 0x0 [0029.287] GetWindowTextLengthW (hWnd=0x201e4) returned 0 [0029.287] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.287] GetSystemMetrics (nIndex=42) returned 0 [0029.287] GetWindowTextW (in: hWnd=0x201e4, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.287] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.287] GetClientRect (in: hWnd=0x201e4, lpRect=0x1eeddc | out: lpRect=0x1eeddc) returned 1 [0029.287] GdipCreateRegion (region=0x1eec30) returned 0x0 [0029.287] GdipGetClip (graphics=0x504fbc8, region=0x50501c8) returned 0x0 [0029.287] GdipCreateMatrix (matrix=0x1eec30) returned 0x0 [0029.287] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.287] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1eec48) returned 0x0 [0029.287] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.287] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.287] LocalFree (hMem=0x416cb8) returned 0x0 [0029.287] GdipCombineRegionRegion (region=0x50501c8, region2=0x504fed8, combineMode=0x1) returned 0x0 [0029.287] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.287] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.287] LocalFree (hMem=0x416cb8) returned 0x0 [0029.287] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.287] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec70) returned 0x0 [0029.287] GdipIsInfiniteRegion (region=0x50501c8, graphics=0x504fbc8, result=0x1eec60) returned 0x0 [0029.287] GdipGetRegionHRgn (region=0x50501c8, graphics=0x504fbc8, hRgn=0x1eec60) returned 0x0 [0029.287] GdipDeleteRegion (region=0x50501c8) returned 0x0 [0029.287] GdipGetDC (graphics=0x504fbc8, hdc=0x1eec78) returned 0x0 [0029.288] GetCurrentObject (hdc=0x2201082b, type=0x1) returned 0x1b00017 [0029.288] GetCurrentObject (hdc=0x2201082b, type=0x2) returned 0x1900010 [0029.288] GetCurrentObject (hdc=0x2201082b, type=0x7) returned 0x490500d1 [0029.288] GetCurrentObject (hdc=0x2201082b, type=0x6) returned 0x18a002e [0029.288] SaveDC (hdc=0x2201082b) returned 1 [0029.288] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a04024a [0029.288] GetClipRgn (hdc=0x2201082b, hrgn=0x3a04024a) returned 0 [0029.288] SelectClipRgn (hdc=0x2201082b, hrgn=0x50040813) returned 2 [0029.288] DeleteObject (ho=0x3a04024a) returned 1 [0029.288] DeleteObject (ho=0x50040813) returned 1 [0029.288] OffsetViewportOrgEx (in: hdc=0x2201082b, x=0, y=0, lppt=0x261f5d0 | out: lppt=0x261f5d0) returned 1 [0029.288] GetNearestColor (hdc=0x2201082b, color=0xf5f5f5) returned 0xf5f5f5 [0029.288] CreateSolidBrush (color=0xf5f5f5) returned 0x33100244 [0029.288] FillRect (hDC=0x2201082b, lprc=0x1eec7c, hbr=0x33100244) returned 1 [0029.288] DeleteObject (ho=0x33100244) returned 1 [0029.288] RestoreDC (hdc=0x2201082b, nSavedDC=-1) returned 1 [0029.288] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2201082b) returned 0x0 [0029.288] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd8b0dbd) returned 0x0 [0029.288] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.288] GetWindowTextLengthW (hWnd=0x201e4) returned 0 [0029.288] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.289] GetSystemMetrics (nIndex=42) returned 0 [0029.289] GetWindowTextW (in: hWnd=0x201e4, lpString=0x1eed2c, nMaxCount=1 | out: lpString="") returned 0 [0029.289] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x201e4, Msg=0xd, wParam=0x1, lParam=0x1eed2c) returned 0x0 [0029.289] GdipGetImageWidth (image=0x5079320, width=0x1eecb0) returned 0x0 [0029.289] GdipGetImageHeight (image=0x5079320, height=0x1eecb0) returned 0x0 [0029.289] GdipDrawImageRectI (graphics=0x504fbc8, image=0x5079320, x=0, y=0, width=115, height=115) returned 0x0 [0029.290] GdipGetDC (graphics=0x504fbc8, hdc=0x1eedd4) returned 0x0 [0029.290] BitBlt (hdc=0x120107ec, x=0, y=0, cx=116, cy=115, hdcSrc=0x2201082b, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.291] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2201082b) returned 0x0 [0029.291] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.291] SelectObject (hdc=0x2201082b, h=0x185000f) returned 0x490500d1 [0029.291] DeleteDC (hdc=0x2201082b) returned 1 [0029.291] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0029.291] EndPaint (hWnd=0x201e4, lpPaint=0x1eed78) returned 1 [0029.291] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.291] IsWindowUnicode (hWnd=0x201d0) returned 1 [0029.291] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.291] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.291] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.291] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.291] IsWindowUnicode (hWnd=0x201d0) returned 1 [0029.291] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.291] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.291] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.291] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x2a1, wParam=0x0, lParam=0xc004f) returned 0x0 [0029.291] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0029.292] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0029.334] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.509] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0029.511] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x46, wParam=0x0, lParam=0x1ef138) returned 0x0 [0029.511] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x46, wParam=0x0, lParam=0x1ef138) returned 0x0 [0029.511] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1eeee8 | out: lpwndpl=0x1eeee8) returned 1 [0029.511] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x47, wParam=0x0, lParam=0x1ef138) returned 0x0 [0029.511] GetClientRect (in: hWnd=0x301ba, lpRect=0x1eee98 | out: lpRect=0x1eee98) returned 1 [0029.511] GetWindowRect (in: hWnd=0x301ba, lpRect=0x1eee98 | out: lpRect=0x1eee98) returned 1 [0029.512] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x47, wParam=0x0, lParam=0x1ef138) returned 0x0 [0029.512] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0xd, wParam=0x104, lParam=0xdde908) returned 0x0 [0029.512] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x83, wParam=0x1, lParam=0x1eed1c) returned 0x0 [0029.513] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950396) returned 0x1 [0029.513] IsWindowUnicode (hWnd=0x201d0) returned 1 [0029.513] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.513] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950396) returned 0x1 [0029.513] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0029.513] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e40251) returned 0x0 [0029.513] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0029.513] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0029.513] SetCursor (hCursor=0x10003) returned 0x10003 [0029.513] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.513] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.521] GetKeyState (nVirtKey=1) returned -127 [0029.521] GetKeyState (nVirtKey=2) returned 0 [0029.522] GetKeyState (nVirtKey=4) returned 0 [0029.522] GetKeyState (nVirtKey=5) returned 0 [0029.522] GetKeyState (nVirtKey=6) returned 0 [0029.522] IsWindowVisible (hWnd=0x201d0) returned 1 [0029.522] IsWindowEnabled (hWnd=0x201d0) returned 1 [0029.522] SetFocus (hWnd=0x201d0) returned 0x201d0 [0029.522] GetFocus () returned 0x201d0 [0029.522] GetFocus () returned 0x201d0 [0029.522] GetFocus () returned 0x201d0 [0029.522] GetKeyState (nVirtKey=1) returned -127 [0029.522] GetKeyState (nVirtKey=2) returned 0 [0029.522] GetKeyState (nVirtKey=4) returned 0 [0029.522] GetKeyState (nVirtKey=5) returned 0 [0029.522] GetKeyState (nVirtKey=6) returned 0 [0029.522] SetCapture (hWnd=0x201d0) returned 0x0 [0029.523] GetKeyState (nVirtKey=1) returned -127 [0029.523] GetKeyState (nVirtKey=2) returned 0 [0029.523] GetKeyState (nVirtKey=4) returned 0 [0029.523] GetKeyState (nVirtKey=5) returned 0 [0029.523] GetKeyState (nVirtKey=6) returned 0 [0029.524] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0029.524] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0029.524] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.524] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.524] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.524] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0029.524] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.524] IsWindowUnicode (hWnd=0x201d0) returned 1 [0029.524] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.524] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.524] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.525] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x261f6e8, cPoints=0x1 | out: lpPoints=0x261f6e8) returned 42533703 [0029.526] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0029.526] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0029.526] UpdateWindow (hWnd=0x201d0) returned 1 [0029.526] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0029.526] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0029.526] CreateCompatibleDC (hdc=0x120107ec) returned 0x6010863 [0029.526] SelectObject (hdc=0x6010863, h=0x490500d1) returned 0x185000f [0029.526] GdipCreateFromHDC (hdc=0x6010863, graphics=0x1eea5c) returned 0x0 [0029.526] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0029.527] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0029.527] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0029.527] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0029.527] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0029.527] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.527] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0029.527] LocalFree (hMem=0x416cb8) returned 0x0 [0029.527] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0029.527] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0029.527] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.527] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0029.527] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0029.527] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd890dbd) returned 0x0 [0029.527] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.527] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0029.527] GetCurrentObject (hdc=0x6010863, type=0x1) returned 0x1b00017 [0029.527] GetCurrentObject (hdc=0x6010863, type=0x2) returned 0x1900010 [0029.527] GetCurrentObject (hdc=0x6010863, type=0x7) returned 0x490500d1 [0029.527] GetCurrentObject (hdc=0x6010863, type=0x6) returned 0x18a002e [0029.527] SaveDC (hdc=0x6010863) returned 1 [0029.528] GetNearestColor (hdc=0x6010863, color=0xf5f5f5) returned 0xf5f5f5 [0029.528] GetNearestColor (hdc=0x6010863, color=0x515151) returned 0x515151 [0029.528] GetNearestColor (hdc=0x6010863, color=0x0) returned 0x0 [0029.528] GetNearestColor (hdc=0x6010863, color=0x515151) returned 0x515151 [0029.528] GetNearestColor (hdc=0x6010863, color=0x0) returned 0x0 [0029.528] GetNearestColor (hdc=0x6010863, color=0xfafafa) returned 0xfafafa [0029.528] GetNearestColor (hdc=0x6010863, color=0xe0e0e0) returned 0xe0e0e0 [0029.528] GetNearestColor (hdc=0x6010863, color=0xdcdcdc) returned 0xdcdcdc [0029.528] GetNearestColor (hdc=0x6010863, color=0x0) returned 0x0 [0029.528] RestoreDC (hdc=0x6010863, nSavedDC=-1) returned 1 [0029.528] GdipReleaseDC (graphics=0x504fbc8, hdc=0x6010863) returned 0x0 [0029.528] IsAppThemed () returned 0x1 [0029.528] GetThemeAppProperties () returned 0x3 [0029.528] GetThemeAppProperties () returned 0x3 [0029.528] IsAppThemed () returned 0x1 [0029.528] GetThemeAppProperties () returned 0x3 [0029.528] GetThemeAppProperties () returned 0x3 [0029.528] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x261fdec | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0029.528] IsAppThemed () returned 0x1 [0029.528] GetThemeAppProperties () returned 0x3 [0029.528] GetThemeAppProperties () returned 0x3 [0029.528] IsAppThemed () returned 0x1 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] IsAppThemed () returned 0x1 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] IsAppThemed () returned 0x1 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] IsThemePartDefined () returned 0x1 [0029.529] IsAppThemed () returned 0x1 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0029.529] IsAppThemed () returned 0x1 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] IsAppThemed () returned 0x1 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] GetThemeAppProperties () returned 0x3 [0029.529] IsThemePartDefined () returned 0x1 [0029.529] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0029.529] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0029.529] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0029.529] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.529] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0029.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.529] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.529] LocalFree (hMem=0x416cb8) returned 0x0 [0029.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.529] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.529] LocalFree (hMem=0x416cb8) returned 0x0 [0029.529] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.530] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0029.530] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0029.530] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0029.530] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0029.530] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0029.530] GetCurrentObject (hdc=0x6010863, type=0x1) returned 0x1b00017 [0029.530] GetCurrentObject (hdc=0x6010863, type=0x2) returned 0x1900010 [0029.530] GetCurrentObject (hdc=0x6010863, type=0x7) returned 0x490500d1 [0029.530] GetCurrentObject (hdc=0x6010863, type=0x6) returned 0x18a002e [0029.530] SaveDC (hdc=0x6010863) returned 1 [0029.530] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x52040813 [0029.530] GetClipRgn (hdc=0x6010863, hrgn=0x52040813) returned 0 [0029.530] SelectClipRgn (hdc=0x6010863, hrgn=0x36040246) returned 2 [0029.530] DeleteObject (ho=0x52040813) returned 1 [0029.530] DeleteObject (ho=0x36040246) returned 1 [0029.530] OffsetViewportOrgEx (in: hdc=0x6010863, x=0, y=0, lppt=0x262049c | out: lppt=0x262049c) returned 1 [0029.530] DrawThemeParentBackground () returned 0x0 [0029.530] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0029.530] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0029.530] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.530] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.530] GetSystemMetrics (nIndex=42) returned 0 [0029.531] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.531] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0029.531] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0029.531] GetCurrentObject (hdc=0x6010863, type=0x1) returned 0x1b00017 [0029.531] GetCurrentObject (hdc=0x6010863, type=0x2) returned 0x1900010 [0029.531] GetCurrentObject (hdc=0x6010863, type=0x7) returned 0x490500d1 [0029.531] GetCurrentObject (hdc=0x6010863, type=0x6) returned 0x18a002e [0029.531] SaveDC (hdc=0x6010863) returned 2 [0029.531] GetNearestColor (hdc=0x6010863, color=0xf5f5f5) returned 0xf5f5f5 [0029.531] CreateSolidBrush (color=0xf5f5f5) returned 0x34100244 [0029.531] FillRect (hDC=0x6010863, lprc=0x1ee2d0, hbr=0x34100244) returned 1 [0029.531] DeleteObject (ho=0x34100244) returned 1 [0029.531] RestoreDC (hdc=0x6010863, nSavedDC=-1) returned 1 [0029.531] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.531] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.531] GetSystemMetrics (nIndex=42) returned 0 [0029.531] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.531] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0029.531] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0029.531] GetCurrentObject (hdc=0x6010863, type=0x1) returned 0x1b00017 [0029.531] GetCurrentObject (hdc=0x6010863, type=0x2) returned 0x1900010 [0029.532] GetCurrentObject (hdc=0x6010863, type=0x7) returned 0x490500d1 [0029.532] GetCurrentObject (hdc=0x6010863, type=0x6) returned 0x18a002e [0029.532] SaveDC (hdc=0x6010863) returned 2 [0029.532] GetNearestColor (hdc=0x6010863, color=0xf5f5f5) returned 0xf5f5f5 [0029.532] CreateSolidBrush (color=0xf5f5f5) returned 0x35100244 [0029.532] FillRect (hDC=0x6010863, lprc=0x1ee270, hbr=0x35100244) returned 1 [0029.532] DeleteObject (ho=0x35100244) returned 1 [0029.532] RestoreDC (hdc=0x6010863, nSavedDC=-1) returned 1 [0029.532] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0029.532] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.532] GetSystemMetrics (nIndex=42) returned 0 [0029.532] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0029.532] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0029.532] RestoreDC (hdc=0x6010863, nSavedDC=-1) returned 1 [0029.532] GdipReleaseDC (graphics=0x504fbc8, hdc=0x6010863) returned 0x0 [0029.532] IsAppThemed () returned 0x1 [0029.532] GetThemeAppProperties () returned 0x3 [0029.532] GetThemeAppProperties () returned 0x3 [0029.532] IsAppThemed () returned 0x1 [0029.532] GetThemeAppProperties () returned 0x3 [0029.532] GetThemeAppProperties () returned 0x3 [0029.532] IsThemePartDefined () returned 0x1 [0029.532] GdipCreateRegion (region=0x1ee764) returned 0x0 [0029.532] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0029.533] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0029.533] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0029.533] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0029.533] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.533] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0029.533] LocalFree (hMem=0x416cb8) returned 0x0 [0029.533] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.533] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0029.533] LocalFree (hMem=0x416cb8) returned 0x0 [0029.533] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0029.533] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0029.533] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0029.533] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0029.533] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0029.533] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0029.533] GetCurrentObject (hdc=0x6010863, type=0x1) returned 0x1b00017 [0029.533] GetCurrentObject (hdc=0x6010863, type=0x2) returned 0x1900010 [0029.533] GetCurrentObject (hdc=0x6010863, type=0x7) returned 0x490500d1 [0029.533] GetCurrentObject (hdc=0x6010863, type=0x6) returned 0x18a002e [0029.533] SaveDC (hdc=0x6010863) returned 1 [0029.533] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x37040246 [0029.533] GetClipRgn (hdc=0x6010863, hrgn=0x37040246) returned 0 [0029.533] SelectClipRgn (hdc=0x6010863, hrgn=0x54040813) returned 2 [0029.534] DeleteObject (ho=0x37040246) returned 1 [0029.534] DeleteObject (ho=0x54040813) returned 1 [0029.534] OffsetViewportOrgEx (in: hdc=0x6010863, x=0, y=0, lppt=0x2620cdc | out: lppt=0x2620cdc) returned 1 [0029.534] IsAppThemed () returned 0x1 [0029.534] GetThemeAppProperties () returned 0x3 [0029.534] GetThemeAppProperties () returned 0x3 [0029.534] DrawThemeBackground () returned 0x0 [0029.534] RestoreDC (hdc=0x6010863, nSavedDC=-1) returned 1 [0029.534] GdipReleaseDC (graphics=0x504fbc8, hdc=0x6010863) returned 0x0 [0029.534] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0029.534] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0029.534] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0029.534] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0029.534] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0029.534] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.534] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.534] LocalFree (hMem=0x416cb8) returned 0x0 [0029.534] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0029.534] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0029.534] LocalFree (hMem=0x416cb8) returned 0x0 [0029.534] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0029.534] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0029.534] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0029.534] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0029.535] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0029.535] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0029.535] GetCurrentObject (hdc=0x6010863, type=0x1) returned 0x1b00017 [0029.535] GetCurrentObject (hdc=0x6010863, type=0x2) returned 0x1900010 [0029.535] GetCurrentObject (hdc=0x6010863, type=0x7) returned 0x490500d1 [0029.535] GetCurrentObject (hdc=0x6010863, type=0x6) returned 0x18a002e [0029.535] SaveDC (hdc=0x6010863) returned 1 [0029.535] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x55040813 [0029.535] GetClipRgn (hdc=0x6010863, hrgn=0x55040813) returned 0 [0029.535] SelectClipRgn (hdc=0x6010863, hrgn=0x38040246) returned 2 [0029.535] DeleteObject (ho=0x55040813) returned 1 [0029.535] DeleteObject (ho=0x38040246) returned 1 [0029.535] OffsetViewportOrgEx (in: hdc=0x6010863, x=0, y=0, lppt=0x2620fb0 | out: lppt=0x2620fb0) returned 1 [0029.535] IsAppThemed () returned 0x1 [0029.535] GetThemeAppProperties () returned 0x3 [0029.535] GetThemeAppProperties () returned 0x3 [0029.535] GetThemeBackgroundContentRect () returned 0x0 [0029.535] RestoreDC (hdc=0x6010863, nSavedDC=-1) returned 1 [0029.535] GdipReleaseDC (graphics=0x504fbc8, hdc=0x6010863) returned 0x0 [0029.535] IsAppThemed () returned 0x1 [0029.535] GetThemeAppProperties () returned 0x3 [0029.535] GetThemeAppProperties () returned 0x3 [0029.535] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0029.535] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0029.535] GetCurrentObject (hdc=0x6010863, type=0x1) returned 0x1b00017 [0029.536] GetCurrentObject (hdc=0x6010863, type=0x2) returned 0x1900010 [0029.536] GetCurrentObject (hdc=0x6010863, type=0x7) returned 0x490500d1 [0029.536] GetCurrentObject (hdc=0x6010863, type=0x6) returned 0x18a002e [0029.536] SaveDC (hdc=0x6010863) returned 1 [0029.536] GetTextAlign (hdc=0x6010863) returned 0x0 [0029.536] GetTextColor (hdc=0x6010863) returned 0x0 [0029.536] GetCurrentObject (hdc=0x6010863, type=0x6) returned 0x18a002e [0029.536] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0029.536] SelectObject (hdc=0x6010863, h=0x220a081a) returned 0x18a002e [0029.536] GetBkMode (hdc=0x6010863) returned 2 [0029.536] SetBkMode (hdc=0x6010863, mode=1) returned 2 [0029.536] DrawTextExW (in: hdc=0x6010863, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2621344 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0029.536] DrawTextExW (in: hdc=0x6010863, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2621344 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0029.536] RestoreDC (hdc=0x6010863, nSavedDC=-1) returned 1 [0029.536] GdipReleaseDC (graphics=0x504fbc8, hdc=0x6010863) returned 0x0 [0029.536] GetFocus () returned 0x201d0 [0029.537] IsAppThemed () returned 0x1 [0029.537] GetThemeAppProperties () returned 0x3 [0029.537] GetThemeAppProperties () returned 0x3 [0029.537] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0029.537] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x6010863, x1=0, y1=0, rop=0xcc0020) returned 1 [0029.537] GdipReleaseDC (graphics=0x504fbc8, hdc=0x6010863) returned 0x0 [0029.537] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0029.537] SelectObject (hdc=0x6010863, h=0x185000f) returned 0x490500d1 [0029.537] DeleteDC (hdc=0x6010863) returned 1 [0029.537] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0029.537] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0029.537] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2621440, cPoints=0x1 | out: lpPoints=0x2621440) returned 42533703 [0029.539] WindowFromPoint (Point=0x396) returned 0x201d0 [0029.539] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950396) returned 0x1 [0029.540] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0029.540] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0029.548] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0029.548] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.548] GetSystemMetrics (nIndex=42) returned 0 [0029.548] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0029.548] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0029.590] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0029.590] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0029.590] GetCapture () returned 0x201d0 [0029.590] ReleaseCapture () returned 1 [0029.590] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0029.591] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.591] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950396) returned 0x1 [0029.591] IsWindowUnicode (hWnd=0x201d0) returned 1 [0029.591] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.591] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950396) returned 0x1 [0029.591] SetCursor (hCursor=0x10003) returned 0x10003 [0029.591] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.591] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.591] GetKeyState (nVirtKey=1) returned 1 [0029.591] GetKeyState (nVirtKey=2) returned 0 [0029.591] GetKeyState (nVirtKey=4) returned 0 [0029.591] GetKeyState (nVirtKey=5) returned 0 [0029.591] GetKeyState (nVirtKey=6) returned 0 [0029.591] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.591] IsWindowUnicode (hWnd=0x201c4) returned 1 [0029.591] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.591] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.591] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.591] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0029.591] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0029.591] WaitMessage () returned 1 [0029.613] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.613] IsWindowUnicode (hWnd=0x201e6) returned 1 [0029.613] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0029.613] TranslateMessage (lpMsg=0x1ef250) returned 0 [0029.613] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0029.613] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0029.613] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0029.613] WaitMessage () returned 1 [0032.126] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0032.128] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103af) returned 0x1 [0032.128] IsWindowUnicode (hWnd=0x201d0) returned 1 [0032.128] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0032.128] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103af) returned 0x1 [0032.129] SetCursor (hCursor=0x10003) returned 0x10003 [0032.129] TranslateMessage (lpMsg=0x1ef250) returned 0 [0032.129] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0032.129] GetKeyState (nVirtKey=1) returned 1 [0032.129] GetKeyState (nVirtKey=2) returned 0 [0032.129] GetKeyState (nVirtKey=4) returned 0 [0032.129] GetKeyState (nVirtKey=5) returned 0 [0032.129] GetKeyState (nVirtKey=6) returned 0 [0032.129] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0032.129] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0032.129] WaitMessage () returned 1 [0032.203] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0032.203] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103af) returned 0x1 [0032.203] IsWindowUnicode (hWnd=0x201d0) returned 1 [0032.203] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0032.203] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103af) returned 0x1 [0032.204] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0032.204] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e0026a) returned 0x0 [0032.204] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0032.204] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0032.204] SetCursor (hCursor=0x10003) returned 0x10003 [0032.204] TranslateMessage (lpMsg=0x1ef250) returned 0 [0032.205] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0032.205] GetKeyState (nVirtKey=1) returned -128 [0032.205] GetKeyState (nVirtKey=2) returned 0 [0032.205] GetKeyState (nVirtKey=4) returned 0 [0032.205] GetKeyState (nVirtKey=5) returned 0 [0032.205] GetKeyState (nVirtKey=6) returned 0 [0032.205] IsWindowVisible (hWnd=0x201d0) returned 1 [0032.205] IsWindowEnabled (hWnd=0x201d0) returned 1 [0032.205] SetFocus (hWnd=0x201d0) returned 0x201d0 [0032.205] GetFocus () returned 0x201d0 [0032.205] GetFocus () returned 0x201d0 [0032.205] GetFocus () returned 0x201d0 [0032.205] GetKeyState (nVirtKey=1) returned -128 [0032.205] GetKeyState (nVirtKey=2) returned 0 [0032.205] GetKeyState (nVirtKey=4) returned 0 [0032.205] GetKeyState (nVirtKey=5) returned 0 [0032.205] GetKeyState (nVirtKey=6) returned 0 [0032.205] GetCapture () returned 0x0 [0032.205] SetCapture (hWnd=0x201d0) returned 0x0 [0032.205] GetKeyState (nVirtKey=1) returned -128 [0032.205] GetKeyState (nVirtKey=2) returned 0 [0032.205] GetKeyState (nVirtKey=4) returned 0 [0032.205] GetKeyState (nVirtKey=5) returned 0 [0032.205] GetKeyState (nVirtKey=6) returned 0 [0032.206] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0032.206] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0032.206] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0032.206] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0032.206] TranslateMessage (lpMsg=0x1ef250) returned 0 [0032.206] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0032.206] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0032.206] IsWindowUnicode (hWnd=0x201d0) returned 1 [0032.206] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0032.206] TranslateMessage (lpMsg=0x1ef250) returned 0 [0032.206] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0032.206] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2621628, cPoints=0x1 | out: lpPoints=0x2621628) returned 42533703 [0032.206] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0032.206] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0032.206] UpdateWindow (hWnd=0x201d0) returned 1 [0032.207] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0032.207] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0032.207] CreateCompatibleDC (hdc=0x160107c7) returned 0x2a01084a [0032.207] SelectObject (hdc=0x2a01084a, h=0x490500d1) returned 0x185000f [0032.207] GdipCreateFromHDC (hdc=0x2a01084a, graphics=0x1eea5c) returned 0x0 [0032.208] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0032.208] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0032.208] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0032.208] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0032.208] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0032.208] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0032.208] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0032.209] LocalFree (hMem=0x416cb8) returned 0x0 [0032.209] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0032.209] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0032.209] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0032.209] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0032.209] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0032.209] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd870dbd) returned 0x0 [0032.209] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0032.209] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0032.210] GetCurrentObject (hdc=0x2a01084a, type=0x1) returned 0x1b00017 [0032.210] GetCurrentObject (hdc=0x2a01084a, type=0x2) returned 0x1900010 [0032.210] GetCurrentObject (hdc=0x2a01084a, type=0x7) returned 0x490500d1 [0032.210] GetCurrentObject (hdc=0x2a01084a, type=0x6) returned 0x18a002e [0032.210] SaveDC (hdc=0x2a01084a) returned 1 [0032.210] GetNearestColor (hdc=0x2a01084a, color=0xf5f5f5) returned 0xf5f5f5 [0032.210] GetNearestColor (hdc=0x2a01084a, color=0x515151) returned 0x515151 [0032.210] GetNearestColor (hdc=0x2a01084a, color=0x0) returned 0x0 [0032.210] GetNearestColor (hdc=0x2a01084a, color=0x515151) returned 0x515151 [0032.210] GetNearestColor (hdc=0x2a01084a, color=0x0) returned 0x0 [0032.210] GetNearestColor (hdc=0x2a01084a, color=0xfafafa) returned 0xfafafa [0032.210] GetNearestColor (hdc=0x2a01084a, color=0xe0e0e0) returned 0xe0e0e0 [0032.210] GetNearestColor (hdc=0x2a01084a, color=0xdcdcdc) returned 0xdcdcdc [0032.210] GetNearestColor (hdc=0x2a01084a, color=0x0) returned 0x0 [0032.210] RestoreDC (hdc=0x2a01084a, nSavedDC=-1) returned 1 [0032.211] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a01084a) returned 0x0 [0032.211] IsAppThemed () returned 0x1 [0032.211] GetThemeAppProperties () returned 0x3 [0032.211] GetThemeAppProperties () returned 0x3 [0032.211] IsAppThemed () returned 0x1 [0032.211] GetThemeAppProperties () returned 0x3 [0032.211] GetThemeAppProperties () returned 0x3 [0032.211] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2621d2c | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0032.211] IsAppThemed () returned 0x1 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] IsAppThemed () returned 0x1 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] IsAppThemed () returned 0x1 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] IsAppThemed () returned 0x1 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] IsThemePartDefined () returned 0x1 [0032.212] IsAppThemed () returned 0x1 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0032.212] IsAppThemed () returned 0x1 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] IsAppThemed () returned 0x1 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] GetThemeAppProperties () returned 0x3 [0032.212] IsThemePartDefined () returned 0x1 [0032.212] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0032.212] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0032.212] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0032.212] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0032.212] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0032.212] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0032.212] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0032.213] LocalFree (hMem=0x416cb8) returned 0x0 [0032.213] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0032.213] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0032.213] LocalFree (hMem=0x416cb8) returned 0x0 [0032.213] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0032.213] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0032.213] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0032.213] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0032.213] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0032.213] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0032.213] GetCurrentObject (hdc=0x2a01084a, type=0x1) returned 0x1b00017 [0032.213] GetCurrentObject (hdc=0x2a01084a, type=0x2) returned 0x1900010 [0032.213] GetCurrentObject (hdc=0x2a01084a, type=0x7) returned 0x490500d1 [0032.213] GetCurrentObject (hdc=0x2a01084a, type=0x6) returned 0x18a002e [0032.213] SaveDC (hdc=0x2a01084a) returned 1 [0032.213] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x39040246 [0032.213] GetClipRgn (hdc=0x2a01084a, hrgn=0x39040246) returned 0 [0032.213] SelectClipRgn (hdc=0x2a01084a, hrgn=0x59040813) returned 2 [0032.213] DeleteObject (ho=0x39040246) returned 1 [0032.213] DeleteObject (ho=0x59040813) returned 1 [0032.213] OffsetViewportOrgEx (in: hdc=0x2a01084a, x=0, y=0, lppt=0x26223dc | out: lppt=0x26223dc) returned 1 [0032.214] DrawThemeParentBackground () returned 0x0 [0032.214] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0032.214] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0032.214] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0032.214] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0032.214] GetSystemMetrics (nIndex=42) returned 0 [0032.214] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0032.214] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0032.214] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0032.214] GetCurrentObject (hdc=0x2a01084a, type=0x1) returned 0x1b00017 [0032.214] GetCurrentObject (hdc=0x2a01084a, type=0x2) returned 0x1900010 [0032.214] GetCurrentObject (hdc=0x2a01084a, type=0x7) returned 0x490500d1 [0032.214] GetCurrentObject (hdc=0x2a01084a, type=0x6) returned 0x18a002e [0032.214] SaveDC (hdc=0x2a01084a) returned 2 [0032.214] GetNearestColor (hdc=0x2a01084a, color=0xf5f5f5) returned 0xf5f5f5 [0032.214] CreateSolidBrush (color=0xf5f5f5) returned 0x36100244 [0032.214] FillRect (hDC=0x2a01084a, lprc=0x1ee2d0, hbr=0x36100244) returned 1 [0032.215] DeleteObject (ho=0x36100244) returned 1 [0032.215] RestoreDC (hdc=0x2a01084a, nSavedDC=-1) returned 1 [0032.215] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0032.215] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0032.215] GetSystemMetrics (nIndex=42) returned 0 [0032.215] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0032.215] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0032.215] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0032.215] GetCurrentObject (hdc=0x2a01084a, type=0x1) returned 0x1b00017 [0032.215] GetCurrentObject (hdc=0x2a01084a, type=0x2) returned 0x1900010 [0032.215] GetCurrentObject (hdc=0x2a01084a, type=0x7) returned 0x490500d1 [0032.215] GetCurrentObject (hdc=0x2a01084a, type=0x6) returned 0x18a002e [0032.215] SaveDC (hdc=0x2a01084a) returned 2 [0032.215] GetNearestColor (hdc=0x2a01084a, color=0xf5f5f5) returned 0xf5f5f5 [0032.215] CreateSolidBrush (color=0xf5f5f5) returned 0x37100244 [0032.215] FillRect (hDC=0x2a01084a, lprc=0x1ee270, hbr=0x37100244) returned 1 [0032.215] DeleteObject (ho=0x37100244) returned 1 [0032.215] RestoreDC (hdc=0x2a01084a, nSavedDC=-1) returned 1 [0032.215] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0032.216] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0032.216] GetSystemMetrics (nIndex=42) returned 0 [0032.216] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0032.216] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0032.216] RestoreDC (hdc=0x2a01084a, nSavedDC=-1) returned 1 [0032.216] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a01084a) returned 0x0 [0032.216] IsAppThemed () returned 0x1 [0032.216] GetThemeAppProperties () returned 0x3 [0032.216] GetThemeAppProperties () returned 0x3 [0032.216] IsAppThemed () returned 0x1 [0032.216] GetThemeAppProperties () returned 0x3 [0032.216] GetThemeAppProperties () returned 0x3 [0032.216] IsThemePartDefined () returned 0x1 [0032.216] GdipCreateRegion (region=0x1ee764) returned 0x0 [0032.216] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0032.216] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0032.216] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0032.216] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0032.216] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0032.216] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0032.216] LocalFree (hMem=0x416cb8) returned 0x0 [0032.216] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0032.216] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0032.216] LocalFree (hMem=0x416cb8) returned 0x0 [0032.217] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0032.217] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0032.217] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0032.217] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0032.217] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0032.217] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0032.217] GetCurrentObject (hdc=0x2a01084a, type=0x1) returned 0x1b00017 [0032.217] GetCurrentObject (hdc=0x2a01084a, type=0x2) returned 0x1900010 [0032.217] GetCurrentObject (hdc=0x2a01084a, type=0x7) returned 0x490500d1 [0032.217] GetCurrentObject (hdc=0x2a01084a, type=0x6) returned 0x18a002e [0032.217] SaveDC (hdc=0x2a01084a) returned 1 [0032.217] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a040813 [0032.217] GetClipRgn (hdc=0x2a01084a, hrgn=0x5a040813) returned 0 [0032.217] SelectClipRgn (hdc=0x2a01084a, hrgn=0x3b040246) returned 2 [0032.217] DeleteObject (ho=0x5a040813) returned 1 [0032.217] DeleteObject (ho=0x3b040246) returned 1 [0032.217] OffsetViewportOrgEx (in: hdc=0x2a01084a, x=0, y=0, lppt=0x2622c1c | out: lppt=0x2622c1c) returned 1 [0032.217] IsAppThemed () returned 0x1 [0032.217] GetThemeAppProperties () returned 0x3 [0032.217] GetThemeAppProperties () returned 0x3 [0032.217] DrawThemeBackground () returned 0x0 [0032.217] RestoreDC (hdc=0x2a01084a, nSavedDC=-1) returned 1 [0032.217] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a01084a) returned 0x0 [0032.218] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0032.218] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0032.218] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0032.218] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0032.218] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0032.218] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0032.218] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0032.218] LocalFree (hMem=0x416cb8) returned 0x0 [0032.218] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0032.218] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0032.218] LocalFree (hMem=0x416cb8) returned 0x0 [0032.218] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0032.218] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0032.218] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0032.218] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0032.218] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0032.218] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0032.218] GetCurrentObject (hdc=0x2a01084a, type=0x1) returned 0x1b00017 [0032.218] GetCurrentObject (hdc=0x2a01084a, type=0x2) returned 0x1900010 [0032.218] GetCurrentObject (hdc=0x2a01084a, type=0x7) returned 0x490500d1 [0032.218] GetCurrentObject (hdc=0x2a01084a, type=0x6) returned 0x18a002e [0032.218] SaveDC (hdc=0x2a01084a) returned 1 [0032.218] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3c040246 [0032.219] GetClipRgn (hdc=0x2a01084a, hrgn=0x3c040246) returned 0 [0032.219] SelectClipRgn (hdc=0x2a01084a, hrgn=0x5b040813) returned 2 [0032.219] DeleteObject (ho=0x3c040246) returned 1 [0032.219] DeleteObject (ho=0x5b040813) returned 1 [0032.219] OffsetViewportOrgEx (in: hdc=0x2a01084a, x=0, y=0, lppt=0x2622ef0 | out: lppt=0x2622ef0) returned 1 [0032.219] IsAppThemed () returned 0x1 [0032.219] GetThemeAppProperties () returned 0x3 [0032.219] GetThemeAppProperties () returned 0x3 [0032.219] GetThemeBackgroundContentRect () returned 0x0 [0032.219] RestoreDC (hdc=0x2a01084a, nSavedDC=-1) returned 1 [0032.219] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a01084a) returned 0x0 [0032.219] IsAppThemed () returned 0x1 [0032.219] GetThemeAppProperties () returned 0x3 [0032.219] GetThemeAppProperties () returned 0x3 [0032.219] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0032.219] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0032.219] GetCurrentObject (hdc=0x2a01084a, type=0x1) returned 0x1b00017 [0032.219] GetCurrentObject (hdc=0x2a01084a, type=0x2) returned 0x1900010 [0032.219] GetCurrentObject (hdc=0x2a01084a, type=0x7) returned 0x490500d1 [0032.219] GetCurrentObject (hdc=0x2a01084a, type=0x6) returned 0x18a002e [0032.219] SaveDC (hdc=0x2a01084a) returned 1 [0032.219] GetTextAlign (hdc=0x2a01084a) returned 0x0 [0032.219] GetTextColor (hdc=0x2a01084a) returned 0x0 [0032.220] GetCurrentObject (hdc=0x2a01084a, type=0x6) returned 0x18a002e [0032.220] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0032.220] SelectObject (hdc=0x2a01084a, h=0x220a081a) returned 0x18a002e [0032.220] GetBkMode (hdc=0x2a01084a) returned 2 [0032.220] SetBkMode (hdc=0x2a01084a, mode=1) returned 2 [0032.220] DrawTextExW (in: hdc=0x2a01084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2623284 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0032.220] DrawTextExW (in: hdc=0x2a01084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2623284 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0032.220] RestoreDC (hdc=0x2a01084a, nSavedDC=-1) returned 1 [0032.220] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a01084a) returned 0x0 [0032.220] GetFocus () returned 0x201d0 [0032.220] IsAppThemed () returned 0x1 [0032.220] GetThemeAppProperties () returned 0x3 [0032.220] GetThemeAppProperties () returned 0x3 [0032.220] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0032.221] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x2a01084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0032.221] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a01084a) returned 0x0 [0032.221] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0032.221] SelectObject (hdc=0x2a01084a, h=0x185000f) returned 0x490500d1 [0032.221] DeleteDC (hdc=0x2a01084a) returned 1 [0032.221] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0032.221] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0032.221] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2623380, cPoints=0x1 | out: lpPoints=0x2623380) returned 42533703 [0032.221] WindowFromPoint (Point=0x3af) returned 0x201d0 [0032.221] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103af) returned 0x1 [0032.221] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0032.221] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0032.221] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0032.221] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0032.221] GetSystemMetrics (nIndex=42) returned 0 [0032.221] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0032.222] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0032.222] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0032.222] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0032.222] GetCapture () returned 0x201d0 [0032.222] ReleaseCapture () returned 1 [0032.222] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0032.222] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0032.222] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103af) returned 0x1 [0032.222] IsWindowUnicode (hWnd=0x201d0) returned 1 [0032.222] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0032.222] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103af) returned 0x1 [0032.222] SetCursor (hCursor=0x10003) returned 0x10003 [0032.222] TranslateMessage (lpMsg=0x1ef250) returned 0 [0032.222] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0032.222] GetKeyState (nVirtKey=1) returned 0 [0032.222] GetKeyState (nVirtKey=2) returned 0 [0032.222] GetKeyState (nVirtKey=4) returned 0 [0032.222] GetKeyState (nVirtKey=5) returned 0 [0032.222] GetKeyState (nVirtKey=6) returned 0 [0032.222] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0032.223] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0032.223] WaitMessage () returned 1 [0035.200] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0035.200] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03cf) returned 0x1 [0035.200] IsWindowUnicode (hWnd=0x201d0) returned 1 [0035.200] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0035.200] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03cf) returned 0x1 [0035.200] SetCursor (hCursor=0x10003) returned 0x10003 [0035.200] TranslateMessage (lpMsg=0x1ef250) returned 0 [0035.200] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0035.200] GetKeyState (nVirtKey=1) returned 0 [0035.200] GetKeyState (nVirtKey=2) returned 0 [0035.200] GetKeyState (nVirtKey=4) returned 0 [0035.200] GetKeyState (nVirtKey=5) returned 0 [0035.200] GetKeyState (nVirtKey=6) returned 0 [0035.200] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0035.200] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0035.200] WaitMessage () returned 1 [0035.287] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0035.288] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03cf) returned 0x1 [0035.288] IsWindowUnicode (hWnd=0x201d0) returned 1 [0035.288] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0035.288] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03cf) returned 0x1 [0035.288] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0035.288] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dc028a) returned 0x0 [0035.288] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0035.288] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0035.288] SetCursor (hCursor=0x10003) returned 0x10003 [0035.288] TranslateMessage (lpMsg=0x1ef250) returned 0 [0035.288] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0035.288] GetKeyState (nVirtKey=1) returned -127 [0035.288] GetKeyState (nVirtKey=2) returned 0 [0035.288] GetKeyState (nVirtKey=4) returned 0 [0035.288] GetKeyState (nVirtKey=5) returned 0 [0035.288] GetKeyState (nVirtKey=6) returned 0 [0035.288] IsWindowVisible (hWnd=0x201d0) returned 1 [0035.288] IsWindowEnabled (hWnd=0x201d0) returned 1 [0035.289] SetFocus (hWnd=0x201d0) returned 0x201d0 [0035.289] GetFocus () returned 0x201d0 [0035.289] GetFocus () returned 0x201d0 [0035.289] GetFocus () returned 0x201d0 [0035.289] GetKeyState (nVirtKey=1) returned -127 [0035.289] GetKeyState (nVirtKey=2) returned 0 [0035.289] GetKeyState (nVirtKey=4) returned 0 [0035.289] GetKeyState (nVirtKey=5) returned 0 [0035.289] GetKeyState (nVirtKey=6) returned 0 [0035.289] GetCapture () returned 0x0 [0035.289] SetCapture (hWnd=0x201d0) returned 0x0 [0035.289] GetKeyState (nVirtKey=1) returned -127 [0035.289] GetKeyState (nVirtKey=2) returned 0 [0035.289] GetKeyState (nVirtKey=4) returned 0 [0035.289] GetKeyState (nVirtKey=5) returned 0 [0035.289] GetKeyState (nVirtKey=6) returned 0 [0035.289] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0035.289] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0035.289] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0035.289] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0035.289] TranslateMessage (lpMsg=0x1ef250) returned 0 [0035.289] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0035.289] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0035.289] IsWindowUnicode (hWnd=0x201d0) returned 1 [0035.289] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0035.289] TranslateMessage (lpMsg=0x1ef250) returned 0 [0035.289] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0035.289] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26234a4, cPoints=0x1 | out: lpPoints=0x26234a4) returned 42533703 [0035.289] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0035.289] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0035.289] UpdateWindow (hWnd=0x201d0) returned 1 [0035.290] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0035.290] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0035.290] CreateCompatibleDC (hdc=0x160107c7) returned 0x2b01084a [0035.290] SelectObject (hdc=0x2b01084a, h=0x490500d1) returned 0x185000f [0035.290] GdipCreateFromHDC (hdc=0x2b01084a, graphics=0x1eea5c) returned 0x0 [0035.290] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0035.290] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0035.290] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0035.290] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0035.290] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0035.290] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0035.290] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0035.291] LocalFree (hMem=0x416cb8) returned 0x0 [0035.291] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0035.291] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0035.291] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0035.291] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0035.291] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0035.291] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd850dbd) returned 0x0 [0035.291] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0035.291] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0035.291] GetCurrentObject (hdc=0x2b01084a, type=0x1) returned 0x1b00017 [0035.291] GetCurrentObject (hdc=0x2b01084a, type=0x2) returned 0x1900010 [0035.291] GetCurrentObject (hdc=0x2b01084a, type=0x7) returned 0x490500d1 [0035.291] GetCurrentObject (hdc=0x2b01084a, type=0x6) returned 0x18a002e [0035.291] SaveDC (hdc=0x2b01084a) returned 1 [0035.292] GetNearestColor (hdc=0x2b01084a, color=0xf5f5f5) returned 0xf5f5f5 [0035.292] GetNearestColor (hdc=0x2b01084a, color=0x515151) returned 0x515151 [0035.292] GetNearestColor (hdc=0x2b01084a, color=0x0) returned 0x0 [0035.292] GetNearestColor (hdc=0x2b01084a, color=0x515151) returned 0x515151 [0035.292] GetNearestColor (hdc=0x2b01084a, color=0x0) returned 0x0 [0035.292] GetNearestColor (hdc=0x2b01084a, color=0xfafafa) returned 0xfafafa [0035.292] GetNearestColor (hdc=0x2b01084a, color=0xe0e0e0) returned 0xe0e0e0 [0035.292] GetNearestColor (hdc=0x2b01084a, color=0xdcdcdc) returned 0xdcdcdc [0035.292] GetNearestColor (hdc=0x2b01084a, color=0x0) returned 0x0 [0035.292] RestoreDC (hdc=0x2b01084a, nSavedDC=-1) returned 1 [0035.292] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b01084a) returned 0x0 [0035.292] IsAppThemed () returned 0x1 [0035.292] GetThemeAppProperties () returned 0x3 [0035.292] GetThemeAppProperties () returned 0x3 [0035.292] IsAppThemed () returned 0x1 [0035.292] GetThemeAppProperties () returned 0x3 [0035.292] GetThemeAppProperties () returned 0x3 [0035.292] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2623ba8 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0035.293] IsAppThemed () returned 0x1 [0035.293] GetThemeAppProperties () returned 0x3 [0035.293] GetThemeAppProperties () returned 0x3 [0035.293] IsAppThemed () returned 0x1 [0035.293] GetThemeAppProperties () returned 0x3 [0035.293] GetThemeAppProperties () returned 0x3 [0035.293] IsAppThemed () returned 0x1 [0035.293] GetThemeAppProperties () returned 0x3 [0035.293] GetThemeAppProperties () returned 0x3 [0035.293] IsAppThemed () returned 0x1 [0035.293] GetThemeAppProperties () returned 0x3 [0035.293] GetThemeAppProperties () returned 0x3 [0035.293] IsThemePartDefined () returned 0x1 [0035.293] IsAppThemed () returned 0x1 [0035.293] GetThemeAppProperties () returned 0x3 [0035.293] GetThemeAppProperties () returned 0x3 [0035.293] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0035.293] IsAppThemed () returned 0x1 [0035.293] GetThemeAppProperties () returned 0x3 [0035.294] GetThemeAppProperties () returned 0x3 [0035.294] IsAppThemed () returned 0x1 [0035.294] GetThemeAppProperties () returned 0x3 [0035.294] GetThemeAppProperties () returned 0x3 [0035.294] IsThemePartDefined () returned 0x1 [0035.294] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0035.294] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0035.294] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0035.294] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0035.294] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0035.294] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0035.294] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0035.294] LocalFree (hMem=0x416cb8) returned 0x0 [0035.294] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0035.294] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0035.294] LocalFree (hMem=0x416cb8) returned 0x0 [0035.294] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0035.294] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0035.294] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0035.294] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0035.294] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0035.294] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0035.294] GetCurrentObject (hdc=0x2b01084a, type=0x1) returned 0x1b00017 [0035.294] GetCurrentObject (hdc=0x2b01084a, type=0x2) returned 0x1900010 [0035.294] GetCurrentObject (hdc=0x2b01084a, type=0x7) returned 0x490500d1 [0035.294] GetCurrentObject (hdc=0x2b01084a, type=0x6) returned 0x18a002e [0035.294] SaveDC (hdc=0x2b01084a) returned 1 [0035.295] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c040813 [0035.295] GetClipRgn (hdc=0x2b01084a, hrgn=0x5c040813) returned 0 [0035.295] SelectClipRgn (hdc=0x2b01084a, hrgn=0x40040246) returned 2 [0035.295] DeleteObject (ho=0x5c040813) returned 1 [0035.295] DeleteObject (ho=0x40040246) returned 1 [0035.295] OffsetViewportOrgEx (in: hdc=0x2b01084a, x=0, y=0, lppt=0x2624258 | out: lppt=0x2624258) returned 1 [0035.295] DrawThemeParentBackground () returned 0x0 [0035.295] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0035.295] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0035.295] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0035.295] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0035.295] GetSystemMetrics (nIndex=42) returned 0 [0035.295] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0035.295] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0035.295] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0035.295] GetCurrentObject (hdc=0x2b01084a, type=0x1) returned 0x1b00017 [0035.295] GetCurrentObject (hdc=0x2b01084a, type=0x2) returned 0x1900010 [0035.295] GetCurrentObject (hdc=0x2b01084a, type=0x7) returned 0x490500d1 [0035.295] GetCurrentObject (hdc=0x2b01084a, type=0x6) returned 0x18a002e [0035.295] SaveDC (hdc=0x2b01084a) returned 2 [0035.296] GetNearestColor (hdc=0x2b01084a, color=0xf5f5f5) returned 0xf5f5f5 [0035.296] CreateSolidBrush (color=0xf5f5f5) returned 0x38100244 [0035.296] FillRect (hDC=0x2b01084a, lprc=0x1ee2d0, hbr=0x38100244) returned 1 [0035.296] DeleteObject (ho=0x38100244) returned 1 [0035.296] RestoreDC (hdc=0x2b01084a, nSavedDC=-1) returned 1 [0035.296] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0035.296] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0035.296] GetSystemMetrics (nIndex=42) returned 0 [0035.296] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0035.296] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0035.296] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0035.296] GetCurrentObject (hdc=0x2b01084a, type=0x1) returned 0x1b00017 [0035.296] GetCurrentObject (hdc=0x2b01084a, type=0x2) returned 0x1900010 [0035.296] GetCurrentObject (hdc=0x2b01084a, type=0x7) returned 0x490500d1 [0035.296] GetCurrentObject (hdc=0x2b01084a, type=0x6) returned 0x18a002e [0035.296] SaveDC (hdc=0x2b01084a) returned 2 [0035.296] GetNearestColor (hdc=0x2b01084a, color=0xf5f5f5) returned 0xf5f5f5 [0035.296] CreateSolidBrush (color=0xf5f5f5) returned 0x39100244 [0035.296] FillRect (hDC=0x2b01084a, lprc=0x1ee270, hbr=0x39100244) returned 1 [0035.296] DeleteObject (ho=0x39100244) returned 1 [0035.297] RestoreDC (hdc=0x2b01084a, nSavedDC=-1) returned 1 [0035.297] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0035.297] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0035.297] GetSystemMetrics (nIndex=42) returned 0 [0035.297] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0035.297] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0035.297] RestoreDC (hdc=0x2b01084a, nSavedDC=-1) returned 1 [0035.297] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b01084a) returned 0x0 [0035.297] IsAppThemed () returned 0x1 [0035.297] GetThemeAppProperties () returned 0x3 [0035.297] GetThemeAppProperties () returned 0x3 [0035.297] IsAppThemed () returned 0x1 [0035.297] GetThemeAppProperties () returned 0x3 [0035.297] GetThemeAppProperties () returned 0x3 [0035.297] IsThemePartDefined () returned 0x1 [0035.297] GdipCreateRegion (region=0x1ee764) returned 0x0 [0035.297] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0035.297] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0035.297] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0035.297] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0035.297] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0035.297] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0035.297] LocalFree (hMem=0x416cb8) returned 0x0 [0035.297] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0035.297] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0035.297] LocalFree (hMem=0x416cb8) returned 0x0 [0035.298] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0035.298] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0035.298] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0035.298] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0035.298] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0035.298] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0035.298] GetCurrentObject (hdc=0x2b01084a, type=0x1) returned 0x1b00017 [0035.298] GetCurrentObject (hdc=0x2b01084a, type=0x2) returned 0x1900010 [0035.298] GetCurrentObject (hdc=0x2b01084a, type=0x7) returned 0x490500d1 [0035.298] GetCurrentObject (hdc=0x2b01084a, type=0x6) returned 0x18a002e [0035.298] SaveDC (hdc=0x2b01084a) returned 1 [0035.298] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x41040246 [0035.298] GetClipRgn (hdc=0x2b01084a, hrgn=0x41040246) returned 0 [0035.298] SelectClipRgn (hdc=0x2b01084a, hrgn=0x5e040813) returned 2 [0035.298] DeleteObject (ho=0x41040246) returned 1 [0035.298] DeleteObject (ho=0x5e040813) returned 1 [0035.298] OffsetViewportOrgEx (in: hdc=0x2b01084a, x=0, y=0, lppt=0x2624a98 | out: lppt=0x2624a98) returned 1 [0035.298] IsAppThemed () returned 0x1 [0035.298] GetThemeAppProperties () returned 0x3 [0035.298] GetThemeAppProperties () returned 0x3 [0035.298] DrawThemeBackground () returned 0x0 [0035.299] RestoreDC (hdc=0x2b01084a, nSavedDC=-1) returned 1 [0035.299] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b01084a) returned 0x0 [0035.299] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0035.299] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0035.299] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0035.299] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0035.299] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0035.299] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0035.299] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0035.299] LocalFree (hMem=0x416cb8) returned 0x0 [0035.299] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0035.299] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0035.299] LocalFree (hMem=0x416cb8) returned 0x0 [0035.299] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0035.299] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0035.299] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0035.299] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0035.299] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0035.299] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0035.299] GetCurrentObject (hdc=0x2b01084a, type=0x1) returned 0x1b00017 [0035.299] GetCurrentObject (hdc=0x2b01084a, type=0x2) returned 0x1900010 [0035.299] GetCurrentObject (hdc=0x2b01084a, type=0x7) returned 0x490500d1 [0035.299] GetCurrentObject (hdc=0x2b01084a, type=0x6) returned 0x18a002e [0035.300] SaveDC (hdc=0x2b01084a) returned 1 [0035.300] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f040813 [0035.300] GetClipRgn (hdc=0x2b01084a, hrgn=0x5f040813) returned 0 [0035.300] SelectClipRgn (hdc=0x2b01084a, hrgn=0x42040246) returned 2 [0035.300] DeleteObject (ho=0x5f040813) returned 1 [0035.300] DeleteObject (ho=0x42040246) returned 1 [0035.300] OffsetViewportOrgEx (in: hdc=0x2b01084a, x=0, y=0, lppt=0x2624d6c | out: lppt=0x2624d6c) returned 1 [0035.300] IsAppThemed () returned 0x1 [0035.300] GetThemeAppProperties () returned 0x3 [0035.300] GetThemeAppProperties () returned 0x3 [0035.300] GetThemeBackgroundContentRect () returned 0x0 [0035.300] RestoreDC (hdc=0x2b01084a, nSavedDC=-1) returned 1 [0035.300] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b01084a) returned 0x0 [0035.300] IsAppThemed () returned 0x1 [0035.300] GetThemeAppProperties () returned 0x3 [0035.300] GetThemeAppProperties () returned 0x3 [0035.300] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0035.300] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0035.300] GetCurrentObject (hdc=0x2b01084a, type=0x1) returned 0x1b00017 [0035.300] GetCurrentObject (hdc=0x2b01084a, type=0x2) returned 0x1900010 [0035.300] GetCurrentObject (hdc=0x2b01084a, type=0x7) returned 0x490500d1 [0035.300] GetCurrentObject (hdc=0x2b01084a, type=0x6) returned 0x18a002e [0035.300] SaveDC (hdc=0x2b01084a) returned 1 [0035.300] GetTextAlign (hdc=0x2b01084a) returned 0x0 [0035.300] GetTextColor (hdc=0x2b01084a) returned 0x0 [0035.301] GetCurrentObject (hdc=0x2b01084a, type=0x6) returned 0x18a002e [0035.301] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0035.301] SelectObject (hdc=0x2b01084a, h=0x220a081a) returned 0x18a002e [0035.301] GetBkMode (hdc=0x2b01084a) returned 2 [0035.301] SetBkMode (hdc=0x2b01084a, mode=1) returned 2 [0035.301] DrawTextExW (in: hdc=0x2b01084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2625100 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0035.301] DrawTextExW (in: hdc=0x2b01084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2625100 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0035.301] RestoreDC (hdc=0x2b01084a, nSavedDC=-1) returned 1 [0035.301] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b01084a) returned 0x0 [0035.301] GetFocus () returned 0x201d0 [0035.301] IsAppThemed () returned 0x1 [0035.301] GetThemeAppProperties () returned 0x3 [0035.301] GetThemeAppProperties () returned 0x3 [0035.301] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0035.301] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x2b01084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0035.301] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b01084a) returned 0x0 [0035.301] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0035.301] SelectObject (hdc=0x2b01084a, h=0x185000f) returned 0x490500d1 [0035.302] DeleteDC (hdc=0x2b01084a) returned 1 [0035.302] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0035.302] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0035.302] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26251fc, cPoints=0x1 | out: lpPoints=0x26251fc) returned 42533703 [0035.302] WindowFromPoint (Point=0x3cf) returned 0x201d0 [0035.302] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03cf) returned 0x1 [0035.302] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0035.302] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0035.302] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0035.302] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0035.302] GetSystemMetrics (nIndex=42) returned 0 [0035.302] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0035.302] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0035.302] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0035.302] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0035.302] GetCapture () returned 0x201d0 [0035.302] ReleaseCapture () returned 1 [0035.302] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0035.302] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0035.302] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03cf) returned 0x1 [0035.303] IsWindowUnicode (hWnd=0x201d0) returned 1 [0035.303] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0035.303] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03cf) returned 0x1 [0035.303] SetCursor (hCursor=0x10003) returned 0x10003 [0035.303] TranslateMessage (lpMsg=0x1ef250) returned 0 [0035.303] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0035.303] GetKeyState (nVirtKey=1) returned 1 [0035.303] GetKeyState (nVirtKey=2) returned 0 [0035.303] GetKeyState (nVirtKey=4) returned 0 [0035.303] GetKeyState (nVirtKey=5) returned 0 [0035.303] GetKeyState (nVirtKey=6) returned 0 [0035.303] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0035.303] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0035.303] WaitMessage () returned 1 [0038.246] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0038.247] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03b6) returned 0x1 [0038.247] IsWindowUnicode (hWnd=0x201d0) returned 1 [0038.247] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0038.247] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03b6) returned 0x1 [0038.247] SetCursor (hCursor=0x10003) returned 0x10003 [0038.247] TranslateMessage (lpMsg=0x1ef250) returned 0 [0038.247] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0038.247] GetKeyState (nVirtKey=1) returned 1 [0038.247] GetKeyState (nVirtKey=2) returned 0 [0038.247] GetKeyState (nVirtKey=4) returned 0 [0038.247] GetKeyState (nVirtKey=5) returned 0 [0038.247] GetKeyState (nVirtKey=6) returned 0 [0038.247] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0038.247] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0038.247] WaitMessage () returned 1 [0038.383] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0038.383] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03b6) returned 0x1 [0038.383] IsWindowUnicode (hWnd=0x201d0) returned 1 [0038.383] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0038.383] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03b6) returned 0x1 [0038.383] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0038.383] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dd0271) returned 0x0 [0038.383] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0038.383] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0038.384] SetCursor (hCursor=0x10003) returned 0x10003 [0038.384] TranslateMessage (lpMsg=0x1ef250) returned 0 [0038.384] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0038.384] GetKeyState (nVirtKey=1) returned -128 [0038.384] GetKeyState (nVirtKey=2) returned 0 [0038.384] GetKeyState (nVirtKey=4) returned 0 [0038.384] GetKeyState (nVirtKey=5) returned 0 [0038.384] GetKeyState (nVirtKey=6) returned 0 [0038.384] IsWindowVisible (hWnd=0x201d0) returned 1 [0038.384] IsWindowEnabled (hWnd=0x201d0) returned 1 [0038.384] SetFocus (hWnd=0x201d0) returned 0x201d0 [0038.384] GetFocus () returned 0x201d0 [0038.384] GetFocus () returned 0x201d0 [0038.384] GetFocus () returned 0x201d0 [0038.384] GetKeyState (nVirtKey=1) returned -128 [0038.384] GetKeyState (nVirtKey=2) returned 0 [0038.384] GetKeyState (nVirtKey=4) returned 0 [0038.384] GetKeyState (nVirtKey=5) returned 0 [0038.384] GetKeyState (nVirtKey=6) returned 0 [0038.384] GetCapture () returned 0x0 [0038.384] SetCapture (hWnd=0x201d0) returned 0x0 [0038.384] GetKeyState (nVirtKey=1) returned -128 [0038.384] GetKeyState (nVirtKey=2) returned 0 [0038.384] GetKeyState (nVirtKey=4) returned 0 [0038.384] GetKeyState (nVirtKey=5) returned 0 [0038.384] GetKeyState (nVirtKey=6) returned 0 [0038.385] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0038.385] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0038.385] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0038.385] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0038.385] TranslateMessage (lpMsg=0x1ef250) returned 0 [0038.385] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0038.385] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0038.385] IsWindowUnicode (hWnd=0x201d0) returned 1 [0038.385] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0038.385] TranslateMessage (lpMsg=0x1ef250) returned 0 [0038.385] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0038.385] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2625320, cPoints=0x1 | out: lpPoints=0x2625320) returned 42533703 [0038.385] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0038.385] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0038.385] UpdateWindow (hWnd=0x201d0) returned 1 [0038.385] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0038.385] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0038.385] CreateCompatibleDC (hdc=0x160107c7) returned 0x43010863 [0038.385] SelectObject (hdc=0x43010863, h=0x490500d1) returned 0x185000f [0038.385] GdipCreateFromHDC (hdc=0x43010863, graphics=0x1eea5c) returned 0x0 [0038.386] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0038.386] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0038.386] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0038.386] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0038.386] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0038.386] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0038.386] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0038.386] LocalFree (hMem=0x416cb8) returned 0x0 [0038.386] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0038.386] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0038.386] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0038.386] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0038.386] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0038.386] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd830dbd) returned 0x0 [0038.386] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0038.386] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0038.386] GetCurrentObject (hdc=0x43010863, type=0x1) returned 0x1b00017 [0038.386] GetCurrentObject (hdc=0x43010863, type=0x2) returned 0x1900010 [0038.386] GetCurrentObject (hdc=0x43010863, type=0x7) returned 0x490500d1 [0038.387] GetCurrentObject (hdc=0x43010863, type=0x6) returned 0x18a002e [0038.387] SaveDC (hdc=0x43010863) returned 1 [0038.387] GetNearestColor (hdc=0x43010863, color=0xf5f5f5) returned 0xf5f5f5 [0038.387] GetNearestColor (hdc=0x43010863, color=0x515151) returned 0x515151 [0038.387] GetNearestColor (hdc=0x43010863, color=0x0) returned 0x0 [0038.387] GetNearestColor (hdc=0x43010863, color=0x515151) returned 0x515151 [0038.387] GetNearestColor (hdc=0x43010863, color=0x0) returned 0x0 [0038.387] GetNearestColor (hdc=0x43010863, color=0xfafafa) returned 0xfafafa [0038.387] GetNearestColor (hdc=0x43010863, color=0xe0e0e0) returned 0xe0e0e0 [0038.387] GetNearestColor (hdc=0x43010863, color=0xdcdcdc) returned 0xdcdcdc [0038.387] GetNearestColor (hdc=0x43010863, color=0x0) returned 0x0 [0038.387] RestoreDC (hdc=0x43010863, nSavedDC=-1) returned 1 [0038.387] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010863) returned 0x0 [0038.387] IsAppThemed () returned 0x1 [0038.387] GetThemeAppProperties () returned 0x3 [0038.387] GetThemeAppProperties () returned 0x3 [0038.387] IsAppThemed () returned 0x1 [0038.387] GetThemeAppProperties () returned 0x3 [0038.387] GetThemeAppProperties () returned 0x3 [0038.387] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2625a24 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0038.388] IsAppThemed () returned 0x1 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] IsAppThemed () returned 0x1 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] IsAppThemed () returned 0x1 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] IsAppThemed () returned 0x1 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] IsThemePartDefined () returned 0x1 [0038.388] IsAppThemed () returned 0x1 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0038.388] IsAppThemed () returned 0x1 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] IsAppThemed () returned 0x1 [0038.388] GetThemeAppProperties () returned 0x3 [0038.388] GetThemeAppProperties () returned 0x3 [0038.389] IsThemePartDefined () returned 0x1 [0038.389] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0038.389] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0038.389] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0038.389] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0038.389] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0038.389] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0038.389] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0038.389] LocalFree (hMem=0x416cb8) returned 0x0 [0038.389] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0038.389] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0038.389] LocalFree (hMem=0x416cb8) returned 0x0 [0038.389] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0038.389] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0038.389] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0038.389] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0038.389] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0038.389] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0038.389] GetCurrentObject (hdc=0x43010863, type=0x1) returned 0x1b00017 [0038.389] GetCurrentObject (hdc=0x43010863, type=0x2) returned 0x1900010 [0038.389] GetCurrentObject (hdc=0x43010863, type=0x7) returned 0x490500d1 [0038.389] GetCurrentObject (hdc=0x43010863, type=0x6) returned 0x18a002e [0038.389] SaveDC (hdc=0x43010863) returned 1 [0038.390] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x43040246 [0038.390] GetClipRgn (hdc=0x43010863, hrgn=0x43040246) returned 0 [0038.390] SelectClipRgn (hdc=0x43010863, hrgn=0x63040813) returned 2 [0038.390] DeleteObject (ho=0x43040246) returned 1 [0038.390] DeleteObject (ho=0x63040813) returned 1 [0038.390] OffsetViewportOrgEx (in: hdc=0x43010863, x=0, y=0, lppt=0x26260d4 | out: lppt=0x26260d4) returned 1 [0038.390] DrawThemeParentBackground () returned 0x0 [0038.390] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0038.390] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0038.390] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0038.390] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0038.390] GetSystemMetrics (nIndex=42) returned 0 [0038.390] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0038.390] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0038.390] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0038.390] GetCurrentObject (hdc=0x43010863, type=0x1) returned 0x1b00017 [0038.390] GetCurrentObject (hdc=0x43010863, type=0x2) returned 0x1900010 [0038.390] GetCurrentObject (hdc=0x43010863, type=0x7) returned 0x490500d1 [0038.390] GetCurrentObject (hdc=0x43010863, type=0x6) returned 0x18a002e [0038.390] SaveDC (hdc=0x43010863) returned 2 [0038.390] GetNearestColor (hdc=0x43010863, color=0xf5f5f5) returned 0xf5f5f5 [0038.391] CreateSolidBrush (color=0xf5f5f5) returned 0x3a100244 [0038.391] FillRect (hDC=0x43010863, lprc=0x1ee2d0, hbr=0x3a100244) returned 1 [0038.391] DeleteObject (ho=0x3a100244) returned 1 [0038.391] RestoreDC (hdc=0x43010863, nSavedDC=-1) returned 1 [0038.391] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0038.391] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0038.391] GetSystemMetrics (nIndex=42) returned 0 [0038.391] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0038.391] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0038.391] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0038.391] GetCurrentObject (hdc=0x43010863, type=0x1) returned 0x1b00017 [0038.391] GetCurrentObject (hdc=0x43010863, type=0x2) returned 0x1900010 [0038.391] GetCurrentObject (hdc=0x43010863, type=0x7) returned 0x490500d1 [0038.391] GetCurrentObject (hdc=0x43010863, type=0x6) returned 0x18a002e [0038.391] SaveDC (hdc=0x43010863) returned 2 [0038.391] GetNearestColor (hdc=0x43010863, color=0xf5f5f5) returned 0xf5f5f5 [0038.391] CreateSolidBrush (color=0xf5f5f5) returned 0x3b100244 [0038.391] FillRect (hDC=0x43010863, lprc=0x1ee270, hbr=0x3b100244) returned 1 [0038.391] DeleteObject (ho=0x3b100244) returned 1 [0038.392] RestoreDC (hdc=0x43010863, nSavedDC=-1) returned 1 [0038.392] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0038.392] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0038.392] GetSystemMetrics (nIndex=42) returned 0 [0038.392] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0038.392] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0038.392] RestoreDC (hdc=0x43010863, nSavedDC=-1) returned 1 [0038.392] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010863) returned 0x0 [0038.392] IsAppThemed () returned 0x1 [0038.392] GetThemeAppProperties () returned 0x3 [0038.392] GetThemeAppProperties () returned 0x3 [0038.392] IsAppThemed () returned 0x1 [0038.392] GetThemeAppProperties () returned 0x3 [0038.392] GetThemeAppProperties () returned 0x3 [0038.392] IsThemePartDefined () returned 0x1 [0038.392] GdipCreateRegion (region=0x1ee764) returned 0x0 [0038.392] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0038.392] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0038.392] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0038.392] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0038.392] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0038.392] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0038.392] LocalFree (hMem=0x416cb8) returned 0x0 [0038.392] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0038.392] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0038.392] LocalFree (hMem=0x416cb8) returned 0x0 [0038.393] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0038.393] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0038.393] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0038.393] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0038.393] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0038.393] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0038.393] GetCurrentObject (hdc=0x43010863, type=0x1) returned 0x1b00017 [0038.393] GetCurrentObject (hdc=0x43010863, type=0x2) returned 0x1900010 [0038.393] GetCurrentObject (hdc=0x43010863, type=0x7) returned 0x490500d1 [0038.393] GetCurrentObject (hdc=0x43010863, type=0x6) returned 0x18a002e [0038.393] SaveDC (hdc=0x43010863) returned 1 [0038.393] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x64040813 [0038.393] GetClipRgn (hdc=0x43010863, hrgn=0x64040813) returned 0 [0038.393] SelectClipRgn (hdc=0x43010863, hrgn=0x45040246) returned 2 [0038.393] DeleteObject (ho=0x64040813) returned 1 [0038.393] DeleteObject (ho=0x45040246) returned 1 [0038.393] OffsetViewportOrgEx (in: hdc=0x43010863, x=0, y=0, lppt=0x2626914 | out: lppt=0x2626914) returned 1 [0038.393] IsAppThemed () returned 0x1 [0038.393] GetThemeAppProperties () returned 0x3 [0038.393] GetThemeAppProperties () returned 0x3 [0038.393] DrawThemeBackground () returned 0x0 [0038.394] RestoreDC (hdc=0x43010863, nSavedDC=-1) returned 1 [0038.394] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010863) returned 0x0 [0038.394] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0038.394] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0038.394] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0038.394] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0038.394] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0038.394] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0038.394] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0038.394] LocalFree (hMem=0x416cb8) returned 0x0 [0038.394] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0038.394] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0038.394] LocalFree (hMem=0x416cb8) returned 0x0 [0038.394] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0038.394] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0038.394] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0038.394] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0038.394] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0038.394] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0038.394] GetCurrentObject (hdc=0x43010863, type=0x1) returned 0x1b00017 [0038.394] GetCurrentObject (hdc=0x43010863, type=0x2) returned 0x1900010 [0038.394] GetCurrentObject (hdc=0x43010863, type=0x7) returned 0x490500d1 [0038.394] GetCurrentObject (hdc=0x43010863, type=0x6) returned 0x18a002e [0038.394] SaveDC (hdc=0x43010863) returned 1 [0038.395] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x46040246 [0038.395] GetClipRgn (hdc=0x43010863, hrgn=0x46040246) returned 0 [0038.395] SelectClipRgn (hdc=0x43010863, hrgn=0x65040813) returned 2 [0038.395] DeleteObject (ho=0x46040246) returned 1 [0038.395] DeleteObject (ho=0x65040813) returned 1 [0038.395] OffsetViewportOrgEx (in: hdc=0x43010863, x=0, y=0, lppt=0x2626be8 | out: lppt=0x2626be8) returned 1 [0038.395] IsAppThemed () returned 0x1 [0038.395] GetThemeAppProperties () returned 0x3 [0038.395] GetThemeAppProperties () returned 0x3 [0038.395] GetThemeBackgroundContentRect () returned 0x0 [0038.395] RestoreDC (hdc=0x43010863, nSavedDC=-1) returned 1 [0038.395] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010863) returned 0x0 [0038.395] IsAppThemed () returned 0x1 [0038.395] GetThemeAppProperties () returned 0x3 [0038.395] GetThemeAppProperties () returned 0x3 [0038.395] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0038.395] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0038.395] GetCurrentObject (hdc=0x43010863, type=0x1) returned 0x1b00017 [0038.395] GetCurrentObject (hdc=0x43010863, type=0x2) returned 0x1900010 [0038.395] GetCurrentObject (hdc=0x43010863, type=0x7) returned 0x490500d1 [0038.395] GetCurrentObject (hdc=0x43010863, type=0x6) returned 0x18a002e [0038.396] SaveDC (hdc=0x43010863) returned 1 [0038.396] GetTextAlign (hdc=0x43010863) returned 0x0 [0038.396] GetTextColor (hdc=0x43010863) returned 0x0 [0038.396] GetCurrentObject (hdc=0x43010863, type=0x6) returned 0x18a002e [0038.396] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0038.396] SelectObject (hdc=0x43010863, h=0x220a081a) returned 0x18a002e [0038.396] GetBkMode (hdc=0x43010863) returned 2 [0038.396] SetBkMode (hdc=0x43010863, mode=1) returned 2 [0038.396] DrawTextExW (in: hdc=0x43010863, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2626f7c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0038.396] DrawTextExW (in: hdc=0x43010863, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2626f7c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0038.396] RestoreDC (hdc=0x43010863, nSavedDC=-1) returned 1 [0038.396] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010863) returned 0x0 [0038.396] GetFocus () returned 0x201d0 [0038.396] IsAppThemed () returned 0x1 [0038.397] GetThemeAppProperties () returned 0x3 [0038.397] GetThemeAppProperties () returned 0x3 [0038.397] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0038.397] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x43010863, x1=0, y1=0, rop=0xcc0020) returned 1 [0038.397] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010863) returned 0x0 [0038.397] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0038.397] SelectObject (hdc=0x43010863, h=0x185000f) returned 0x490500d1 [0038.397] DeleteDC (hdc=0x43010863) returned 1 [0038.397] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0038.397] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0038.397] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2627078, cPoints=0x1 | out: lpPoints=0x2627078) returned 42533703 [0038.397] WindowFromPoint (Point=0x3b6) returned 0x201d0 [0038.397] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03b6) returned 0x1 [0038.397] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0038.397] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0038.397] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0038.397] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0038.397] GetSystemMetrics (nIndex=42) returned 0 [0038.397] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0038.397] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0038.398] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0038.398] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0038.398] GetCapture () returned 0x201d0 [0038.398] ReleaseCapture () returned 1 [0038.398] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0038.398] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0038.398] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03b6) returned 0x1 [0038.398] IsWindowUnicode (hWnd=0x201d0) returned 1 [0038.398] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0038.398] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03b6) returned 0x1 [0038.398] SetCursor (hCursor=0x10003) returned 0x10003 [0038.398] TranslateMessage (lpMsg=0x1ef250) returned 0 [0038.398] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0038.398] GetKeyState (nVirtKey=1) returned 0 [0038.398] GetKeyState (nVirtKey=2) returned 0 [0038.398] GetKeyState (nVirtKey=4) returned 0 [0038.398] GetKeyState (nVirtKey=5) returned 0 [0038.398] GetKeyState (nVirtKey=6) returned 0 [0038.398] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0038.398] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0038.398] WaitMessage () returned 1 [0041.362] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0041.363] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03c7) returned 0x1 [0041.364] IsWindowUnicode (hWnd=0x201d0) returned 1 [0041.364] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0041.364] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03c7) returned 0x1 [0041.364] SetCursor (hCursor=0x10003) returned 0x10003 [0041.364] TranslateMessage (lpMsg=0x1ef250) returned 0 [0041.364] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0041.364] GetKeyState (nVirtKey=1) returned 0 [0041.364] GetKeyState (nVirtKey=2) returned 0 [0041.364] GetKeyState (nVirtKey=4) returned 0 [0041.364] GetKeyState (nVirtKey=5) returned 0 [0041.364] GetKeyState (nVirtKey=6) returned 0 [0041.365] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0041.365] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0041.365] WaitMessage () returned 1 [0041.423] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0041.423] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03c7) returned 0x1 [0041.423] IsWindowUnicode (hWnd=0x201d0) returned 1 [0041.423] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0041.423] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03c7) returned 0x1 [0041.424] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0041.424] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dc0282) returned 0x0 [0041.424] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0041.424] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0041.424] SetCursor (hCursor=0x10003) returned 0x10003 [0041.424] TranslateMessage (lpMsg=0x1ef250) returned 0 [0041.424] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0041.424] GetKeyState (nVirtKey=1) returned -127 [0041.424] GetKeyState (nVirtKey=2) returned 0 [0041.424] GetKeyState (nVirtKey=4) returned 0 [0041.424] GetKeyState (nVirtKey=5) returned 0 [0041.424] GetKeyState (nVirtKey=6) returned 0 [0041.424] IsWindowVisible (hWnd=0x201d0) returned 1 [0041.425] IsWindowEnabled (hWnd=0x201d0) returned 1 [0041.425] SetFocus (hWnd=0x201d0) returned 0x201d0 [0041.425] GetFocus () returned 0x201d0 [0041.425] GetFocus () returned 0x201d0 [0041.425] GetFocus () returned 0x201d0 [0041.425] GetKeyState (nVirtKey=1) returned -127 [0041.425] GetKeyState (nVirtKey=2) returned 0 [0041.425] GetKeyState (nVirtKey=4) returned 0 [0041.425] GetKeyState (nVirtKey=5) returned 0 [0041.425] GetKeyState (nVirtKey=6) returned 0 [0041.425] GetCapture () returned 0x0 [0041.425] SetCapture (hWnd=0x201d0) returned 0x0 [0041.425] GetKeyState (nVirtKey=1) returned -127 [0041.425] GetKeyState (nVirtKey=2) returned 0 [0041.425] GetKeyState (nVirtKey=4) returned 0 [0041.425] GetKeyState (nVirtKey=5) returned 0 [0041.425] GetKeyState (nVirtKey=6) returned 0 [0041.425] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0041.425] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0041.426] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0041.426] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0041.426] TranslateMessage (lpMsg=0x1ef250) returned 0 [0041.426] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0041.426] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0041.426] IsWindowUnicode (hWnd=0x201d0) returned 1 [0041.426] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0041.426] TranslateMessage (lpMsg=0x1ef250) returned 0 [0041.426] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0041.426] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x262719c, cPoints=0x1 | out: lpPoints=0x262719c) returned 42533703 [0041.426] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0041.426] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0041.426] UpdateWindow (hWnd=0x201d0) returned 1 [0041.427] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0041.427] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0041.427] CreateCompatibleDC (hdc=0x160107c7) returned 0x44010863 [0041.427] SelectObject (hdc=0x44010863, h=0x490500d1) returned 0x185000f [0041.428] GdipCreateFromHDC (hdc=0x44010863, graphics=0x1eea5c) returned 0x0 [0041.428] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0041.429] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0041.429] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0041.429] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0041.429] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0041.429] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0041.429] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0041.429] LocalFree (hMem=0x416cb8) returned 0x0 [0041.429] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0041.429] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0041.429] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0041.429] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0041.429] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0041.429] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd810dbd) returned 0x0 [0041.429] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0041.430] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0041.430] GetCurrentObject (hdc=0x44010863, type=0x1) returned 0x1b00017 [0041.430] GetCurrentObject (hdc=0x44010863, type=0x2) returned 0x1900010 [0041.430] GetCurrentObject (hdc=0x44010863, type=0x7) returned 0x490500d1 [0041.430] GetCurrentObject (hdc=0x44010863, type=0x6) returned 0x18a002e [0041.430] SaveDC (hdc=0x44010863) returned 1 [0041.430] GetNearestColor (hdc=0x44010863, color=0xf5f5f5) returned 0xf5f5f5 [0041.430] GetNearestColor (hdc=0x44010863, color=0x515151) returned 0x515151 [0041.430] GetNearestColor (hdc=0x44010863, color=0x0) returned 0x0 [0041.431] GetNearestColor (hdc=0x44010863, color=0x515151) returned 0x515151 [0041.431] GetNearestColor (hdc=0x44010863, color=0x0) returned 0x0 [0041.431] GetNearestColor (hdc=0x44010863, color=0xfafafa) returned 0xfafafa [0041.431] GetNearestColor (hdc=0x44010863, color=0xe0e0e0) returned 0xe0e0e0 [0041.431] GetNearestColor (hdc=0x44010863, color=0xdcdcdc) returned 0xdcdcdc [0041.431] GetNearestColor (hdc=0x44010863, color=0x0) returned 0x0 [0041.431] RestoreDC (hdc=0x44010863, nSavedDC=-1) returned 1 [0041.431] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010863) returned 0x0 [0041.431] IsAppThemed () returned 0x1 [0041.431] GetThemeAppProperties () returned 0x3 [0041.431] GetThemeAppProperties () returned 0x3 [0041.431] IsAppThemed () returned 0x1 [0041.431] GetThemeAppProperties () returned 0x3 [0041.431] GetThemeAppProperties () returned 0x3 [0041.431] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26278a0 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0041.432] IsAppThemed () returned 0x1 [0041.432] GetThemeAppProperties () returned 0x3 [0041.432] GetThemeAppProperties () returned 0x3 [0041.432] IsAppThemed () returned 0x1 [0041.432] GetThemeAppProperties () returned 0x3 [0041.432] GetThemeAppProperties () returned 0x3 [0041.432] IsAppThemed () returned 0x1 [0041.432] GetThemeAppProperties () returned 0x3 [0041.432] GetThemeAppProperties () returned 0x3 [0041.432] IsAppThemed () returned 0x1 [0041.432] GetThemeAppProperties () returned 0x3 [0041.432] GetThemeAppProperties () returned 0x3 [0041.432] IsThemePartDefined () returned 0x1 [0041.433] IsAppThemed () returned 0x1 [0041.433] GetThemeAppProperties () returned 0x3 [0041.433] GetThemeAppProperties () returned 0x3 [0041.433] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0041.433] IsAppThemed () returned 0x1 [0041.433] GetThemeAppProperties () returned 0x3 [0041.433] GetThemeAppProperties () returned 0x3 [0041.433] IsAppThemed () returned 0x1 [0041.433] GetThemeAppProperties () returned 0x3 [0041.433] GetThemeAppProperties () returned 0x3 [0041.433] IsThemePartDefined () returned 0x1 [0041.433] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0041.433] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0041.433] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0041.433] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0041.433] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0041.433] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0041.433] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0041.433] LocalFree (hMem=0x416cb8) returned 0x0 [0041.433] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0041.433] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0041.433] LocalFree (hMem=0x416cb8) returned 0x0 [0041.433] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0041.433] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0041.433] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0041.433] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0041.433] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0041.434] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0041.434] GetCurrentObject (hdc=0x44010863, type=0x1) returned 0x1b00017 [0041.434] GetCurrentObject (hdc=0x44010863, type=0x2) returned 0x1900010 [0041.434] GetCurrentObject (hdc=0x44010863, type=0x7) returned 0x490500d1 [0041.434] GetCurrentObject (hdc=0x44010863, type=0x6) returned 0x18a002e [0041.434] SaveDC (hdc=0x44010863) returned 1 [0041.434] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x66040813 [0041.434] GetClipRgn (hdc=0x44010863, hrgn=0x66040813) returned 0 [0041.434] SelectClipRgn (hdc=0x44010863, hrgn=0x4a040246) returned 2 [0041.434] DeleteObject (ho=0x66040813) returned 1 [0041.434] DeleteObject (ho=0x4a040246) returned 1 [0041.434] OffsetViewportOrgEx (in: hdc=0x44010863, x=0, y=0, lppt=0x2627f50 | out: lppt=0x2627f50) returned 1 [0041.434] DrawThemeParentBackground () returned 0x0 [0041.434] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0041.434] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0041.434] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0041.434] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0041.435] GetSystemMetrics (nIndex=42) returned 0 [0041.435] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0041.435] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0041.435] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0041.435] GetCurrentObject (hdc=0x44010863, type=0x1) returned 0x1b00017 [0041.435] GetCurrentObject (hdc=0x44010863, type=0x2) returned 0x1900010 [0041.435] GetCurrentObject (hdc=0x44010863, type=0x7) returned 0x490500d1 [0041.435] GetCurrentObject (hdc=0x44010863, type=0x6) returned 0x18a002e [0041.435] SaveDC (hdc=0x44010863) returned 2 [0041.435] GetNearestColor (hdc=0x44010863, color=0xf5f5f5) returned 0xf5f5f5 [0041.435] CreateSolidBrush (color=0xf5f5f5) returned 0x3c100244 [0041.435] FillRect (hDC=0x44010863, lprc=0x1ee2d0, hbr=0x3c100244) returned 1 [0041.435] DeleteObject (ho=0x3c100244) returned 1 [0041.435] RestoreDC (hdc=0x44010863, nSavedDC=-1) returned 1 [0041.436] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0041.436] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0041.436] GetSystemMetrics (nIndex=42) returned 0 [0041.436] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0041.436] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0041.436] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0041.436] GetCurrentObject (hdc=0x44010863, type=0x1) returned 0x1b00017 [0041.436] GetCurrentObject (hdc=0x44010863, type=0x2) returned 0x1900010 [0041.436] GetCurrentObject (hdc=0x44010863, type=0x7) returned 0x490500d1 [0041.436] GetCurrentObject (hdc=0x44010863, type=0x6) returned 0x18a002e [0041.436] SaveDC (hdc=0x44010863) returned 2 [0041.436] GetNearestColor (hdc=0x44010863, color=0xf5f5f5) returned 0xf5f5f5 [0041.436] CreateSolidBrush (color=0xf5f5f5) returned 0x3d100244 [0041.436] FillRect (hDC=0x44010863, lprc=0x1ee270, hbr=0x3d100244) returned 1 [0041.436] DeleteObject (ho=0x3d100244) returned 1 [0041.436] RestoreDC (hdc=0x44010863, nSavedDC=-1) returned 1 [0041.436] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0041.436] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0041.436] GetSystemMetrics (nIndex=42) returned 0 [0041.436] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0041.436] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0041.437] RestoreDC (hdc=0x44010863, nSavedDC=-1) returned 1 [0041.437] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010863) returned 0x0 [0041.437] IsAppThemed () returned 0x1 [0041.437] GetThemeAppProperties () returned 0x3 [0041.437] GetThemeAppProperties () returned 0x3 [0041.437] IsAppThemed () returned 0x1 [0041.437] GetThemeAppProperties () returned 0x3 [0041.437] GetThemeAppProperties () returned 0x3 [0041.437] IsThemePartDefined () returned 0x1 [0041.437] GdipCreateRegion (region=0x1ee764) returned 0x0 [0041.437] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0041.437] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0041.437] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0041.437] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0041.437] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0041.437] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0041.437] LocalFree (hMem=0x416cb8) returned 0x0 [0041.437] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0041.437] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0041.438] LocalFree (hMem=0x416cb8) returned 0x0 [0041.438] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0041.438] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0041.438] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0041.438] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0041.438] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0041.438] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0041.438] GetCurrentObject (hdc=0x44010863, type=0x1) returned 0x1b00017 [0041.438] GetCurrentObject (hdc=0x44010863, type=0x2) returned 0x1900010 [0041.438] GetCurrentObject (hdc=0x44010863, type=0x7) returned 0x490500d1 [0041.438] GetCurrentObject (hdc=0x44010863, type=0x6) returned 0x18a002e [0041.438] SaveDC (hdc=0x44010863) returned 1 [0041.438] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b040246 [0041.438] GetClipRgn (hdc=0x44010863, hrgn=0x4b040246) returned 0 [0041.438] SelectClipRgn (hdc=0x44010863, hrgn=0x68040813) returned 2 [0041.438] DeleteObject (ho=0x4b040246) returned 1 [0041.438] DeleteObject (ho=0x68040813) returned 1 [0041.438] OffsetViewportOrgEx (in: hdc=0x44010863, x=0, y=0, lppt=0x2628790 | out: lppt=0x2628790) returned 1 [0041.438] IsAppThemed () returned 0x1 [0041.438] GetThemeAppProperties () returned 0x3 [0041.438] GetThemeAppProperties () returned 0x3 [0041.438] DrawThemeBackground () returned 0x0 [0041.439] RestoreDC (hdc=0x44010863, nSavedDC=-1) returned 1 [0041.439] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010863) returned 0x0 [0041.439] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0041.439] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0041.439] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0041.439] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0041.439] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0041.439] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0041.439] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0041.439] LocalFree (hMem=0x416cb8) returned 0x0 [0041.439] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0041.439] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0041.439] LocalFree (hMem=0x416cb8) returned 0x0 [0041.439] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0041.439] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0041.439] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0041.439] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0041.439] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0041.439] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0041.439] GetCurrentObject (hdc=0x44010863, type=0x1) returned 0x1b00017 [0041.439] GetCurrentObject (hdc=0x44010863, type=0x2) returned 0x1900010 [0041.439] GetCurrentObject (hdc=0x44010863, type=0x7) returned 0x490500d1 [0041.440] GetCurrentObject (hdc=0x44010863, type=0x6) returned 0x18a002e [0041.440] SaveDC (hdc=0x44010863) returned 1 [0041.440] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x69040813 [0041.440] GetClipRgn (hdc=0x44010863, hrgn=0x69040813) returned 0 [0041.440] SelectClipRgn (hdc=0x44010863, hrgn=0x4c040246) returned 2 [0041.440] DeleteObject (ho=0x69040813) returned 1 [0041.440] DeleteObject (ho=0x4c040246) returned 1 [0041.440] OffsetViewportOrgEx (in: hdc=0x44010863, x=0, y=0, lppt=0x2628a64 | out: lppt=0x2628a64) returned 1 [0041.440] IsAppThemed () returned 0x1 [0041.440] GetThemeAppProperties () returned 0x3 [0041.440] GetThemeAppProperties () returned 0x3 [0041.440] GetThemeBackgroundContentRect () returned 0x0 [0041.440] RestoreDC (hdc=0x44010863, nSavedDC=-1) returned 1 [0041.440] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010863) returned 0x0 [0041.440] IsAppThemed () returned 0x1 [0041.440] GetThemeAppProperties () returned 0x3 [0041.440] GetThemeAppProperties () returned 0x3 [0041.440] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0041.440] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0041.440] GetCurrentObject (hdc=0x44010863, type=0x1) returned 0x1b00017 [0041.440] GetCurrentObject (hdc=0x44010863, type=0x2) returned 0x1900010 [0041.440] GetCurrentObject (hdc=0x44010863, type=0x7) returned 0x490500d1 [0041.440] GetCurrentObject (hdc=0x44010863, type=0x6) returned 0x18a002e [0041.440] SaveDC (hdc=0x44010863) returned 1 [0041.441] GetTextAlign (hdc=0x44010863) returned 0x0 [0041.441] GetTextColor (hdc=0x44010863) returned 0x0 [0041.441] GetCurrentObject (hdc=0x44010863, type=0x6) returned 0x18a002e [0041.441] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0041.441] SelectObject (hdc=0x44010863, h=0x220a081a) returned 0x18a002e [0041.441] GetBkMode (hdc=0x44010863) returned 2 [0041.441] SetBkMode (hdc=0x44010863, mode=1) returned 2 [0041.441] DrawTextExW (in: hdc=0x44010863, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2628df8 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0041.441] DrawTextExW (in: hdc=0x44010863, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2628df8 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0041.442] RestoreDC (hdc=0x44010863, nSavedDC=-1) returned 1 [0041.442] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010863) returned 0x0 [0041.442] GetFocus () returned 0x201d0 [0041.442] IsAppThemed () returned 0x1 [0041.442] GetThemeAppProperties () returned 0x3 [0041.442] GetThemeAppProperties () returned 0x3 [0041.442] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0041.442] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x44010863, x1=0, y1=0, rop=0xcc0020) returned 1 [0041.443] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010863) returned 0x0 [0041.443] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0041.443] SelectObject (hdc=0x44010863, h=0x185000f) returned 0x490500d1 [0041.443] DeleteDC (hdc=0x44010863) returned 1 [0041.443] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0041.443] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0041.443] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2628ef4, cPoints=0x1 | out: lpPoints=0x2628ef4) returned 42533703 [0041.443] WindowFromPoint (Point=0x3c7) returned 0x201d0 [0041.443] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03c7) returned 0x1 [0041.443] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0041.443] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0041.443] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0041.443] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0041.443] GetSystemMetrics (nIndex=42) returned 0 [0041.443] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0041.443] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0041.444] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0041.444] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0041.444] GetCapture () returned 0x201d0 [0041.444] ReleaseCapture () returned 1 [0041.444] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0041.444] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0041.444] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03c7) returned 0x1 [0041.444] IsWindowUnicode (hWnd=0x201d0) returned 1 [0041.444] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0041.444] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03c7) returned 0x1 [0041.444] SetCursor (hCursor=0x10003) returned 0x10003 [0041.444] TranslateMessage (lpMsg=0x1ef250) returned 0 [0041.444] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0041.444] GetKeyState (nVirtKey=1) returned 1 [0041.444] GetKeyState (nVirtKey=2) returned 0 [0041.444] GetKeyState (nVirtKey=4) returned 0 [0041.444] GetKeyState (nVirtKey=5) returned 0 [0041.444] GetKeyState (nVirtKey=6) returned 0 [0041.444] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0041.444] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0041.445] WaitMessage () returned 1 [0044.500] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0044.500] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0381) returned 0x1 [0044.501] IsWindowUnicode (hWnd=0x201d0) returned 1 [0044.501] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0044.501] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0381) returned 0x1 [0044.501] SetCursor (hCursor=0x10003) returned 0x10003 [0044.501] TranslateMessage (lpMsg=0x1ef250) returned 0 [0044.501] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0044.501] GetKeyState (nVirtKey=1) returned 1 [0044.501] GetKeyState (nVirtKey=2) returned 0 [0044.501] GetKeyState (nVirtKey=4) returned 0 [0044.501] GetKeyState (nVirtKey=5) returned 0 [0044.501] GetKeyState (nVirtKey=6) returned 0 [0044.501] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0044.501] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0044.501] WaitMessage () returned 1 [0044.684] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0044.684] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0381) returned 0x1 [0044.685] IsWindowUnicode (hWnd=0x201d0) returned 1 [0044.685] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0044.685] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0381) returned 0x1 [0044.685] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0044.685] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dc023c) returned 0x0 [0044.685] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0044.685] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0044.685] SetCursor (hCursor=0x10003) returned 0x10003 [0044.685] TranslateMessage (lpMsg=0x1ef250) returned 0 [0044.685] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0044.685] GetKeyState (nVirtKey=1) returned -128 [0044.685] GetKeyState (nVirtKey=2) returned 0 [0044.685] GetKeyState (nVirtKey=4) returned 0 [0044.685] GetKeyState (nVirtKey=5) returned 0 [0044.685] GetKeyState (nVirtKey=6) returned 0 [0044.685] IsWindowVisible (hWnd=0x201d0) returned 1 [0044.685] IsWindowEnabled (hWnd=0x201d0) returned 1 [0044.685] SetFocus (hWnd=0x201d0) returned 0x201d0 [0044.686] GetFocus () returned 0x201d0 [0044.686] GetFocus () returned 0x201d0 [0044.686] GetFocus () returned 0x201d0 [0044.686] GetKeyState (nVirtKey=1) returned -128 [0044.686] GetKeyState (nVirtKey=2) returned 0 [0044.686] GetKeyState (nVirtKey=4) returned 0 [0044.686] GetKeyState (nVirtKey=5) returned 0 [0044.686] GetKeyState (nVirtKey=6) returned 0 [0044.686] GetCapture () returned 0x0 [0044.686] SetCapture (hWnd=0x201d0) returned 0x0 [0044.686] GetKeyState (nVirtKey=1) returned -128 [0044.686] GetKeyState (nVirtKey=2) returned 0 [0044.686] GetKeyState (nVirtKey=4) returned 0 [0044.686] GetKeyState (nVirtKey=5) returned 0 [0044.686] GetKeyState (nVirtKey=6) returned 0 [0044.686] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0044.686] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0044.686] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0044.686] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0044.686] TranslateMessage (lpMsg=0x1ef250) returned 0 [0044.686] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0044.686] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0044.686] IsWindowUnicode (hWnd=0x201d0) returned 1 [0044.686] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0044.686] TranslateMessage (lpMsg=0x1ef250) returned 0 [0044.686] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0044.686] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2629018, cPoints=0x1 | out: lpPoints=0x2629018) returned 42533703 [0044.686] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0044.686] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0044.687] UpdateWindow (hWnd=0x201d0) returned 1 [0044.687] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0044.687] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0044.687] CreateCompatibleDC (hdc=0x160107c7) returned 0x45010863 [0044.687] SelectObject (hdc=0x45010863, h=0x490500d1) returned 0x185000f [0044.687] GdipCreateFromHDC (hdc=0x45010863, graphics=0x1eea5c) returned 0x0 [0044.687] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0044.688] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0044.688] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0044.688] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0044.688] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0044.688] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0044.688] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0044.688] LocalFree (hMem=0x416cb8) returned 0x0 [0044.688] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0044.688] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0044.688] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0044.688] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0044.688] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0044.688] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd7f0dbd) returned 0x0 [0044.688] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0044.688] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0044.688] GetCurrentObject (hdc=0x45010863, type=0x1) returned 0x1b00017 [0044.688] GetCurrentObject (hdc=0x45010863, type=0x2) returned 0x1900010 [0044.688] GetCurrentObject (hdc=0x45010863, type=0x7) returned 0x490500d1 [0044.688] GetCurrentObject (hdc=0x45010863, type=0x6) returned 0x18a002e [0044.689] SaveDC (hdc=0x45010863) returned 1 [0044.689] GetNearestColor (hdc=0x45010863, color=0xf5f5f5) returned 0xf5f5f5 [0044.689] GetNearestColor (hdc=0x45010863, color=0x515151) returned 0x515151 [0044.689] GetNearestColor (hdc=0x45010863, color=0x0) returned 0x0 [0044.689] GetNearestColor (hdc=0x45010863, color=0x515151) returned 0x515151 [0044.689] GetNearestColor (hdc=0x45010863, color=0x0) returned 0x0 [0044.689] GetNearestColor (hdc=0x45010863, color=0xfafafa) returned 0xfafafa [0044.689] GetNearestColor (hdc=0x45010863, color=0xe0e0e0) returned 0xe0e0e0 [0044.689] GetNearestColor (hdc=0x45010863, color=0xdcdcdc) returned 0xdcdcdc [0044.689] GetNearestColor (hdc=0x45010863, color=0x0) returned 0x0 [0044.689] RestoreDC (hdc=0x45010863, nSavedDC=-1) returned 1 [0044.689] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010863) returned 0x0 [0044.689] IsAppThemed () returned 0x1 [0044.689] GetThemeAppProperties () returned 0x3 [0044.689] GetThemeAppProperties () returned 0x3 [0044.689] IsAppThemed () returned 0x1 [0044.689] GetThemeAppProperties () returned 0x3 [0044.689] GetThemeAppProperties () returned 0x3 [0044.690] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x262971c | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0044.690] IsAppThemed () returned 0x1 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] IsAppThemed () returned 0x1 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] IsAppThemed () returned 0x1 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] IsAppThemed () returned 0x1 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] IsThemePartDefined () returned 0x1 [0044.691] IsAppThemed () returned 0x1 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0044.691] IsAppThemed () returned 0x1 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] IsAppThemed () returned 0x1 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] GetThemeAppProperties () returned 0x3 [0044.691] IsThemePartDefined () returned 0x1 [0044.691] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0044.691] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0044.691] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0044.691] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0044.691] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0044.691] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0044.691] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0044.692] LocalFree (hMem=0x416cb8) returned 0x0 [0044.692] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0044.692] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0044.692] LocalFree (hMem=0x416cb8) returned 0x0 [0044.692] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0044.692] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0044.692] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0044.692] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0044.692] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0044.692] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0044.692] GetCurrentObject (hdc=0x45010863, type=0x1) returned 0x1b00017 [0044.692] GetCurrentObject (hdc=0x45010863, type=0x2) returned 0x1900010 [0044.692] GetCurrentObject (hdc=0x45010863, type=0x7) returned 0x490500d1 [0044.692] GetCurrentObject (hdc=0x45010863, type=0x6) returned 0x18a002e [0044.693] SaveDC (hdc=0x45010863) returned 1 [0044.693] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4d040246 [0044.693] GetClipRgn (hdc=0x45010863, hrgn=0x4d040246) returned 0 [0044.693] SelectClipRgn (hdc=0x45010863, hrgn=0x6d040813) returned 2 [0044.693] DeleteObject (ho=0x4d040246) returned 1 [0044.694] DeleteObject (ho=0x6d040813) returned 1 [0044.694] OffsetViewportOrgEx (in: hdc=0x45010863, x=0, y=0, lppt=0x2629dcc | out: lppt=0x2629dcc) returned 1 [0044.694] DrawThemeParentBackground () returned 0x0 [0044.694] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0044.694] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0044.694] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0044.694] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0044.694] GetSystemMetrics (nIndex=42) returned 0 [0044.694] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0044.694] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0044.694] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0044.694] GetCurrentObject (hdc=0x45010863, type=0x1) returned 0x1b00017 [0044.694] GetCurrentObject (hdc=0x45010863, type=0x2) returned 0x1900010 [0044.694] GetCurrentObject (hdc=0x45010863, type=0x7) returned 0x490500d1 [0044.694] GetCurrentObject (hdc=0x45010863, type=0x6) returned 0x18a002e [0044.694] SaveDC (hdc=0x45010863) returned 2 [0044.694] GetNearestColor (hdc=0x45010863, color=0xf5f5f5) returned 0xf5f5f5 [0044.694] CreateSolidBrush (color=0xf5f5f5) returned 0x3e100244 [0044.694] FillRect (hDC=0x45010863, lprc=0x1ee2d0, hbr=0x3e100244) returned 1 [0044.695] DeleteObject (ho=0x3e100244) returned 1 [0044.695] RestoreDC (hdc=0x45010863, nSavedDC=-1) returned 1 [0044.695] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0044.695] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0044.695] GetSystemMetrics (nIndex=42) returned 0 [0044.695] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0044.695] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0044.695] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0044.695] GetCurrentObject (hdc=0x45010863, type=0x1) returned 0x1b00017 [0044.695] GetCurrentObject (hdc=0x45010863, type=0x2) returned 0x1900010 [0044.695] GetCurrentObject (hdc=0x45010863, type=0x7) returned 0x490500d1 [0044.695] GetCurrentObject (hdc=0x45010863, type=0x6) returned 0x18a002e [0044.695] SaveDC (hdc=0x45010863) returned 2 [0044.695] GetNearestColor (hdc=0x45010863, color=0xf5f5f5) returned 0xf5f5f5 [0044.695] CreateSolidBrush (color=0xf5f5f5) returned 0x3f100244 [0044.695] FillRect (hDC=0x45010863, lprc=0x1ee270, hbr=0x3f100244) returned 1 [0044.695] DeleteObject (ho=0x3f100244) returned 1 [0044.695] RestoreDC (hdc=0x45010863, nSavedDC=-1) returned 1 [0044.695] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0044.695] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0044.695] GetSystemMetrics (nIndex=42) returned 0 [0044.696] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0044.696] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0044.696] RestoreDC (hdc=0x45010863, nSavedDC=-1) returned 1 [0044.696] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010863) returned 0x0 [0044.696] IsAppThemed () returned 0x1 [0044.696] GetThemeAppProperties () returned 0x3 [0044.696] GetThemeAppProperties () returned 0x3 [0044.696] IsAppThemed () returned 0x1 [0044.696] GetThemeAppProperties () returned 0x3 [0044.696] GetThemeAppProperties () returned 0x3 [0044.696] IsThemePartDefined () returned 0x1 [0044.696] GdipCreateRegion (region=0x1ee764) returned 0x0 [0044.696] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0044.696] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0044.696] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0044.696] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0044.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0044.696] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0044.696] LocalFree (hMem=0x416cb8) returned 0x0 [0044.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0044.696] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0044.696] LocalFree (hMem=0x416cb8) returned 0x0 [0044.696] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0044.696] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0044.697] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0044.697] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0044.697] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0044.697] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0044.697] GetCurrentObject (hdc=0x45010863, type=0x1) returned 0x1b00017 [0044.697] GetCurrentObject (hdc=0x45010863, type=0x2) returned 0x1900010 [0044.697] GetCurrentObject (hdc=0x45010863, type=0x7) returned 0x490500d1 [0044.697] GetCurrentObject (hdc=0x45010863, type=0x6) returned 0x18a002e [0044.697] SaveDC (hdc=0x45010863) returned 1 [0044.697] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e040813 [0044.697] GetClipRgn (hdc=0x45010863, hrgn=0x6e040813) returned 0 [0044.697] SelectClipRgn (hdc=0x45010863, hrgn=0x4f040246) returned 2 [0044.697] DeleteObject (ho=0x6e040813) returned 1 [0044.697] DeleteObject (ho=0x4f040246) returned 1 [0044.697] OffsetViewportOrgEx (in: hdc=0x45010863, x=0, y=0, lppt=0x262a60c | out: lppt=0x262a60c) returned 1 [0044.697] IsAppThemed () returned 0x1 [0044.697] GetThemeAppProperties () returned 0x3 [0044.697] GetThemeAppProperties () returned 0x3 [0044.697] DrawThemeBackground () returned 0x0 [0044.698] RestoreDC (hdc=0x45010863, nSavedDC=-1) returned 1 [0044.698] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010863) returned 0x0 [0044.698] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0044.698] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0044.698] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0044.698] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0044.698] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0044.698] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0044.698] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0044.698] LocalFree (hMem=0x416cb8) returned 0x0 [0044.698] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0044.698] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0044.698] LocalFree (hMem=0x416cb8) returned 0x0 [0044.698] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0044.698] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0044.698] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0044.698] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0044.699] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0044.699] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0044.699] GetCurrentObject (hdc=0x45010863, type=0x1) returned 0x1b00017 [0044.699] GetCurrentObject (hdc=0x45010863, type=0x2) returned 0x1900010 [0044.699] GetCurrentObject (hdc=0x45010863, type=0x7) returned 0x490500d1 [0044.699] GetCurrentObject (hdc=0x45010863, type=0x6) returned 0x18a002e [0044.699] SaveDC (hdc=0x45010863) returned 1 [0044.699] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x50040246 [0044.699] GetClipRgn (hdc=0x45010863, hrgn=0x50040246) returned 0 [0044.699] SelectClipRgn (hdc=0x45010863, hrgn=0x6f040813) returned 2 [0044.699] DeleteObject (ho=0x50040246) returned 1 [0044.699] DeleteObject (ho=0x6f040813) returned 1 [0044.699] OffsetViewportOrgEx (in: hdc=0x45010863, x=0, y=0, lppt=0x262a8e0 | out: lppt=0x262a8e0) returned 1 [0044.699] IsAppThemed () returned 0x1 [0044.699] GetThemeAppProperties () returned 0x3 [0044.699] GetThemeAppProperties () returned 0x3 [0044.699] GetThemeBackgroundContentRect () returned 0x0 [0044.699] RestoreDC (hdc=0x45010863, nSavedDC=-1) returned 1 [0044.699] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010863) returned 0x0 [0044.699] IsAppThemed () returned 0x1 [0044.699] GetThemeAppProperties () returned 0x3 [0044.699] GetThemeAppProperties () returned 0x3 [0044.699] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0044.699] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0044.700] GetCurrentObject (hdc=0x45010863, type=0x1) returned 0x1b00017 [0044.700] GetCurrentObject (hdc=0x45010863, type=0x2) returned 0x1900010 [0044.700] GetCurrentObject (hdc=0x45010863, type=0x7) returned 0x490500d1 [0044.700] GetCurrentObject (hdc=0x45010863, type=0x6) returned 0x18a002e [0044.700] SaveDC (hdc=0x45010863) returned 1 [0044.700] GetTextAlign (hdc=0x45010863) returned 0x0 [0044.700] GetTextColor (hdc=0x45010863) returned 0x0 [0044.700] GetCurrentObject (hdc=0x45010863, type=0x6) returned 0x18a002e [0044.700] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0044.700] SelectObject (hdc=0x45010863, h=0x220a081a) returned 0x18a002e [0044.700] GetBkMode (hdc=0x45010863) returned 2 [0044.700] SetBkMode (hdc=0x45010863, mode=1) returned 2 [0044.700] DrawTextExW (in: hdc=0x45010863, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x262ac74 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0044.700] DrawTextExW (in: hdc=0x45010863, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x262ac74 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0044.701] RestoreDC (hdc=0x45010863, nSavedDC=-1) returned 1 [0044.701] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010863) returned 0x0 [0044.701] GetFocus () returned 0x201d0 [0044.701] IsAppThemed () returned 0x1 [0044.701] GetThemeAppProperties () returned 0x3 [0044.701] GetThemeAppProperties () returned 0x3 [0044.701] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0044.701] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x45010863, x1=0, y1=0, rop=0xcc0020) returned 1 [0044.701] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010863) returned 0x0 [0044.701] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0044.701] SelectObject (hdc=0x45010863, h=0x185000f) returned 0x490500d1 [0044.701] DeleteDC (hdc=0x45010863) returned 1 [0044.701] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0044.701] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0044.701] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x262ad70, cPoints=0x1 | out: lpPoints=0x262ad70) returned 42533703 [0044.701] WindowFromPoint (Point=0x381) returned 0x201d0 [0044.702] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0381) returned 0x1 [0044.702] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0044.702] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0044.702] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0044.702] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0044.702] GetSystemMetrics (nIndex=42) returned 0 [0044.702] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0044.702] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0044.702] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0044.702] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0044.702] GetCapture () returned 0x201d0 [0044.702] ReleaseCapture () returned 1 [0044.702] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0044.702] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0044.702] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0381) returned 0x1 [0044.702] IsWindowUnicode (hWnd=0x201d0) returned 1 [0044.702] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0044.702] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0381) returned 0x1 [0044.702] SetCursor (hCursor=0x10003) returned 0x10003 [0044.702] TranslateMessage (lpMsg=0x1ef250) returned 0 [0044.702] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0044.703] GetKeyState (nVirtKey=1) returned 0 [0044.703] GetKeyState (nVirtKey=2) returned 0 [0044.703] GetKeyState (nVirtKey=4) returned 0 [0044.703] GetKeyState (nVirtKey=5) returned 0 [0044.703] GetKeyState (nVirtKey=6) returned 0 [0044.703] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0044.703] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0044.703] WaitMessage () returned 1 [0047.588] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0047.589] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2910386) returned 0x1 [0047.589] IsWindowUnicode (hWnd=0x201d0) returned 1 [0047.589] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0047.589] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2910386) returned 0x1 [0047.589] SetCursor (hCursor=0x10003) returned 0x10003 [0047.589] TranslateMessage (lpMsg=0x1ef250) returned 0 [0047.589] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0047.590] GetKeyState (nVirtKey=1) returned 0 [0047.590] GetKeyState (nVirtKey=2) returned 0 [0047.590] GetKeyState (nVirtKey=4) returned 0 [0047.590] GetKeyState (nVirtKey=5) returned 0 [0047.590] GetKeyState (nVirtKey=6) returned 0 [0047.590] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0047.590] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0047.590] WaitMessage () returned 1 [0047.783] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0047.783] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2910386) returned 0x1 [0047.784] IsWindowUnicode (hWnd=0x201d0) returned 1 [0047.784] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0047.784] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2910386) returned 0x1 [0047.784] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0047.784] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e00241) returned 0x0 [0047.784] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0047.784] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0047.784] SetCursor (hCursor=0x10003) returned 0x10003 [0047.784] TranslateMessage (lpMsg=0x1ef250) returned 0 [0047.784] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0047.784] GetKeyState (nVirtKey=1) returned -127 [0047.784] GetKeyState (nVirtKey=2) returned 0 [0047.784] GetKeyState (nVirtKey=4) returned 0 [0047.784] GetKeyState (nVirtKey=5) returned 0 [0047.784] GetKeyState (nVirtKey=6) returned 0 [0047.785] IsWindowVisible (hWnd=0x201d0) returned 1 [0047.785] IsWindowEnabled (hWnd=0x201d0) returned 1 [0047.785] SetFocus (hWnd=0x201d0) returned 0x201d0 [0047.785] GetFocus () returned 0x201d0 [0047.785] GetFocus () returned 0x201d0 [0047.785] GetFocus () returned 0x201d0 [0047.785] GetKeyState (nVirtKey=1) returned -127 [0047.785] GetKeyState (nVirtKey=2) returned 0 [0047.785] GetKeyState (nVirtKey=4) returned 0 [0047.785] GetKeyState (nVirtKey=5) returned 0 [0047.785] GetKeyState (nVirtKey=6) returned 0 [0047.785] GetCapture () returned 0x0 [0047.785] SetCapture (hWnd=0x201d0) returned 0x0 [0047.785] GetKeyState (nVirtKey=1) returned -127 [0047.785] GetKeyState (nVirtKey=2) returned 0 [0047.785] GetKeyState (nVirtKey=4) returned 0 [0047.785] GetKeyState (nVirtKey=5) returned 0 [0047.785] GetKeyState (nVirtKey=6) returned 0 [0047.785] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0047.785] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0047.786] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0047.786] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0047.786] TranslateMessage (lpMsg=0x1ef250) returned 0 [0047.786] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0047.786] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0047.786] IsWindowUnicode (hWnd=0x201d0) returned 1 [0047.786] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0047.786] TranslateMessage (lpMsg=0x1ef250) returned 0 [0047.786] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0047.786] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x262ae94, cPoints=0x1 | out: lpPoints=0x262ae94) returned 42533703 [0047.786] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0047.786] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0047.786] UpdateWindow (hWnd=0x201d0) returned 1 [0047.787] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0047.787] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0047.787] CreateCompatibleDC (hdc=0x160107c7) returned 0x46010863 [0047.787] SelectObject (hdc=0x46010863, h=0x490500d1) returned 0x185000f [0047.788] GdipCreateFromHDC (hdc=0x46010863, graphics=0x1eea5c) returned 0x0 [0047.789] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0047.789] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0047.789] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0047.789] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0047.789] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0047.789] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0047.789] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0047.789] LocalFree (hMem=0x416cb8) returned 0x0 [0047.789] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0047.789] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0047.789] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0047.789] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0047.789] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0047.789] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd7d0dbd) returned 0x0 [0047.790] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0047.790] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0047.790] GetCurrentObject (hdc=0x46010863, type=0x1) returned 0x1b00017 [0047.790] GetCurrentObject (hdc=0x46010863, type=0x2) returned 0x1900010 [0047.790] GetCurrentObject (hdc=0x46010863, type=0x7) returned 0x490500d1 [0047.790] GetCurrentObject (hdc=0x46010863, type=0x6) returned 0x18a002e [0047.790] SaveDC (hdc=0x46010863) returned 1 [0047.790] GetNearestColor (hdc=0x46010863, color=0xf5f5f5) returned 0xf5f5f5 [0047.790] GetNearestColor (hdc=0x46010863, color=0x515151) returned 0x515151 [0047.791] GetNearestColor (hdc=0x46010863, color=0x0) returned 0x0 [0047.791] GetNearestColor (hdc=0x46010863, color=0x515151) returned 0x515151 [0047.791] GetNearestColor (hdc=0x46010863, color=0x0) returned 0x0 [0047.791] GetNearestColor (hdc=0x46010863, color=0xfafafa) returned 0xfafafa [0047.791] GetNearestColor (hdc=0x46010863, color=0xe0e0e0) returned 0xe0e0e0 [0047.791] GetNearestColor (hdc=0x46010863, color=0xdcdcdc) returned 0xdcdcdc [0047.791] GetNearestColor (hdc=0x46010863, color=0x0) returned 0x0 [0047.791] RestoreDC (hdc=0x46010863, nSavedDC=-1) returned 1 [0047.791] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010863) returned 0x0 [0047.791] IsAppThemed () returned 0x1 [0047.791] GetThemeAppProperties () returned 0x3 [0047.791] GetThemeAppProperties () returned 0x3 [0047.791] IsAppThemed () returned 0x1 [0047.791] GetThemeAppProperties () returned 0x3 [0047.791] GetThemeAppProperties () returned 0x3 [0047.792] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x262b598 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0047.792] IsAppThemed () returned 0x1 [0047.792] GetThemeAppProperties () returned 0x3 [0047.792] GetThemeAppProperties () returned 0x3 [0047.793] IsAppThemed () returned 0x1 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] IsAppThemed () returned 0x1 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] IsAppThemed () returned 0x1 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] IsThemePartDefined () returned 0x1 [0047.793] IsAppThemed () returned 0x1 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0047.793] IsAppThemed () returned 0x1 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] IsAppThemed () returned 0x1 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] GetThemeAppProperties () returned 0x3 [0047.793] IsThemePartDefined () returned 0x1 [0047.793] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0047.793] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0047.793] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0047.793] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0047.793] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0047.793] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0047.793] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0047.793] LocalFree (hMem=0x416cb8) returned 0x0 [0047.793] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0047.793] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0047.794] LocalFree (hMem=0x416cb8) returned 0x0 [0047.794] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0047.794] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0047.794] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0047.794] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0047.794] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0047.794] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0047.794] GetCurrentObject (hdc=0x46010863, type=0x1) returned 0x1b00017 [0047.794] GetCurrentObject (hdc=0x46010863, type=0x2) returned 0x1900010 [0047.794] GetCurrentObject (hdc=0x46010863, type=0x7) returned 0x490500d1 [0047.794] GetCurrentObject (hdc=0x46010863, type=0x6) returned 0x18a002e [0047.794] SaveDC (hdc=0x46010863) returned 1 [0047.794] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x70040813 [0047.794] GetClipRgn (hdc=0x46010863, hrgn=0x70040813) returned 0 [0047.794] SelectClipRgn (hdc=0x46010863, hrgn=0x54040246) returned 2 [0047.794] DeleteObject (ho=0x70040813) returned 1 [0047.794] DeleteObject (ho=0x54040246) returned 1 [0047.794] OffsetViewportOrgEx (in: hdc=0x46010863, x=0, y=0, lppt=0x262bc48 | out: lppt=0x262bc48) returned 1 [0047.794] DrawThemeParentBackground () returned 0x0 [0047.795] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0047.795] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0047.795] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0047.795] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0047.795] GetSystemMetrics (nIndex=42) returned 0 [0047.795] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0047.795] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0047.795] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0047.795] GetCurrentObject (hdc=0x46010863, type=0x1) returned 0x1b00017 [0047.795] GetCurrentObject (hdc=0x46010863, type=0x2) returned 0x1900010 [0047.795] GetCurrentObject (hdc=0x46010863, type=0x7) returned 0x490500d1 [0047.795] GetCurrentObject (hdc=0x46010863, type=0x6) returned 0x18a002e [0047.795] SaveDC (hdc=0x46010863) returned 2 [0047.795] GetNearestColor (hdc=0x46010863, color=0xf5f5f5) returned 0xf5f5f5 [0047.795] CreateSolidBrush (color=0xf5f5f5) returned 0x40100244 [0047.795] FillRect (hDC=0x46010863, lprc=0x1ee2d0, hbr=0x40100244) returned 1 [0047.796] DeleteObject (ho=0x40100244) returned 1 [0047.796] RestoreDC (hdc=0x46010863, nSavedDC=-1) returned 1 [0047.796] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0047.796] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0047.796] GetSystemMetrics (nIndex=42) returned 0 [0047.796] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0047.796] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0047.796] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0047.796] GetCurrentObject (hdc=0x46010863, type=0x1) returned 0x1b00017 [0047.796] GetCurrentObject (hdc=0x46010863, type=0x2) returned 0x1900010 [0047.796] GetCurrentObject (hdc=0x46010863, type=0x7) returned 0x490500d1 [0047.796] GetCurrentObject (hdc=0x46010863, type=0x6) returned 0x18a002e [0047.796] SaveDC (hdc=0x46010863) returned 2 [0047.796] GetNearestColor (hdc=0x46010863, color=0xf5f5f5) returned 0xf5f5f5 [0047.796] CreateSolidBrush (color=0xf5f5f5) returned 0x41100244 [0047.796] FillRect (hDC=0x46010863, lprc=0x1ee270, hbr=0x41100244) returned 1 [0047.796] DeleteObject (ho=0x41100244) returned 1 [0047.796] RestoreDC (hdc=0x46010863, nSavedDC=-1) returned 1 [0047.796] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0047.796] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0047.797] GetSystemMetrics (nIndex=42) returned 0 [0047.797] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0047.797] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0047.797] RestoreDC (hdc=0x46010863, nSavedDC=-1) returned 1 [0047.797] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010863) returned 0x0 [0047.797] IsAppThemed () returned 0x1 [0047.797] GetThemeAppProperties () returned 0x3 [0047.797] GetThemeAppProperties () returned 0x3 [0047.797] IsAppThemed () returned 0x1 [0047.797] GetThemeAppProperties () returned 0x3 [0047.797] GetThemeAppProperties () returned 0x3 [0047.797] IsThemePartDefined () returned 0x1 [0047.797] GdipCreateRegion (region=0x1ee764) returned 0x0 [0047.797] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0047.797] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0047.797] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0047.797] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0047.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0047.797] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0047.797] LocalFree (hMem=0x416cb8) returned 0x0 [0047.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0047.797] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0047.797] LocalFree (hMem=0x416cb8) returned 0x0 [0047.797] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0047.797] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0047.797] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0047.798] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0047.798] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0047.798] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0047.798] GetCurrentObject (hdc=0x46010863, type=0x1) returned 0x1b00017 [0047.798] GetCurrentObject (hdc=0x46010863, type=0x2) returned 0x1900010 [0047.798] GetCurrentObject (hdc=0x46010863, type=0x7) returned 0x490500d1 [0047.798] GetCurrentObject (hdc=0x46010863, type=0x6) returned 0x18a002e [0047.798] SaveDC (hdc=0x46010863) returned 1 [0047.798] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x55040246 [0047.798] GetClipRgn (hdc=0x46010863, hrgn=0x55040246) returned 0 [0047.798] SelectClipRgn (hdc=0x46010863, hrgn=0x72040813) returned 2 [0047.798] DeleteObject (ho=0x55040246) returned 1 [0047.798] DeleteObject (ho=0x72040813) returned 1 [0047.798] OffsetViewportOrgEx (in: hdc=0x46010863, x=0, y=0, lppt=0x262c488 | out: lppt=0x262c488) returned 1 [0047.798] IsAppThemed () returned 0x1 [0047.798] GetThemeAppProperties () returned 0x3 [0047.798] GetThemeAppProperties () returned 0x3 [0047.798] DrawThemeBackground () returned 0x0 [0047.798] RestoreDC (hdc=0x46010863, nSavedDC=-1) returned 1 [0047.799] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010863) returned 0x0 [0047.799] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0047.799] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0047.799] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0047.799] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0047.799] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0047.799] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0047.799] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0047.799] LocalFree (hMem=0x416cb8) returned 0x0 [0047.799] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0047.799] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0047.799] LocalFree (hMem=0x416cb8) returned 0x0 [0047.799] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0047.799] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0047.799] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0047.799] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0047.799] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0047.799] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0047.799] GetCurrentObject (hdc=0x46010863, type=0x1) returned 0x1b00017 [0047.799] GetCurrentObject (hdc=0x46010863, type=0x2) returned 0x1900010 [0047.799] GetCurrentObject (hdc=0x46010863, type=0x7) returned 0x490500d1 [0047.799] GetCurrentObject (hdc=0x46010863, type=0x6) returned 0x18a002e [0047.800] SaveDC (hdc=0x46010863) returned 1 [0047.800] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x73040813 [0047.800] GetClipRgn (hdc=0x46010863, hrgn=0x73040813) returned 0 [0047.800] SelectClipRgn (hdc=0x46010863, hrgn=0x56040246) returned 2 [0047.800] DeleteObject (ho=0x73040813) returned 1 [0047.800] DeleteObject (ho=0x56040246) returned 1 [0047.800] OffsetViewportOrgEx (in: hdc=0x46010863, x=0, y=0, lppt=0x262c75c | out: lppt=0x262c75c) returned 1 [0047.800] IsAppThemed () returned 0x1 [0047.800] GetThemeAppProperties () returned 0x3 [0047.800] GetThemeAppProperties () returned 0x3 [0047.800] GetThemeBackgroundContentRect () returned 0x0 [0047.800] RestoreDC (hdc=0x46010863, nSavedDC=-1) returned 1 [0047.800] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010863) returned 0x0 [0047.800] IsAppThemed () returned 0x1 [0047.800] GetThemeAppProperties () returned 0x3 [0047.800] GetThemeAppProperties () returned 0x3 [0047.800] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0047.800] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0047.800] GetCurrentObject (hdc=0x46010863, type=0x1) returned 0x1b00017 [0047.800] GetCurrentObject (hdc=0x46010863, type=0x2) returned 0x1900010 [0047.800] GetCurrentObject (hdc=0x46010863, type=0x7) returned 0x490500d1 [0047.800] GetCurrentObject (hdc=0x46010863, type=0x6) returned 0x18a002e [0047.800] SaveDC (hdc=0x46010863) returned 1 [0047.801] GetTextAlign (hdc=0x46010863) returned 0x0 [0047.801] GetTextColor (hdc=0x46010863) returned 0x0 [0047.801] GetCurrentObject (hdc=0x46010863, type=0x6) returned 0x18a002e [0047.801] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0047.801] SelectObject (hdc=0x46010863, h=0x220a081a) returned 0x18a002e [0047.801] GetBkMode (hdc=0x46010863) returned 2 [0047.801] SetBkMode (hdc=0x46010863, mode=1) returned 2 [0047.801] DrawTextExW (in: hdc=0x46010863, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x262caf0 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0047.801] DrawTextExW (in: hdc=0x46010863, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x262caf0 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0047.802] RestoreDC (hdc=0x46010863, nSavedDC=-1) returned 1 [0047.802] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010863) returned 0x0 [0047.802] GetFocus () returned 0x201d0 [0047.802] IsAppThemed () returned 0x1 [0047.802] GetThemeAppProperties () returned 0x3 [0047.802] GetThemeAppProperties () returned 0x3 [0047.802] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0047.802] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x46010863, x1=0, y1=0, rop=0xcc0020) returned 1 [0047.802] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010863) returned 0x0 [0047.803] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0047.803] SelectObject (hdc=0x46010863, h=0x185000f) returned 0x490500d1 [0047.803] DeleteDC (hdc=0x46010863) returned 1 [0047.803] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0047.803] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0047.803] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x262cbec, cPoints=0x1 | out: lpPoints=0x262cbec) returned 42533703 [0047.803] WindowFromPoint (Point=0x386) returned 0x201d0 [0047.803] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2910386) returned 0x1 [0047.803] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0047.803] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0047.803] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0047.803] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0047.803] GetSystemMetrics (nIndex=42) returned 0 [0047.803] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0047.803] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0047.804] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0047.804] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0047.804] GetCapture () returned 0x201d0 [0047.804] ReleaseCapture () returned 1 [0047.804] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0047.804] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0047.804] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2910386) returned 0x1 [0047.804] IsWindowUnicode (hWnd=0x201d0) returned 1 [0047.804] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0047.804] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2910386) returned 0x1 [0047.804] SetCursor (hCursor=0x10003) returned 0x10003 [0047.804] TranslateMessage (lpMsg=0x1ef250) returned 0 [0047.804] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0047.804] GetKeyState (nVirtKey=1) returned 1 [0047.804] GetKeyState (nVirtKey=2) returned 0 [0047.804] GetKeyState (nVirtKey=4) returned 0 [0047.804] GetKeyState (nVirtKey=5) returned 0 [0047.804] GetKeyState (nVirtKey=6) returned 0 [0047.804] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0047.804] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0047.804] WaitMessage () returned 1 [0050.581] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0050.582] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c3) returned 0x1 [0050.582] IsWindowUnicode (hWnd=0x201d0) returned 1 [0050.582] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0050.582] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c3) returned 0x1 [0050.582] SetCursor (hCursor=0x10003) returned 0x10003 [0050.583] TranslateMessage (lpMsg=0x1ef250) returned 0 [0050.583] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0050.583] GetKeyState (nVirtKey=1) returned 1 [0050.583] GetKeyState (nVirtKey=2) returned 0 [0050.583] GetKeyState (nVirtKey=4) returned 0 [0050.583] GetKeyState (nVirtKey=5) returned 0 [0050.583] GetKeyState (nVirtKey=6) returned 0 [0050.583] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0050.583] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0050.583] WaitMessage () returned 1 [0050.784] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0050.784] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c3) returned 0x1 [0050.784] IsWindowUnicode (hWnd=0x201d0) returned 1 [0050.784] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0050.784] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c3) returned 0x1 [0050.784] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0050.784] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dd027e) returned 0x0 [0050.784] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0050.784] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0050.785] SetCursor (hCursor=0x10003) returned 0x10003 [0050.785] TranslateMessage (lpMsg=0x1ef250) returned 0 [0050.785] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0050.785] GetKeyState (nVirtKey=1) returned -128 [0050.785] GetKeyState (nVirtKey=2) returned 0 [0050.785] GetKeyState (nVirtKey=4) returned 0 [0050.785] GetKeyState (nVirtKey=5) returned 0 [0050.785] GetKeyState (nVirtKey=6) returned 0 [0050.785] IsWindowVisible (hWnd=0x201d0) returned 1 [0050.785] IsWindowEnabled (hWnd=0x201d0) returned 1 [0050.785] SetFocus (hWnd=0x201d0) returned 0x201d0 [0050.785] GetFocus () returned 0x201d0 [0050.785] GetFocus () returned 0x201d0 [0050.785] GetFocus () returned 0x201d0 [0050.785] GetKeyState (nVirtKey=1) returned -128 [0050.785] GetKeyState (nVirtKey=2) returned 0 [0050.785] GetKeyState (nVirtKey=4) returned 0 [0050.785] GetKeyState (nVirtKey=5) returned 0 [0050.785] GetKeyState (nVirtKey=6) returned 0 [0050.785] GetCapture () returned 0x0 [0050.785] SetCapture (hWnd=0x201d0) returned 0x0 [0050.785] GetKeyState (nVirtKey=1) returned -128 [0050.785] GetKeyState (nVirtKey=2) returned 0 [0050.785] GetKeyState (nVirtKey=4) returned 0 [0050.786] GetKeyState (nVirtKey=5) returned 0 [0050.786] GetKeyState (nVirtKey=6) returned 0 [0050.786] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0050.786] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0050.786] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0050.786] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0050.786] TranslateMessage (lpMsg=0x1ef250) returned 0 [0050.786] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0050.786] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0050.786] IsWindowUnicode (hWnd=0x201d0) returned 1 [0050.786] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0050.786] TranslateMessage (lpMsg=0x1ef250) returned 0 [0050.786] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0050.786] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x262cd10, cPoints=0x1 | out: lpPoints=0x262cd10) returned 42533703 [0050.786] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0050.786] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0050.786] UpdateWindow (hWnd=0x201d0) returned 1 [0050.786] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0050.787] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0050.787] CreateCompatibleDC (hdc=0x120107ec) returned 0x3101084a [0050.787] SelectObject (hdc=0x3101084a, h=0x490500d1) returned 0x185000f [0050.787] GdipCreateFromHDC (hdc=0x3101084a, graphics=0x1eea5c) returned 0x0 [0050.788] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0050.788] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0050.788] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0050.788] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0050.788] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0050.788] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0050.788] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0050.788] LocalFree (hMem=0x416cb8) returned 0x0 [0050.788] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0050.788] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0050.788] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0050.788] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0050.788] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0050.788] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd7b0dbd) returned 0x0 [0050.789] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0050.789] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0050.789] GetCurrentObject (hdc=0x3101084a, type=0x1) returned 0x1b00017 [0050.789] GetCurrentObject (hdc=0x3101084a, type=0x2) returned 0x1900010 [0050.789] GetCurrentObject (hdc=0x3101084a, type=0x7) returned 0x490500d1 [0050.789] GetCurrentObject (hdc=0x3101084a, type=0x6) returned 0x18a002e [0050.789] SaveDC (hdc=0x3101084a) returned 1 [0050.789] GetNearestColor (hdc=0x3101084a, color=0xf5f5f5) returned 0xf5f5f5 [0050.789] GetNearestColor (hdc=0x3101084a, color=0x515151) returned 0x515151 [0050.789] GetNearestColor (hdc=0x3101084a, color=0x0) returned 0x0 [0050.789] GetNearestColor (hdc=0x3101084a, color=0x515151) returned 0x515151 [0050.789] GetNearestColor (hdc=0x3101084a, color=0x0) returned 0x0 [0050.789] GetNearestColor (hdc=0x3101084a, color=0xfafafa) returned 0xfafafa [0050.789] GetNearestColor (hdc=0x3101084a, color=0xe0e0e0) returned 0xe0e0e0 [0050.789] GetNearestColor (hdc=0x3101084a, color=0xdcdcdc) returned 0xdcdcdc [0050.789] GetNearestColor (hdc=0x3101084a, color=0x0) returned 0x0 [0050.789] RestoreDC (hdc=0x3101084a, nSavedDC=-1) returned 1 [0050.789] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3101084a) returned 0x0 [0050.790] IsAppThemed () returned 0x1 [0050.790] GetThemeAppProperties () returned 0x3 [0050.790] GetThemeAppProperties () returned 0x3 [0050.790] IsAppThemed () returned 0x1 [0050.790] GetThemeAppProperties () returned 0x3 [0050.790] GetThemeAppProperties () returned 0x3 [0050.790] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x262d414 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0050.791] IsAppThemed () returned 0x1 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] IsAppThemed () returned 0x1 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] IsAppThemed () returned 0x1 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] IsAppThemed () returned 0x1 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] IsThemePartDefined () returned 0x1 [0050.791] IsAppThemed () returned 0x1 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0050.791] IsAppThemed () returned 0x1 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] IsAppThemed () returned 0x1 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] GetThemeAppProperties () returned 0x3 [0050.791] IsThemePartDefined () returned 0x1 [0050.791] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0050.791] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0050.791] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0050.791] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0050.791] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0050.791] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0050.791] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0050.792] LocalFree (hMem=0x416cb8) returned 0x0 [0050.792] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0050.792] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0050.792] LocalFree (hMem=0x416cb8) returned 0x0 [0050.792] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0050.792] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0050.792] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0050.792] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0050.792] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0050.792] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0050.792] GetCurrentObject (hdc=0x3101084a, type=0x1) returned 0x1b00017 [0050.792] GetCurrentObject (hdc=0x3101084a, type=0x2) returned 0x1900010 [0050.792] GetCurrentObject (hdc=0x3101084a, type=0x7) returned 0x490500d1 [0050.792] GetCurrentObject (hdc=0x3101084a, type=0x6) returned 0x18a002e [0050.792] SaveDC (hdc=0x3101084a) returned 1 [0050.792] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x57040246 [0050.792] GetClipRgn (hdc=0x3101084a, hrgn=0x57040246) returned 0 [0050.792] SelectClipRgn (hdc=0x3101084a, hrgn=0x77040813) returned 2 [0050.792] DeleteObject (ho=0x57040246) returned 1 [0050.792] DeleteObject (ho=0x77040813) returned 1 [0050.792] OffsetViewportOrgEx (in: hdc=0x3101084a, x=0, y=0, lppt=0x262dac4 | out: lppt=0x262dac4) returned 1 [0050.792] DrawThemeParentBackground () returned 0x0 [0050.793] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0050.793] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0050.793] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0050.793] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0050.793] GetSystemMetrics (nIndex=42) returned 0 [0050.793] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0050.793] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0050.793] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0050.793] GetCurrentObject (hdc=0x3101084a, type=0x1) returned 0x1b00017 [0050.793] GetCurrentObject (hdc=0x3101084a, type=0x2) returned 0x1900010 [0050.793] GetCurrentObject (hdc=0x3101084a, type=0x7) returned 0x490500d1 [0050.793] GetCurrentObject (hdc=0x3101084a, type=0x6) returned 0x18a002e [0050.793] SaveDC (hdc=0x3101084a) returned 2 [0050.793] GetNearestColor (hdc=0x3101084a, color=0xf5f5f5) returned 0xf5f5f5 [0050.793] CreateSolidBrush (color=0xf5f5f5) returned 0x42100244 [0050.793] FillRect (hDC=0x3101084a, lprc=0x1ee2d0, hbr=0x42100244) returned 1 [0050.794] DeleteObject (ho=0x42100244) returned 1 [0050.794] RestoreDC (hdc=0x3101084a, nSavedDC=-1) returned 1 [0050.794] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0050.794] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0050.794] GetSystemMetrics (nIndex=42) returned 0 [0050.794] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0050.794] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0050.794] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0050.794] GetCurrentObject (hdc=0x3101084a, type=0x1) returned 0x1b00017 [0050.794] GetCurrentObject (hdc=0x3101084a, type=0x2) returned 0x1900010 [0050.794] GetCurrentObject (hdc=0x3101084a, type=0x7) returned 0x490500d1 [0050.794] GetCurrentObject (hdc=0x3101084a, type=0x6) returned 0x18a002e [0050.794] SaveDC (hdc=0x3101084a) returned 2 [0050.794] GetNearestColor (hdc=0x3101084a, color=0xf5f5f5) returned 0xf5f5f5 [0050.794] CreateSolidBrush (color=0xf5f5f5) returned 0x43100244 [0050.794] FillRect (hDC=0x3101084a, lprc=0x1ee270, hbr=0x43100244) returned 1 [0050.794] DeleteObject (ho=0x43100244) returned 1 [0050.794] RestoreDC (hdc=0x3101084a, nSavedDC=-1) returned 1 [0050.794] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0050.794] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0050.794] GetSystemMetrics (nIndex=42) returned 0 [0050.794] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0050.795] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0050.795] RestoreDC (hdc=0x3101084a, nSavedDC=-1) returned 1 [0050.795] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3101084a) returned 0x0 [0050.795] IsAppThemed () returned 0x1 [0050.795] GetThemeAppProperties () returned 0x3 [0050.795] GetThemeAppProperties () returned 0x3 [0050.795] IsAppThemed () returned 0x1 [0050.795] GetThemeAppProperties () returned 0x3 [0050.795] GetThemeAppProperties () returned 0x3 [0050.795] IsThemePartDefined () returned 0x1 [0050.795] GdipCreateRegion (region=0x1ee764) returned 0x0 [0050.795] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0050.795] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0050.795] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0050.795] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0050.795] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0050.795] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0050.795] LocalFree (hMem=0x416cb8) returned 0x0 [0050.795] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0050.795] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0050.795] LocalFree (hMem=0x416cb8) returned 0x0 [0050.795] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0050.795] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0050.795] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0050.795] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0050.796] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0050.796] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0050.796] GetCurrentObject (hdc=0x3101084a, type=0x1) returned 0x1b00017 [0050.796] GetCurrentObject (hdc=0x3101084a, type=0x2) returned 0x1900010 [0050.796] GetCurrentObject (hdc=0x3101084a, type=0x7) returned 0x490500d1 [0050.796] GetCurrentObject (hdc=0x3101084a, type=0x6) returned 0x18a002e [0050.796] SaveDC (hdc=0x3101084a) returned 1 [0050.796] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x78040813 [0050.796] GetClipRgn (hdc=0x3101084a, hrgn=0x78040813) returned 0 [0050.796] SelectClipRgn (hdc=0x3101084a, hrgn=0x59040246) returned 2 [0050.796] DeleteObject (ho=0x78040813) returned 1 [0050.796] DeleteObject (ho=0x59040246) returned 1 [0050.796] OffsetViewportOrgEx (in: hdc=0x3101084a, x=0, y=0, lppt=0x262e304 | out: lppt=0x262e304) returned 1 [0050.796] IsAppThemed () returned 0x1 [0050.796] GetThemeAppProperties () returned 0x3 [0050.796] GetThemeAppProperties () returned 0x3 [0050.796] DrawThemeBackground () returned 0x0 [0050.797] RestoreDC (hdc=0x3101084a, nSavedDC=-1) returned 1 [0050.797] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3101084a) returned 0x0 [0050.797] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0050.797] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0050.797] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0050.797] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0050.797] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0050.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0050.797] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0050.797] LocalFree (hMem=0x416cb8) returned 0x0 [0050.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0050.797] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0050.797] LocalFree (hMem=0x416cb8) returned 0x0 [0050.797] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0050.797] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0050.797] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0050.797] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0050.797] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0050.797] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0050.797] GetCurrentObject (hdc=0x3101084a, type=0x1) returned 0x1b00017 [0050.797] GetCurrentObject (hdc=0x3101084a, type=0x2) returned 0x1900010 [0050.798] GetCurrentObject (hdc=0x3101084a, type=0x7) returned 0x490500d1 [0050.798] GetCurrentObject (hdc=0x3101084a, type=0x6) returned 0x18a002e [0050.798] SaveDC (hdc=0x3101084a) returned 1 [0050.798] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a040246 [0050.798] GetClipRgn (hdc=0x3101084a, hrgn=0x5a040246) returned 0 [0050.798] SelectClipRgn (hdc=0x3101084a, hrgn=0x79040813) returned 2 [0050.798] DeleteObject (ho=0x5a040246) returned 1 [0050.798] DeleteObject (ho=0x79040813) returned 1 [0050.798] OffsetViewportOrgEx (in: hdc=0x3101084a, x=0, y=0, lppt=0x262e5d8 | out: lppt=0x262e5d8) returned 1 [0050.798] IsAppThemed () returned 0x1 [0050.798] GetThemeAppProperties () returned 0x3 [0050.798] GetThemeAppProperties () returned 0x3 [0050.798] GetThemeBackgroundContentRect () returned 0x0 [0050.798] RestoreDC (hdc=0x3101084a, nSavedDC=-1) returned 1 [0050.798] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3101084a) returned 0x0 [0050.798] IsAppThemed () returned 0x1 [0050.798] GetThemeAppProperties () returned 0x3 [0050.798] GetThemeAppProperties () returned 0x3 [0050.798] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0050.798] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0050.798] GetCurrentObject (hdc=0x3101084a, type=0x1) returned 0x1b00017 [0050.798] GetCurrentObject (hdc=0x3101084a, type=0x2) returned 0x1900010 [0050.798] GetCurrentObject (hdc=0x3101084a, type=0x7) returned 0x490500d1 [0050.798] GetCurrentObject (hdc=0x3101084a, type=0x6) returned 0x18a002e [0050.798] SaveDC (hdc=0x3101084a) returned 1 [0050.798] GetTextAlign (hdc=0x3101084a) returned 0x0 [0050.799] GetTextColor (hdc=0x3101084a) returned 0x0 [0050.799] GetCurrentObject (hdc=0x3101084a, type=0x6) returned 0x18a002e [0050.799] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0050.799] SelectObject (hdc=0x3101084a, h=0x220a081a) returned 0x18a002e [0050.799] GetBkMode (hdc=0x3101084a) returned 2 [0050.799] SetBkMode (hdc=0x3101084a, mode=1) returned 2 [0050.799] DrawTextExW (in: hdc=0x3101084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x262e96c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0050.799] DrawTextExW (in: hdc=0x3101084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x262e96c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0050.800] RestoreDC (hdc=0x3101084a, nSavedDC=-1) returned 1 [0050.800] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3101084a) returned 0x0 [0050.800] GetFocus () returned 0x201d0 [0050.800] IsAppThemed () returned 0x1 [0050.800] GetThemeAppProperties () returned 0x3 [0050.800] GetThemeAppProperties () returned 0x3 [0050.800] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0050.800] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x3101084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0050.800] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3101084a) returned 0x0 [0050.800] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0050.800] SelectObject (hdc=0x3101084a, h=0x185000f) returned 0x490500d1 [0050.800] DeleteDC (hdc=0x3101084a) returned 1 [0050.800] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0050.801] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0050.801] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x262ea68, cPoints=0x1 | out: lpPoints=0x262ea68) returned 42533703 [0050.801] WindowFromPoint (Point=0x3c3) returned 0x201d0 [0050.801] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c3) returned 0x1 [0050.801] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0050.801] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0050.801] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0050.801] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0050.801] GetSystemMetrics (nIndex=42) returned 0 [0050.801] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0050.801] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0050.801] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0050.801] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0050.801] GetCapture () returned 0x201d0 [0050.801] ReleaseCapture () returned 1 [0050.801] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0050.801] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0050.801] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c3) returned 0x1 [0050.801] IsWindowUnicode (hWnd=0x201d0) returned 1 [0050.801] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0050.801] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c3) returned 0x1 [0050.802] SetCursor (hCursor=0x10003) returned 0x10003 [0050.802] TranslateMessage (lpMsg=0x1ef250) returned 0 [0050.802] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0050.802] GetKeyState (nVirtKey=1) returned 0 [0050.802] GetKeyState (nVirtKey=2) returned 0 [0050.802] GetKeyState (nVirtKey=4) returned 0 [0050.802] GetKeyState (nVirtKey=5) returned 0 [0050.802] GetKeyState (nVirtKey=6) returned 0 [0050.802] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0050.802] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0050.802] WaitMessage () returned 1 [0053.639] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0053.640] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0053.640] IsWindowUnicode (hWnd=0x201d0) returned 1 [0053.640] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0053.640] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0053.640] SetCursor (hCursor=0x10003) returned 0x10003 [0053.641] TranslateMessage (lpMsg=0x1ef250) returned 0 [0053.641] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0053.641] GetKeyState (nVirtKey=1) returned 0 [0053.641] GetKeyState (nVirtKey=2) returned 0 [0053.641] GetKeyState (nVirtKey=4) returned 0 [0053.641] GetKeyState (nVirtKey=5) returned 0 [0053.641] GetKeyState (nVirtKey=6) returned 0 [0053.641] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0053.641] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0053.641] WaitMessage () returned 1 [0053.699] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0053.699] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0053.700] IsWindowUnicode (hWnd=0x201d0) returned 1 [0053.700] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0053.700] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0053.701] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0053.701] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e0029a) returned 0x0 [0053.701] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0053.701] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0053.701] SetCursor (hCursor=0x10003) returned 0x10003 [0053.701] TranslateMessage (lpMsg=0x1ef250) returned 0 [0053.701] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0053.701] GetKeyState (nVirtKey=1) returned -127 [0053.701] GetKeyState (nVirtKey=2) returned 0 [0053.701] GetKeyState (nVirtKey=4) returned 0 [0053.701] GetKeyState (nVirtKey=5) returned 0 [0053.701] GetKeyState (nVirtKey=6) returned 0 [0053.701] IsWindowVisible (hWnd=0x201d0) returned 1 [0053.701] IsWindowEnabled (hWnd=0x201d0) returned 1 [0053.701] SetFocus (hWnd=0x201d0) returned 0x201d0 [0053.701] GetFocus () returned 0x201d0 [0053.701] GetFocus () returned 0x201d0 [0053.701] GetFocus () returned 0x201d0 [0053.702] GetKeyState (nVirtKey=1) returned -127 [0053.702] GetKeyState (nVirtKey=2) returned 0 [0053.702] GetKeyState (nVirtKey=4) returned 0 [0053.702] GetKeyState (nVirtKey=5) returned 0 [0053.702] GetKeyState (nVirtKey=6) returned 0 [0053.702] GetCapture () returned 0x0 [0053.702] SetCapture (hWnd=0x201d0) returned 0x0 [0053.702] GetKeyState (nVirtKey=1) returned -127 [0053.702] GetKeyState (nVirtKey=2) returned 0 [0053.702] GetKeyState (nVirtKey=4) returned 0 [0053.702] GetKeyState (nVirtKey=5) returned 0 [0053.702] GetKeyState (nVirtKey=6) returned 0 [0053.702] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0053.702] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0053.702] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0053.702] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0053.702] TranslateMessage (lpMsg=0x1ef250) returned 0 [0053.702] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0053.702] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0053.702] IsWindowUnicode (hWnd=0x201d0) returned 1 [0053.702] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0053.702] TranslateMessage (lpMsg=0x1ef250) returned 0 [0053.702] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0053.702] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x262eb8c, cPoints=0x1 | out: lpPoints=0x262eb8c) returned 42533703 [0053.703] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0053.703] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0053.703] UpdateWindow (hWnd=0x201d0) returned 1 [0053.703] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0053.703] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0053.703] CreateCompatibleDC (hdc=0x120107ec) returned 0x3201084a [0053.703] SelectObject (hdc=0x3201084a, h=0x490500d1) returned 0x185000f [0053.703] GdipCreateFromHDC (hdc=0x3201084a, graphics=0x1eea5c) returned 0x0 [0053.704] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0053.704] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0053.704] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0053.704] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0053.704] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0053.704] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0053.705] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0053.705] LocalFree (hMem=0x416cb8) returned 0x0 [0053.705] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0053.705] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0053.705] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0053.705] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0053.705] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0053.705] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd790dbd) returned 0x0 [0053.705] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0053.705] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0053.706] GetCurrentObject (hdc=0x3201084a, type=0x1) returned 0x1b00017 [0053.706] GetCurrentObject (hdc=0x3201084a, type=0x2) returned 0x1900010 [0053.706] GetCurrentObject (hdc=0x3201084a, type=0x7) returned 0x490500d1 [0053.706] GetCurrentObject (hdc=0x3201084a, type=0x6) returned 0x18a002e [0053.706] SaveDC (hdc=0x3201084a) returned 1 [0053.706] GetNearestColor (hdc=0x3201084a, color=0xf5f5f5) returned 0xf5f5f5 [0053.706] GetNearestColor (hdc=0x3201084a, color=0x515151) returned 0x515151 [0053.706] GetNearestColor (hdc=0x3201084a, color=0x0) returned 0x0 [0053.706] GetNearestColor (hdc=0x3201084a, color=0x515151) returned 0x515151 [0053.706] GetNearestColor (hdc=0x3201084a, color=0x0) returned 0x0 [0053.706] GetNearestColor (hdc=0x3201084a, color=0xfafafa) returned 0xfafafa [0053.706] GetNearestColor (hdc=0x3201084a, color=0xe0e0e0) returned 0xe0e0e0 [0053.706] GetNearestColor (hdc=0x3201084a, color=0xdcdcdc) returned 0xdcdcdc [0053.706] GetNearestColor (hdc=0x3201084a, color=0x0) returned 0x0 [0053.706] RestoreDC (hdc=0x3201084a, nSavedDC=-1) returned 1 [0053.707] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3201084a) returned 0x0 [0053.707] IsAppThemed () returned 0x1 [0053.707] GetThemeAppProperties () returned 0x3 [0053.707] GetThemeAppProperties () returned 0x3 [0053.707] IsAppThemed () returned 0x1 [0053.707] GetThemeAppProperties () returned 0x3 [0053.707] GetThemeAppProperties () returned 0x3 [0053.707] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x262f290 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0053.707] IsAppThemed () returned 0x1 [0053.707] GetThemeAppProperties () returned 0x3 [0053.707] GetThemeAppProperties () returned 0x3 [0053.707] IsAppThemed () returned 0x1 [0053.707] GetThemeAppProperties () returned 0x3 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] IsAppThemed () returned 0x1 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] IsAppThemed () returned 0x1 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] IsThemePartDefined () returned 0x1 [0053.708] IsAppThemed () returned 0x1 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0053.708] IsAppThemed () returned 0x1 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] IsAppThemed () returned 0x1 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] GetThemeAppProperties () returned 0x3 [0053.708] IsThemePartDefined () returned 0x1 [0053.708] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0053.708] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0053.708] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0053.708] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0053.708] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0053.708] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0053.708] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0053.708] LocalFree (hMem=0x416cb8) returned 0x0 [0053.708] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0053.708] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0053.708] LocalFree (hMem=0x416cb8) returned 0x0 [0053.709] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0053.709] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0053.709] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0053.709] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0053.709] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0053.709] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0053.709] GetCurrentObject (hdc=0x3201084a, type=0x1) returned 0x1b00017 [0053.709] GetCurrentObject (hdc=0x3201084a, type=0x2) returned 0x1900010 [0053.709] GetCurrentObject (hdc=0x3201084a, type=0x7) returned 0x490500d1 [0053.709] GetCurrentObject (hdc=0x3201084a, type=0x6) returned 0x18a002e [0053.709] SaveDC (hdc=0x3201084a) returned 1 [0053.709] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a040813 [0053.709] GetClipRgn (hdc=0x3201084a, hrgn=0x7a040813) returned 0 [0053.709] SelectClipRgn (hdc=0x3201084a, hrgn=0x5e040246) returned 2 [0053.709] DeleteObject (ho=0x7a040813) returned 1 [0053.709] DeleteObject (ho=0x5e040246) returned 1 [0053.709] OffsetViewportOrgEx (in: hdc=0x3201084a, x=0, y=0, lppt=0x262f940 | out: lppt=0x262f940) returned 1 [0053.709] DrawThemeParentBackground () returned 0x0 [0053.709] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0053.710] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0053.710] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0053.710] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0053.710] GetSystemMetrics (nIndex=42) returned 0 [0053.710] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0053.710] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0053.710] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0053.710] GetCurrentObject (hdc=0x3201084a, type=0x1) returned 0x1b00017 [0053.710] GetCurrentObject (hdc=0x3201084a, type=0x2) returned 0x1900010 [0053.710] GetCurrentObject (hdc=0x3201084a, type=0x7) returned 0x490500d1 [0053.710] GetCurrentObject (hdc=0x3201084a, type=0x6) returned 0x18a002e [0053.710] SaveDC (hdc=0x3201084a) returned 2 [0053.710] GetNearestColor (hdc=0x3201084a, color=0xf5f5f5) returned 0xf5f5f5 [0053.710] CreateSolidBrush (color=0xf5f5f5) returned 0x44100244 [0053.710] FillRect (hDC=0x3201084a, lprc=0x1ee2d0, hbr=0x44100244) returned 1 [0053.710] DeleteObject (ho=0x44100244) returned 1 [0053.710] RestoreDC (hdc=0x3201084a, nSavedDC=-1) returned 1 [0053.710] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0053.710] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0053.711] GetSystemMetrics (nIndex=42) returned 0 [0053.711] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0053.711] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0053.711] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0053.711] GetCurrentObject (hdc=0x3201084a, type=0x1) returned 0x1b00017 [0053.711] GetCurrentObject (hdc=0x3201084a, type=0x2) returned 0x1900010 [0053.711] GetCurrentObject (hdc=0x3201084a, type=0x7) returned 0x490500d1 [0053.711] GetCurrentObject (hdc=0x3201084a, type=0x6) returned 0x18a002e [0053.711] SaveDC (hdc=0x3201084a) returned 2 [0053.711] GetNearestColor (hdc=0x3201084a, color=0xf5f5f5) returned 0xf5f5f5 [0053.711] CreateSolidBrush (color=0xf5f5f5) returned 0x45100244 [0053.711] FillRect (hDC=0x3201084a, lprc=0x1ee270, hbr=0x45100244) returned 1 [0053.711] DeleteObject (ho=0x45100244) returned 1 [0053.711] RestoreDC (hdc=0x3201084a, nSavedDC=-1) returned 1 [0053.711] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0053.711] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0053.711] GetSystemMetrics (nIndex=42) returned 0 [0053.711] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0053.711] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0053.711] RestoreDC (hdc=0x3201084a, nSavedDC=-1) returned 1 [0053.711] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3201084a) returned 0x0 [0053.711] IsAppThemed () returned 0x1 [0053.711] GetThemeAppProperties () returned 0x3 [0053.712] GetThemeAppProperties () returned 0x3 [0053.712] IsAppThemed () returned 0x1 [0053.712] GetThemeAppProperties () returned 0x3 [0053.712] GetThemeAppProperties () returned 0x3 [0053.712] IsThemePartDefined () returned 0x1 [0053.712] GdipCreateRegion (region=0x1ee764) returned 0x0 [0053.712] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0053.712] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0053.712] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0053.712] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0053.712] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0053.712] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0053.712] LocalFree (hMem=0x416cb8) returned 0x0 [0053.712] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0053.712] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0053.712] LocalFree (hMem=0x416cb8) returned 0x0 [0053.712] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0053.712] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0053.712] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0053.712] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0053.712] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0053.712] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0053.712] GetCurrentObject (hdc=0x3201084a, type=0x1) returned 0x1b00017 [0053.712] GetCurrentObject (hdc=0x3201084a, type=0x2) returned 0x1900010 [0053.712] GetCurrentObject (hdc=0x3201084a, type=0x7) returned 0x490500d1 [0053.712] GetCurrentObject (hdc=0x3201084a, type=0x6) returned 0x18a002e [0053.713] SaveDC (hdc=0x3201084a) returned 1 [0053.713] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f040246 [0053.713] GetClipRgn (hdc=0x3201084a, hrgn=0x5f040246) returned 0 [0053.713] SelectClipRgn (hdc=0x3201084a, hrgn=0x7c040813) returned 2 [0053.713] DeleteObject (ho=0x5f040246) returned 1 [0053.713] DeleteObject (ho=0x7c040813) returned 1 [0053.713] OffsetViewportOrgEx (in: hdc=0x3201084a, x=0, y=0, lppt=0x2630180 | out: lppt=0x2630180) returned 1 [0053.713] IsAppThemed () returned 0x1 [0053.713] GetThemeAppProperties () returned 0x3 [0053.713] GetThemeAppProperties () returned 0x3 [0053.713] DrawThemeBackground () returned 0x0 [0053.713] RestoreDC (hdc=0x3201084a, nSavedDC=-1) returned 1 [0053.713] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3201084a) returned 0x0 [0053.713] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0053.713] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0053.713] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0053.713] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0053.713] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0053.713] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0053.713] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0053.713] LocalFree (hMem=0x416cb8) returned 0x0 [0053.713] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0053.713] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0053.714] LocalFree (hMem=0x416cb8) returned 0x0 [0053.714] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0053.714] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0053.714] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0053.714] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0053.714] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0053.714] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0053.714] GetCurrentObject (hdc=0x3201084a, type=0x1) returned 0x1b00017 [0053.714] GetCurrentObject (hdc=0x3201084a, type=0x2) returned 0x1900010 [0053.714] GetCurrentObject (hdc=0x3201084a, type=0x7) returned 0x490500d1 [0053.714] GetCurrentObject (hdc=0x3201084a, type=0x6) returned 0x18a002e [0053.714] SaveDC (hdc=0x3201084a) returned 1 [0053.714] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d040813 [0053.714] GetClipRgn (hdc=0x3201084a, hrgn=0x7d040813) returned 0 [0053.714] SelectClipRgn (hdc=0x3201084a, hrgn=0x60040246) returned 2 [0053.714] DeleteObject (ho=0x7d040813) returned 1 [0053.714] DeleteObject (ho=0x60040246) returned 1 [0053.714] OffsetViewportOrgEx (in: hdc=0x3201084a, x=0, y=0, lppt=0x2630454 | out: lppt=0x2630454) returned 1 [0053.715] IsAppThemed () returned 0x1 [0053.715] GetThemeAppProperties () returned 0x3 [0053.715] GetThemeAppProperties () returned 0x3 [0053.715] GetThemeBackgroundContentRect () returned 0x0 [0053.715] RestoreDC (hdc=0x3201084a, nSavedDC=-1) returned 1 [0053.715] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3201084a) returned 0x0 [0053.715] IsAppThemed () returned 0x1 [0053.715] GetThemeAppProperties () returned 0x3 [0053.715] GetThemeAppProperties () returned 0x3 [0053.715] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0053.715] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0053.715] GetCurrentObject (hdc=0x3201084a, type=0x1) returned 0x1b00017 [0053.715] GetCurrentObject (hdc=0x3201084a, type=0x2) returned 0x1900010 [0053.715] GetCurrentObject (hdc=0x3201084a, type=0x7) returned 0x490500d1 [0053.715] GetCurrentObject (hdc=0x3201084a, type=0x6) returned 0x18a002e [0053.715] SaveDC (hdc=0x3201084a) returned 1 [0053.715] GetTextAlign (hdc=0x3201084a) returned 0x0 [0053.715] GetTextColor (hdc=0x3201084a) returned 0x0 [0053.715] GetCurrentObject (hdc=0x3201084a, type=0x6) returned 0x18a002e [0053.715] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0053.715] SelectObject (hdc=0x3201084a, h=0x220a081a) returned 0x18a002e [0053.716] GetBkMode (hdc=0x3201084a) returned 2 [0053.716] SetBkMode (hdc=0x3201084a, mode=1) returned 2 [0053.716] DrawTextExW (in: hdc=0x3201084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26307e8 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0053.716] DrawTextExW (in: hdc=0x3201084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26307e8 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0053.716] RestoreDC (hdc=0x3201084a, nSavedDC=-1) returned 1 [0053.716] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3201084a) returned 0x0 [0053.716] GetFocus () returned 0x201d0 [0053.716] IsAppThemed () returned 0x1 [0053.716] GetThemeAppProperties () returned 0x3 [0053.716] GetThemeAppProperties () returned 0x3 [0053.716] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0053.716] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x3201084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0053.716] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3201084a) returned 0x0 [0053.716] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0053.717] SelectObject (hdc=0x3201084a, h=0x185000f) returned 0x490500d1 [0053.717] DeleteDC (hdc=0x3201084a) returned 1 [0053.717] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0053.717] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0053.717] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26308e4, cPoints=0x1 | out: lpPoints=0x26308e4) returned 42533703 [0053.717] WindowFromPoint (Point=0x3df) returned 0x201d0 [0053.717] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0053.717] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0053.717] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0053.717] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0053.717] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0053.717] GetSystemMetrics (nIndex=42) returned 0 [0053.717] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0053.717] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0053.718] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0053.718] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0053.718] GetCapture () returned 0x201d0 [0053.718] ReleaseCapture () returned 1 [0053.718] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0053.718] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0053.718] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0053.718] IsWindowUnicode (hWnd=0x201d0) returned 1 [0053.718] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0053.718] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0053.718] SetCursor (hCursor=0x10003) returned 0x10003 [0053.718] TranslateMessage (lpMsg=0x1ef250) returned 0 [0053.718] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0053.718] GetKeyState (nVirtKey=1) returned 1 [0053.718] GetKeyState (nVirtKey=2) returned 0 [0053.719] GetKeyState (nVirtKey=4) returned 0 [0053.719] GetKeyState (nVirtKey=5) returned 0 [0053.719] GetKeyState (nVirtKey=6) returned 0 [0053.719] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0053.719] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0053.719] WaitMessage () returned 1 [0056.759] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0056.759] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203ee) returned 0x1 [0056.759] IsWindowUnicode (hWnd=0x201d0) returned 1 [0056.759] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0056.759] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203ee) returned 0x1 [0056.759] SetCursor (hCursor=0x10003) returned 0x10003 [0056.759] TranslateMessage (lpMsg=0x1ef250) returned 0 [0056.759] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0056.759] GetKeyState (nVirtKey=1) returned 1 [0056.759] GetKeyState (nVirtKey=2) returned 0 [0056.759] GetKeyState (nVirtKey=4) returned 0 [0056.759] GetKeyState (nVirtKey=5) returned 0 [0056.759] GetKeyState (nVirtKey=6) returned 0 [0056.759] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0056.759] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0056.759] WaitMessage () returned 1 [0056.835] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0056.835] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203ee) returned 0x1 [0056.835] IsWindowUnicode (hWnd=0x201d0) returned 1 [0056.835] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0056.835] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203ee) returned 0x1 [0056.836] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0056.836] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e102a9) returned 0x0 [0056.836] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0056.836] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0056.836] SetCursor (hCursor=0x10003) returned 0x10003 [0056.837] TranslateMessage (lpMsg=0x1ef250) returned 0 [0056.837] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0056.837] GetKeyState (nVirtKey=1) returned -128 [0056.837] GetKeyState (nVirtKey=2) returned 0 [0056.837] GetKeyState (nVirtKey=4) returned 0 [0056.837] GetKeyState (nVirtKey=5) returned 0 [0056.837] GetKeyState (nVirtKey=6) returned 0 [0056.837] IsWindowVisible (hWnd=0x201d0) returned 1 [0056.837] IsWindowEnabled (hWnd=0x201d0) returned 1 [0056.837] SetFocus (hWnd=0x201d0) returned 0x201d0 [0056.837] GetFocus () returned 0x201d0 [0056.837] GetFocus () returned 0x201d0 [0056.837] GetFocus () returned 0x201d0 [0056.837] GetKeyState (nVirtKey=1) returned -128 [0056.837] GetKeyState (nVirtKey=2) returned 0 [0056.837] GetKeyState (nVirtKey=4) returned 0 [0056.837] GetKeyState (nVirtKey=5) returned 0 [0056.837] GetKeyState (nVirtKey=6) returned 0 [0056.837] GetCapture () returned 0x0 [0056.837] SetCapture (hWnd=0x201d0) returned 0x0 [0056.837] GetKeyState (nVirtKey=1) returned -128 [0056.837] GetKeyState (nVirtKey=2) returned 0 [0056.837] GetKeyState (nVirtKey=4) returned 0 [0056.837] GetKeyState (nVirtKey=5) returned 0 [0056.837] GetKeyState (nVirtKey=6) returned 0 [0056.837] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0056.837] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0056.837] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0056.837] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0056.837] TranslateMessage (lpMsg=0x1ef250) returned 0 [0056.837] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0056.837] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0056.837] IsWindowUnicode (hWnd=0x201d0) returned 1 [0056.838] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0056.838] TranslateMessage (lpMsg=0x1ef250) returned 0 [0056.838] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0056.838] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2630a08, cPoints=0x1 | out: lpPoints=0x2630a08) returned 42533703 [0056.838] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0056.838] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0056.838] UpdateWindow (hWnd=0x201d0) returned 1 [0056.838] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0056.838] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0056.838] CreateCompatibleDC (hdc=0x120107ec) returned 0x3301084a [0056.838] SelectObject (hdc=0x3301084a, h=0x490500d1) returned 0x185000f [0056.838] GdipCreateFromHDC (hdc=0x3301084a, graphics=0x1eea5c) returned 0x0 [0056.838] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0056.838] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0056.838] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0056.838] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0056.838] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0056.838] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0056.838] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0056.838] LocalFree (hMem=0x416cb8) returned 0x0 [0056.839] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0056.839] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0056.839] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0056.839] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0056.839] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0056.839] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd770dbd) returned 0x0 [0056.839] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0056.839] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0056.839] GetCurrentObject (hdc=0x3301084a, type=0x1) returned 0x1b00017 [0056.839] GetCurrentObject (hdc=0x3301084a, type=0x2) returned 0x1900010 [0056.839] GetCurrentObject (hdc=0x3301084a, type=0x7) returned 0x490500d1 [0056.839] GetCurrentObject (hdc=0x3301084a, type=0x6) returned 0x18a002e [0056.839] SaveDC (hdc=0x3301084a) returned 1 [0056.839] GetNearestColor (hdc=0x3301084a, color=0xf5f5f5) returned 0xf5f5f5 [0056.839] GetNearestColor (hdc=0x3301084a, color=0x515151) returned 0x515151 [0056.839] GetNearestColor (hdc=0x3301084a, color=0x0) returned 0x0 [0056.839] GetNearestColor (hdc=0x3301084a, color=0x515151) returned 0x515151 [0056.839] GetNearestColor (hdc=0x3301084a, color=0x0) returned 0x0 [0056.839] GetNearestColor (hdc=0x3301084a, color=0xfafafa) returned 0xfafafa [0056.839] GetNearestColor (hdc=0x3301084a, color=0xe0e0e0) returned 0xe0e0e0 [0056.840] GetNearestColor (hdc=0x3301084a, color=0xdcdcdc) returned 0xdcdcdc [0056.840] GetNearestColor (hdc=0x3301084a, color=0x0) returned 0x0 [0056.840] RestoreDC (hdc=0x3301084a, nSavedDC=-1) returned 1 [0056.840] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3301084a) returned 0x0 [0056.840] IsAppThemed () returned 0x1 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] IsAppThemed () returned 0x1 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x263110c | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0056.840] IsAppThemed () returned 0x1 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] IsAppThemed () returned 0x1 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] IsAppThemed () returned 0x1 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] IsAppThemed () returned 0x1 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] IsThemePartDefined () returned 0x1 [0056.840] IsAppThemed () returned 0x1 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] GetThemeAppProperties () returned 0x3 [0056.840] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0056.841] IsAppThemed () returned 0x1 [0056.841] GetThemeAppProperties () returned 0x3 [0056.841] GetThemeAppProperties () returned 0x3 [0056.841] IsAppThemed () returned 0x1 [0056.841] GetThemeAppProperties () returned 0x3 [0056.841] GetThemeAppProperties () returned 0x3 [0056.841] IsThemePartDefined () returned 0x1 [0056.841] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0056.841] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0056.841] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0056.841] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0056.841] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0056.841] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0056.841] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0056.841] LocalFree (hMem=0x416cb8) returned 0x0 [0056.841] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0056.841] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0056.841] LocalFree (hMem=0x416cb8) returned 0x0 [0056.841] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0056.841] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0056.841] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0056.841] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0056.841] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0056.841] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0056.841] GetCurrentObject (hdc=0x3301084a, type=0x1) returned 0x1b00017 [0056.841] GetCurrentObject (hdc=0x3301084a, type=0x2) returned 0x1900010 [0056.841] GetCurrentObject (hdc=0x3301084a, type=0x7) returned 0x490500d1 [0056.842] GetCurrentObject (hdc=0x3301084a, type=0x6) returned 0x18a002e [0056.842] SaveDC (hdc=0x3301084a) returned 1 [0056.842] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x61040246 [0056.842] GetClipRgn (hdc=0x3301084a, hrgn=0x61040246) returned 0 [0056.842] SelectClipRgn (hdc=0x3301084a, hrgn=0x81040813) returned 2 [0056.842] DeleteObject (ho=0x61040246) returned 1 [0056.842] DeleteObject (ho=0x81040813) returned 1 [0056.842] OffsetViewportOrgEx (in: hdc=0x3301084a, x=0, y=0, lppt=0x26317bc | out: lppt=0x26317bc) returned 1 [0056.842] DrawThemeParentBackground () returned 0x0 [0056.842] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0056.842] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0056.842] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0056.842] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0056.842] GetSystemMetrics (nIndex=42) returned 0 [0056.842] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0056.842] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0056.842] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0056.842] GetCurrentObject (hdc=0x3301084a, type=0x1) returned 0x1b00017 [0056.842] GetCurrentObject (hdc=0x3301084a, type=0x2) returned 0x1900010 [0056.842] GetCurrentObject (hdc=0x3301084a, type=0x7) returned 0x490500d1 [0056.842] GetCurrentObject (hdc=0x3301084a, type=0x6) returned 0x18a002e [0056.842] SaveDC (hdc=0x3301084a) returned 2 [0056.842] GetNearestColor (hdc=0x3301084a, color=0xf5f5f5) returned 0xf5f5f5 [0056.843] CreateSolidBrush (color=0xf5f5f5) returned 0x46100244 [0056.843] FillRect (hDC=0x3301084a, lprc=0x1ee2d0, hbr=0x46100244) returned 1 [0056.843] DeleteObject (ho=0x46100244) returned 1 [0056.843] RestoreDC (hdc=0x3301084a, nSavedDC=-1) returned 1 [0056.843] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0056.843] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0056.843] GetSystemMetrics (nIndex=42) returned 0 [0056.843] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0056.843] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0056.843] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0056.843] GetCurrentObject (hdc=0x3301084a, type=0x1) returned 0x1b00017 [0056.843] GetCurrentObject (hdc=0x3301084a, type=0x2) returned 0x1900010 [0056.843] GetCurrentObject (hdc=0x3301084a, type=0x7) returned 0x490500d1 [0056.843] GetCurrentObject (hdc=0x3301084a, type=0x6) returned 0x18a002e [0056.843] SaveDC (hdc=0x3301084a) returned 2 [0056.843] GetNearestColor (hdc=0x3301084a, color=0xf5f5f5) returned 0xf5f5f5 [0056.843] CreateSolidBrush (color=0xf5f5f5) returned 0x47100244 [0056.843] FillRect (hDC=0x3301084a, lprc=0x1ee270, hbr=0x47100244) returned 1 [0056.843] DeleteObject (ho=0x47100244) returned 1 [0056.843] RestoreDC (hdc=0x3301084a, nSavedDC=-1) returned 1 [0056.843] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0056.843] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0056.844] GetSystemMetrics (nIndex=42) returned 0 [0056.844] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0056.844] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0056.844] RestoreDC (hdc=0x3301084a, nSavedDC=-1) returned 1 [0056.844] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3301084a) returned 0x0 [0056.844] IsAppThemed () returned 0x1 [0056.844] GetThemeAppProperties () returned 0x3 [0056.844] GetThemeAppProperties () returned 0x3 [0056.844] IsAppThemed () returned 0x1 [0056.844] GetThemeAppProperties () returned 0x3 [0056.844] GetThemeAppProperties () returned 0x3 [0056.844] IsThemePartDefined () returned 0x1 [0056.844] GdipCreateRegion (region=0x1ee764) returned 0x0 [0056.844] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0056.844] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0056.844] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0056.844] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0056.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0056.844] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0056.844] LocalFree (hMem=0x416cb8) returned 0x0 [0056.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0056.844] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0056.844] LocalFree (hMem=0x416cb8) returned 0x0 [0056.844] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0056.844] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0056.845] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0056.845] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0056.845] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0056.845] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0056.845] GetCurrentObject (hdc=0x3301084a, type=0x1) returned 0x1b00017 [0056.845] GetCurrentObject (hdc=0x3301084a, type=0x2) returned 0x1900010 [0056.845] GetCurrentObject (hdc=0x3301084a, type=0x7) returned 0x490500d1 [0056.845] GetCurrentObject (hdc=0x3301084a, type=0x6) returned 0x18a002e [0056.845] SaveDC (hdc=0x3301084a) returned 1 [0056.845] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x82040813 [0056.845] GetClipRgn (hdc=0x3301084a, hrgn=0x82040813) returned 0 [0056.845] SelectClipRgn (hdc=0x3301084a, hrgn=0x63040246) returned 2 [0056.845] DeleteObject (ho=0x82040813) returned 1 [0056.845] DeleteObject (ho=0x63040246) returned 1 [0056.845] OffsetViewportOrgEx (in: hdc=0x3301084a, x=0, y=0, lppt=0x2631ffc | out: lppt=0x2631ffc) returned 1 [0056.845] IsAppThemed () returned 0x1 [0056.845] GetThemeAppProperties () returned 0x3 [0056.845] GetThemeAppProperties () returned 0x3 [0056.845] DrawThemeBackground () returned 0x0 [0056.845] RestoreDC (hdc=0x3301084a, nSavedDC=-1) returned 1 [0056.845] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3301084a) returned 0x0 [0056.845] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0056.846] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0056.846] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0056.846] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0056.846] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0056.846] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0056.846] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0056.846] LocalFree (hMem=0x416cb8) returned 0x0 [0056.846] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0056.846] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0056.846] LocalFree (hMem=0x416cb8) returned 0x0 [0056.846] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0056.846] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0056.846] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0056.846] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0056.846] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0056.846] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0056.846] GetCurrentObject (hdc=0x3301084a, type=0x1) returned 0x1b00017 [0056.846] GetCurrentObject (hdc=0x3301084a, type=0x2) returned 0x1900010 [0056.846] GetCurrentObject (hdc=0x3301084a, type=0x7) returned 0x490500d1 [0056.846] GetCurrentObject (hdc=0x3301084a, type=0x6) returned 0x18a002e [0056.846] SaveDC (hdc=0x3301084a) returned 1 [0056.846] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x64040246 [0056.846] GetClipRgn (hdc=0x3301084a, hrgn=0x64040246) returned 0 [0056.846] SelectClipRgn (hdc=0x3301084a, hrgn=0x83040813) returned 2 [0056.847] DeleteObject (ho=0x64040246) returned 1 [0056.847] DeleteObject (ho=0x83040813) returned 1 [0056.847] OffsetViewportOrgEx (in: hdc=0x3301084a, x=0, y=0, lppt=0x26322d0 | out: lppt=0x26322d0) returned 1 [0056.847] IsAppThemed () returned 0x1 [0056.847] GetThemeAppProperties () returned 0x3 [0056.847] GetThemeAppProperties () returned 0x3 [0056.847] GetThemeBackgroundContentRect () returned 0x0 [0056.847] RestoreDC (hdc=0x3301084a, nSavedDC=-1) returned 1 [0056.847] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3301084a) returned 0x0 [0056.847] IsAppThemed () returned 0x1 [0056.847] GetThemeAppProperties () returned 0x3 [0056.847] GetThemeAppProperties () returned 0x3 [0056.847] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0056.847] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0056.847] GetCurrentObject (hdc=0x3301084a, type=0x1) returned 0x1b00017 [0056.847] GetCurrentObject (hdc=0x3301084a, type=0x2) returned 0x1900010 [0056.847] GetCurrentObject (hdc=0x3301084a, type=0x7) returned 0x490500d1 [0056.847] GetCurrentObject (hdc=0x3301084a, type=0x6) returned 0x18a002e [0056.847] SaveDC (hdc=0x3301084a) returned 1 [0056.847] GetTextAlign (hdc=0x3301084a) returned 0x0 [0056.847] GetTextColor (hdc=0x3301084a) returned 0x0 [0056.847] GetCurrentObject (hdc=0x3301084a, type=0x6) returned 0x18a002e [0056.847] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0056.847] SelectObject (hdc=0x3301084a, h=0x220a081a) returned 0x18a002e [0056.848] GetBkMode (hdc=0x3301084a) returned 2 [0056.848] SetBkMode (hdc=0x3301084a, mode=1) returned 2 [0056.848] DrawTextExW (in: hdc=0x3301084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2632664 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0056.848] DrawTextExW (in: hdc=0x3301084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2632664 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0056.848] RestoreDC (hdc=0x3301084a, nSavedDC=-1) returned 1 [0056.848] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3301084a) returned 0x0 [0056.848] GetFocus () returned 0x201d0 [0056.848] IsAppThemed () returned 0x1 [0056.848] GetThemeAppProperties () returned 0x3 [0056.848] GetThemeAppProperties () returned 0x3 [0056.848] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0056.848] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x3301084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0056.848] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3301084a) returned 0x0 [0056.848] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0056.848] SelectObject (hdc=0x3301084a, h=0x185000f) returned 0x490500d1 [0056.848] DeleteDC (hdc=0x3301084a) returned 1 [0056.848] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0056.848] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0056.849] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2632760, cPoints=0x1 | out: lpPoints=0x2632760) returned 42533703 [0056.849] WindowFromPoint (Point=0x3ee) returned 0x201d0 [0056.849] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203ee) returned 0x1 [0056.849] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0056.849] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0056.849] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0056.849] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0056.849] GetSystemMetrics (nIndex=42) returned 0 [0056.849] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0056.849] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0056.849] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0056.849] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0056.849] GetCapture () returned 0x201d0 [0056.849] ReleaseCapture () returned 1 [0056.849] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0056.849] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0056.849] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203ee) returned 0x1 [0056.849] IsWindowUnicode (hWnd=0x201d0) returned 1 [0056.849] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0056.849] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203ee) returned 0x1 [0056.849] SetCursor (hCursor=0x10003) returned 0x10003 [0056.850] TranslateMessage (lpMsg=0x1ef250) returned 0 [0056.850] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0056.850] GetKeyState (nVirtKey=1) returned 0 [0056.850] GetKeyState (nVirtKey=2) returned 0 [0056.850] GetKeyState (nVirtKey=4) returned 0 [0056.850] GetKeyState (nVirtKey=5) returned 0 [0056.850] GetKeyState (nVirtKey=6) returned 0 [0056.850] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0056.850] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0056.850] WaitMessage () returned 1 [0059.878] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0059.878] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0059.878] IsWindowUnicode (hWnd=0x201d0) returned 1 [0059.878] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0059.878] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0059.878] SetCursor (hCursor=0x10003) returned 0x10003 [0059.878] TranslateMessage (lpMsg=0x1ef250) returned 0 [0059.878] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0059.878] GetKeyState (nVirtKey=1) returned 0 [0059.878] GetKeyState (nVirtKey=2) returned 0 [0059.878] GetKeyState (nVirtKey=4) returned 0 [0059.878] GetKeyState (nVirtKey=5) returned 0 [0059.878] GetKeyState (nVirtKey=6) returned 0 [0059.878] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0059.878] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0059.878] WaitMessage () returned 1 [0059.960] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0059.960] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0059.960] IsWindowUnicode (hWnd=0x201d0) returned 1 [0059.960] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0059.960] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0059.960] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0059.960] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e0029a) returned 0x0 [0059.961] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0059.961] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0059.961] SetCursor (hCursor=0x10003) returned 0x10003 [0059.961] TranslateMessage (lpMsg=0x1ef250) returned 0 [0059.961] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0059.961] GetKeyState (nVirtKey=1) returned -127 [0059.961] GetKeyState (nVirtKey=2) returned 0 [0059.961] GetKeyState (nVirtKey=4) returned 0 [0059.961] GetKeyState (nVirtKey=5) returned 0 [0059.961] GetKeyState (nVirtKey=6) returned 0 [0059.961] IsWindowVisible (hWnd=0x201d0) returned 1 [0059.961] IsWindowEnabled (hWnd=0x201d0) returned 1 [0059.961] SetFocus (hWnd=0x201d0) returned 0x201d0 [0059.961] GetFocus () returned 0x201d0 [0059.961] GetFocus () returned 0x201d0 [0059.961] GetFocus () returned 0x201d0 [0059.961] GetKeyState (nVirtKey=1) returned -127 [0059.961] GetKeyState (nVirtKey=2) returned 0 [0059.961] GetKeyState (nVirtKey=4) returned 0 [0059.961] GetKeyState (nVirtKey=5) returned 0 [0059.961] GetKeyState (nVirtKey=6) returned 0 [0059.961] GetCapture () returned 0x0 [0059.961] SetCapture (hWnd=0x201d0) returned 0x0 [0059.961] GetKeyState (nVirtKey=1) returned -127 [0059.961] GetKeyState (nVirtKey=2) returned 0 [0059.961] GetKeyState (nVirtKey=4) returned 0 [0059.961] GetKeyState (nVirtKey=5) returned 0 [0059.961] GetKeyState (nVirtKey=6) returned 0 [0059.961] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0059.961] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0059.961] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0059.961] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0059.961] TranslateMessage (lpMsg=0x1ef250) returned 0 [0059.961] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0059.962] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0059.962] IsWindowUnicode (hWnd=0x201d0) returned 1 [0059.962] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0059.962] TranslateMessage (lpMsg=0x1ef250) returned 0 [0059.962] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0059.962] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2632884, cPoints=0x1 | out: lpPoints=0x2632884) returned 42533703 [0059.962] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0059.962] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0059.962] UpdateWindow (hWnd=0x201d0) returned 1 [0059.962] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0059.962] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0059.962] CreateCompatibleDC (hdc=0x120107ec) returned 0x3701084a [0059.962] SelectObject (hdc=0x3701084a, h=0x490500d1) returned 0x185000f [0059.962] GdipCreateFromHDC (hdc=0x3701084a, graphics=0x1eea5c) returned 0x0 [0059.962] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0059.962] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0059.962] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0059.962] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0059.962] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0059.962] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0059.962] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0059.962] LocalFree (hMem=0x416cb8) returned 0x0 [0059.963] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0059.963] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0059.963] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0059.963] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0059.963] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0059.963] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd750dbd) returned 0x0 [0059.963] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0059.963] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0059.963] GetCurrentObject (hdc=0x3701084a, type=0x1) returned 0x1b00017 [0059.963] GetCurrentObject (hdc=0x3701084a, type=0x2) returned 0x1900010 [0059.963] GetCurrentObject (hdc=0x3701084a, type=0x7) returned 0x490500d1 [0059.963] GetCurrentObject (hdc=0x3701084a, type=0x6) returned 0x18a002e [0059.963] SaveDC (hdc=0x3701084a) returned 1 [0059.963] GetNearestColor (hdc=0x3701084a, color=0xf5f5f5) returned 0xf5f5f5 [0059.963] GetNearestColor (hdc=0x3701084a, color=0x515151) returned 0x515151 [0059.963] GetNearestColor (hdc=0x3701084a, color=0x0) returned 0x0 [0059.963] GetNearestColor (hdc=0x3701084a, color=0x515151) returned 0x515151 [0059.963] GetNearestColor (hdc=0x3701084a, color=0x0) returned 0x0 [0059.963] GetNearestColor (hdc=0x3701084a, color=0xfafafa) returned 0xfafafa [0059.963] GetNearestColor (hdc=0x3701084a, color=0xe0e0e0) returned 0xe0e0e0 [0059.963] GetNearestColor (hdc=0x3701084a, color=0xdcdcdc) returned 0xdcdcdc [0059.964] GetNearestColor (hdc=0x3701084a, color=0x0) returned 0x0 [0059.964] RestoreDC (hdc=0x3701084a, nSavedDC=-1) returned 1 [0059.964] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3701084a) returned 0x0 [0059.964] IsAppThemed () returned 0x1 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] IsAppThemed () returned 0x1 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2632f88 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0059.964] IsAppThemed () returned 0x1 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] IsAppThemed () returned 0x1 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] IsAppThemed () returned 0x1 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] IsAppThemed () returned 0x1 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] IsThemePartDefined () returned 0x1 [0059.964] IsAppThemed () returned 0x1 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0059.964] IsAppThemed () returned 0x1 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] GetThemeAppProperties () returned 0x3 [0059.964] IsAppThemed () returned 0x1 [0059.964] GetThemeAppProperties () returned 0x3 [0059.965] GetThemeAppProperties () returned 0x3 [0059.965] IsThemePartDefined () returned 0x1 [0059.965] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0059.965] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0059.965] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0059.965] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0059.965] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0059.965] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0059.965] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0059.965] LocalFree (hMem=0x416cb8) returned 0x0 [0059.965] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0059.965] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0059.965] LocalFree (hMem=0x416cb8) returned 0x0 [0059.965] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0059.965] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0059.965] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0059.965] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0059.965] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0059.965] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0059.965] GetCurrentObject (hdc=0x3701084a, type=0x1) returned 0x1b00017 [0059.965] GetCurrentObject (hdc=0x3701084a, type=0x2) returned 0x1900010 [0059.965] GetCurrentObject (hdc=0x3701084a, type=0x7) returned 0x490500d1 [0059.965] GetCurrentObject (hdc=0x3701084a, type=0x6) returned 0x18a002e [0059.965] SaveDC (hdc=0x3701084a) returned 1 [0059.965] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x84040813 [0059.966] GetClipRgn (hdc=0x3701084a, hrgn=0x84040813) returned 0 [0059.966] SelectClipRgn (hdc=0x3701084a, hrgn=0x68040246) returned 2 [0059.966] DeleteObject (ho=0x84040813) returned 1 [0059.966] DeleteObject (ho=0x68040246) returned 1 [0059.966] OffsetViewportOrgEx (in: hdc=0x3701084a, x=0, y=0, lppt=0x2633638 | out: lppt=0x2633638) returned 1 [0059.966] DrawThemeParentBackground () returned 0x0 [0059.966] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0059.966] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0059.966] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0059.966] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0059.966] GetSystemMetrics (nIndex=42) returned 0 [0059.966] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0059.966] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0059.966] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0059.966] GetCurrentObject (hdc=0x3701084a, type=0x1) returned 0x1b00017 [0059.966] GetCurrentObject (hdc=0x3701084a, type=0x2) returned 0x1900010 [0059.966] GetCurrentObject (hdc=0x3701084a, type=0x7) returned 0x490500d1 [0059.966] GetCurrentObject (hdc=0x3701084a, type=0x6) returned 0x18a002e [0059.966] SaveDC (hdc=0x3701084a) returned 2 [0059.966] GetNearestColor (hdc=0x3701084a, color=0xf5f5f5) returned 0xf5f5f5 [0059.966] CreateSolidBrush (color=0xf5f5f5) returned 0x48100244 [0059.966] FillRect (hDC=0x3701084a, lprc=0x1ee2d0, hbr=0x48100244) returned 1 [0059.966] DeleteObject (ho=0x48100244) returned 1 [0059.967] RestoreDC (hdc=0x3701084a, nSavedDC=-1) returned 1 [0059.967] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0059.967] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0059.967] GetSystemMetrics (nIndex=42) returned 0 [0059.967] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0059.967] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0059.967] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0059.967] GetCurrentObject (hdc=0x3701084a, type=0x1) returned 0x1b00017 [0059.967] GetCurrentObject (hdc=0x3701084a, type=0x2) returned 0x1900010 [0059.967] GetCurrentObject (hdc=0x3701084a, type=0x7) returned 0x490500d1 [0059.967] GetCurrentObject (hdc=0x3701084a, type=0x6) returned 0x18a002e [0059.967] SaveDC (hdc=0x3701084a) returned 2 [0059.967] GetNearestColor (hdc=0x3701084a, color=0xf5f5f5) returned 0xf5f5f5 [0059.967] CreateSolidBrush (color=0xf5f5f5) returned 0x49100244 [0059.967] FillRect (hDC=0x3701084a, lprc=0x1ee270, hbr=0x49100244) returned 1 [0059.967] DeleteObject (ho=0x49100244) returned 1 [0059.967] RestoreDC (hdc=0x3701084a, nSavedDC=-1) returned 1 [0059.967] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0059.967] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0059.967] GetSystemMetrics (nIndex=42) returned 0 [0059.967] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0059.967] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0059.968] RestoreDC (hdc=0x3701084a, nSavedDC=-1) returned 1 [0059.968] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3701084a) returned 0x0 [0059.968] IsAppThemed () returned 0x1 [0059.968] GetThemeAppProperties () returned 0x3 [0059.968] GetThemeAppProperties () returned 0x3 [0059.968] IsAppThemed () returned 0x1 [0059.968] GetThemeAppProperties () returned 0x3 [0059.968] GetThemeAppProperties () returned 0x3 [0059.968] IsThemePartDefined () returned 0x1 [0059.968] GdipCreateRegion (region=0x1ee764) returned 0x0 [0059.968] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0059.968] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0059.968] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0059.968] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0059.968] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0059.968] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0059.968] LocalFree (hMem=0x416cb8) returned 0x0 [0059.968] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0059.968] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0059.968] LocalFree (hMem=0x416cb8) returned 0x0 [0059.968] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0059.968] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0059.968] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0059.968] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0059.968] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0059.968] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0059.968] GetCurrentObject (hdc=0x3701084a, type=0x1) returned 0x1b00017 [0059.969] GetCurrentObject (hdc=0x3701084a, type=0x2) returned 0x1900010 [0059.969] GetCurrentObject (hdc=0x3701084a, type=0x7) returned 0x490500d1 [0059.969] GetCurrentObject (hdc=0x3701084a, type=0x6) returned 0x18a002e [0059.969] SaveDC (hdc=0x3701084a) returned 1 [0059.969] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x69040246 [0059.969] GetClipRgn (hdc=0x3701084a, hrgn=0x69040246) returned 0 [0059.969] SelectClipRgn (hdc=0x3701084a, hrgn=0x86040813) returned 2 [0059.969] DeleteObject (ho=0x69040246) returned 1 [0059.969] DeleteObject (ho=0x86040813) returned 1 [0059.969] OffsetViewportOrgEx (in: hdc=0x3701084a, x=0, y=0, lppt=0x2633e78 | out: lppt=0x2633e78) returned 1 [0059.969] IsAppThemed () returned 0x1 [0059.969] GetThemeAppProperties () returned 0x3 [0059.969] GetThemeAppProperties () returned 0x3 [0059.969] DrawThemeBackground () returned 0x0 [0059.969] RestoreDC (hdc=0x3701084a, nSavedDC=-1) returned 1 [0059.969] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3701084a) returned 0x0 [0059.969] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0059.969] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0059.969] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0059.969] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0059.969] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0059.969] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0059.969] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0059.969] LocalFree (hMem=0x416cb8) returned 0x0 [0059.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0059.970] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0059.970] LocalFree (hMem=0x416cb8) returned 0x0 [0059.970] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0059.970] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0059.970] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0059.970] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0059.970] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0059.970] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0059.970] GetCurrentObject (hdc=0x3701084a, type=0x1) returned 0x1b00017 [0059.970] GetCurrentObject (hdc=0x3701084a, type=0x2) returned 0x1900010 [0059.970] GetCurrentObject (hdc=0x3701084a, type=0x7) returned 0x490500d1 [0059.970] GetCurrentObject (hdc=0x3701084a, type=0x6) returned 0x18a002e [0059.970] SaveDC (hdc=0x3701084a) returned 1 [0059.970] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x87040813 [0059.970] GetClipRgn (hdc=0x3701084a, hrgn=0x87040813) returned 0 [0059.970] SelectClipRgn (hdc=0x3701084a, hrgn=0x6a040246) returned 2 [0059.970] DeleteObject (ho=0x87040813) returned 1 [0059.970] DeleteObject (ho=0x6a040246) returned 1 [0059.970] OffsetViewportOrgEx (in: hdc=0x3701084a, x=0, y=0, lppt=0x263414c | out: lppt=0x263414c) returned 1 [0059.970] IsAppThemed () returned 0x1 [0059.970] GetThemeAppProperties () returned 0x3 [0059.970] GetThemeAppProperties () returned 0x3 [0059.970] GetThemeBackgroundContentRect () returned 0x0 [0059.970] RestoreDC (hdc=0x3701084a, nSavedDC=-1) returned 1 [0059.971] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3701084a) returned 0x0 [0059.971] IsAppThemed () returned 0x1 [0059.971] GetThemeAppProperties () returned 0x3 [0059.971] GetThemeAppProperties () returned 0x3 [0059.971] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0059.971] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0059.971] GetCurrentObject (hdc=0x3701084a, type=0x1) returned 0x1b00017 [0059.971] GetCurrentObject (hdc=0x3701084a, type=0x2) returned 0x1900010 [0059.971] GetCurrentObject (hdc=0x3701084a, type=0x7) returned 0x490500d1 [0059.971] GetCurrentObject (hdc=0x3701084a, type=0x6) returned 0x18a002e [0059.971] SaveDC (hdc=0x3701084a) returned 1 [0059.971] GetTextAlign (hdc=0x3701084a) returned 0x0 [0059.971] GetTextColor (hdc=0x3701084a) returned 0x0 [0059.971] GetCurrentObject (hdc=0x3701084a, type=0x6) returned 0x18a002e [0059.971] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0059.971] SelectObject (hdc=0x3701084a, h=0x220a081a) returned 0x18a002e [0059.971] GetBkMode (hdc=0x3701084a) returned 2 [0059.971] SetBkMode (hdc=0x3701084a, mode=1) returned 2 [0059.971] DrawTextExW (in: hdc=0x3701084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26344e0 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0059.972] DrawTextExW (in: hdc=0x3701084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26344e0 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0059.972] RestoreDC (hdc=0x3701084a, nSavedDC=-1) returned 1 [0059.972] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3701084a) returned 0x0 [0059.972] GetFocus () returned 0x201d0 [0059.972] IsAppThemed () returned 0x1 [0059.972] GetThemeAppProperties () returned 0x3 [0059.972] GetThemeAppProperties () returned 0x3 [0059.972] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0059.972] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x3701084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0059.972] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3701084a) returned 0x0 [0059.972] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0059.972] SelectObject (hdc=0x3701084a, h=0x185000f) returned 0x490500d1 [0059.972] DeleteDC (hdc=0x3701084a) returned 1 [0059.972] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0059.972] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0059.972] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26345dc, cPoints=0x1 | out: lpPoints=0x26345dc) returned 42533703 [0059.972] WindowFromPoint (Point=0x3df) returned 0x201d0 [0059.972] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0059.972] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0059.973] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0059.973] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0059.973] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0059.973] GetSystemMetrics (nIndex=42) returned 0 [0059.973] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0059.973] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0059.973] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0059.973] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0059.973] GetCapture () returned 0x201d0 [0059.973] ReleaseCapture () returned 1 [0059.973] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0059.973] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0059.973] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0059.973] IsWindowUnicode (hWnd=0x201d0) returned 1 [0059.973] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0059.973] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103df) returned 0x1 [0059.973] SetCursor (hCursor=0x10003) returned 0x10003 [0059.973] TranslateMessage (lpMsg=0x1ef250) returned 0 [0059.973] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0059.973] GetKeyState (nVirtKey=1) returned 1 [0059.973] GetKeyState (nVirtKey=2) returned 0 [0059.973] GetKeyState (nVirtKey=4) returned 0 [0059.973] GetKeyState (nVirtKey=5) returned 0 [0059.973] GetKeyState (nVirtKey=6) returned 0 [0059.973] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0059.973] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0059.973] WaitMessage () returned 1 [0061.863] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0061.864] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0061.864] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0061.868] NtdllDefWindowProc_W () returned 0x1 [0061.868] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0061.868] WaitMessage () returned 1 [0062.936] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0062.937] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ec) returned 0x1 [0062.937] IsWindowUnicode (hWnd=0x201d0) returned 1 [0062.937] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0062.937] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ec) returned 0x1 [0062.937] SetCursor (hCursor=0x10003) returned 0x10003 [0062.937] TranslateMessage (lpMsg=0x1ef250) returned 0 [0062.937] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0062.937] GetKeyState (nVirtKey=1) returned 1 [0062.937] GetKeyState (nVirtKey=2) returned 0 [0062.937] GetKeyState (nVirtKey=4) returned 0 [0062.937] GetKeyState (nVirtKey=5) returned 0 [0062.937] GetKeyState (nVirtKey=6) returned 0 [0062.937] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0062.937] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0062.937] WaitMessage () returned 1 [0063.014] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0063.014] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ec) returned 0x1 [0063.014] IsWindowUnicode (hWnd=0x201d0) returned 1 [0063.014] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0063.014] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ec) returned 0x1 [0063.014] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0063.014] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e002a7) returned 0x0 [0063.014] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0063.014] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0063.015] SetCursor (hCursor=0x10003) returned 0x10003 [0063.015] TranslateMessage (lpMsg=0x1ef250) returned 0 [0063.015] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0063.015] GetKeyState (nVirtKey=1) returned -128 [0063.015] GetKeyState (nVirtKey=2) returned 0 [0063.015] GetKeyState (nVirtKey=4) returned 0 [0063.015] GetKeyState (nVirtKey=5) returned 0 [0063.015] GetKeyState (nVirtKey=6) returned 0 [0063.015] IsWindowVisible (hWnd=0x201d0) returned 1 [0063.015] IsWindowEnabled (hWnd=0x201d0) returned 1 [0063.015] SetFocus (hWnd=0x201d0) returned 0x201d0 [0063.016] GetFocus () returned 0x201d0 [0063.016] GetFocus () returned 0x201d0 [0063.016] GetFocus () returned 0x201d0 [0063.016] GetKeyState (nVirtKey=1) returned -128 [0063.016] GetKeyState (nVirtKey=2) returned 0 [0063.016] GetKeyState (nVirtKey=4) returned 0 [0063.016] GetKeyState (nVirtKey=5) returned 0 [0063.016] GetKeyState (nVirtKey=6) returned 0 [0063.016] GetCapture () returned 0x0 [0063.016] SetCapture (hWnd=0x201d0) returned 0x0 [0063.016] GetKeyState (nVirtKey=1) returned -128 [0063.016] GetKeyState (nVirtKey=2) returned 0 [0063.016] GetKeyState (nVirtKey=4) returned 0 [0063.016] GetKeyState (nVirtKey=5) returned 0 [0063.016] GetKeyState (nVirtKey=6) returned 0 [0063.016] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0063.016] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0063.016] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0063.016] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0063.016] TranslateMessage (lpMsg=0x1ef250) returned 0 [0063.016] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0063.016] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0063.016] IsWindowUnicode (hWnd=0x201d0) returned 1 [0063.016] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0063.016] TranslateMessage (lpMsg=0x1ef250) returned 0 [0063.016] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0063.016] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2634724, cPoints=0x1 | out: lpPoints=0x2634724) returned 42533703 [0063.016] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0063.016] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0063.016] UpdateWindow (hWnd=0x201d0) returned 1 [0063.016] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0063.017] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0063.017] CreateCompatibleDC (hdc=0x120107ec) returned 0x3801084a [0063.017] SelectObject (hdc=0x3801084a, h=0x490500d1) returned 0x185000f [0063.017] GdipCreateFromHDC (hdc=0x3801084a, graphics=0x1eea5c) returned 0x0 [0063.017] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0063.017] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0063.017] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0063.017] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0063.017] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0063.017] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0063.017] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0063.017] LocalFree (hMem=0x416cb8) returned 0x0 [0063.017] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0063.017] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0063.017] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0063.018] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0063.018] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0063.018] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd730dbd) returned 0x0 [0063.018] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0063.018] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0063.018] GetCurrentObject (hdc=0x3801084a, type=0x1) returned 0x1b00017 [0063.018] GetCurrentObject (hdc=0x3801084a, type=0x2) returned 0x1900010 [0063.018] GetCurrentObject (hdc=0x3801084a, type=0x7) returned 0x490500d1 [0063.018] GetCurrentObject (hdc=0x3801084a, type=0x6) returned 0x18a002e [0063.018] SaveDC (hdc=0x3801084a) returned 1 [0063.018] GetNearestColor (hdc=0x3801084a, color=0xf5f5f5) returned 0xf5f5f5 [0063.018] GetNearestColor (hdc=0x3801084a, color=0x515151) returned 0x515151 [0063.018] GetNearestColor (hdc=0x3801084a, color=0x0) returned 0x0 [0063.018] GetNearestColor (hdc=0x3801084a, color=0x515151) returned 0x515151 [0063.018] GetNearestColor (hdc=0x3801084a, color=0x0) returned 0x0 [0063.018] GetNearestColor (hdc=0x3801084a, color=0xfafafa) returned 0xfafafa [0063.018] GetNearestColor (hdc=0x3801084a, color=0xe0e0e0) returned 0xe0e0e0 [0063.018] GetNearestColor (hdc=0x3801084a, color=0xdcdcdc) returned 0xdcdcdc [0063.019] GetNearestColor (hdc=0x3801084a, color=0x0) returned 0x0 [0063.019] RestoreDC (hdc=0x3801084a, nSavedDC=-1) returned 1 [0063.019] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3801084a) returned 0x0 [0063.019] IsAppThemed () returned 0x1 [0063.019] GetThemeAppProperties () returned 0x3 [0063.019] GetThemeAppProperties () returned 0x3 [0063.019] IsAppThemed () returned 0x1 [0063.019] GetThemeAppProperties () returned 0x3 [0063.019] GetThemeAppProperties () returned 0x3 [0063.019] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2634e28 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0063.020] IsAppThemed () returned 0x1 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] IsAppThemed () returned 0x1 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] IsAppThemed () returned 0x1 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] IsAppThemed () returned 0x1 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] IsThemePartDefined () returned 0x1 [0063.020] IsAppThemed () returned 0x1 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0063.020] IsAppThemed () returned 0x1 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] IsAppThemed () returned 0x1 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] GetThemeAppProperties () returned 0x3 [0063.020] IsThemePartDefined () returned 0x1 [0063.020] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0063.021] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0063.021] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0063.021] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0063.021] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0063.021] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0063.021] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0063.021] LocalFree (hMem=0x416cb8) returned 0x0 [0063.021] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0063.021] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0063.021] LocalFree (hMem=0x416cb8) returned 0x0 [0063.021] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0063.021] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0063.021] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0063.021] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0063.021] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0063.021] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0063.021] GetCurrentObject (hdc=0x3801084a, type=0x1) returned 0x1b00017 [0063.021] GetCurrentObject (hdc=0x3801084a, type=0x2) returned 0x1900010 [0063.021] GetCurrentObject (hdc=0x3801084a, type=0x7) returned 0x490500d1 [0063.021] GetCurrentObject (hdc=0x3801084a, type=0x6) returned 0x18a002e [0063.021] SaveDC (hdc=0x3801084a) returned 1 [0063.021] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b040246 [0063.021] GetClipRgn (hdc=0x3801084a, hrgn=0x6b040246) returned 0 [0063.022] SelectClipRgn (hdc=0x3801084a, hrgn=0x8b040813) returned 2 [0063.022] DeleteObject (ho=0x6b040246) returned 1 [0063.022] DeleteObject (ho=0x8b040813) returned 1 [0063.022] OffsetViewportOrgEx (in: hdc=0x3801084a, x=0, y=0, lppt=0x26354d8 | out: lppt=0x26354d8) returned 1 [0063.022] DrawThemeParentBackground () returned 0x0 [0063.022] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0063.022] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0063.022] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0063.022] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0063.022] GetSystemMetrics (nIndex=42) returned 0 [0063.022] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0063.022] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0063.022] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0063.022] GetCurrentObject (hdc=0x3801084a, type=0x1) returned 0x1b00017 [0063.022] GetCurrentObject (hdc=0x3801084a, type=0x2) returned 0x1900010 [0063.022] GetCurrentObject (hdc=0x3801084a, type=0x7) returned 0x490500d1 [0063.022] GetCurrentObject (hdc=0x3801084a, type=0x6) returned 0x18a002e [0063.022] SaveDC (hdc=0x3801084a) returned 2 [0063.022] GetNearestColor (hdc=0x3801084a, color=0xf5f5f5) returned 0xf5f5f5 [0063.022] CreateSolidBrush (color=0xf5f5f5) returned 0x4a100244 [0063.022] FillRect (hDC=0x3801084a, lprc=0x1ee2d0, hbr=0x4a100244) returned 1 [0063.023] DeleteObject (ho=0x4a100244) returned 1 [0063.023] RestoreDC (hdc=0x3801084a, nSavedDC=-1) returned 1 [0063.023] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0063.023] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0063.023] GetSystemMetrics (nIndex=42) returned 0 [0063.023] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0063.023] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0063.023] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0063.023] GetCurrentObject (hdc=0x3801084a, type=0x1) returned 0x1b00017 [0063.023] GetCurrentObject (hdc=0x3801084a, type=0x2) returned 0x1900010 [0063.023] GetCurrentObject (hdc=0x3801084a, type=0x7) returned 0x490500d1 [0063.023] GetCurrentObject (hdc=0x3801084a, type=0x6) returned 0x18a002e [0063.023] SaveDC (hdc=0x3801084a) returned 2 [0063.023] GetNearestColor (hdc=0x3801084a, color=0xf5f5f5) returned 0xf5f5f5 [0063.023] CreateSolidBrush (color=0xf5f5f5) returned 0x4b100244 [0063.023] FillRect (hDC=0x3801084a, lprc=0x1ee270, hbr=0x4b100244) returned 1 [0063.023] DeleteObject (ho=0x4b100244) returned 1 [0063.023] RestoreDC (hdc=0x3801084a, nSavedDC=-1) returned 1 [0063.023] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0063.023] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0063.023] GetSystemMetrics (nIndex=42) returned 0 [0063.023] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0063.023] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0063.024] RestoreDC (hdc=0x3801084a, nSavedDC=-1) returned 1 [0063.024] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3801084a) returned 0x0 [0063.024] IsAppThemed () returned 0x1 [0063.024] GetThemeAppProperties () returned 0x3 [0063.024] GetThemeAppProperties () returned 0x3 [0063.024] IsAppThemed () returned 0x1 [0063.024] GetThemeAppProperties () returned 0x3 [0063.024] GetThemeAppProperties () returned 0x3 [0063.024] IsThemePartDefined () returned 0x1 [0063.024] GdipCreateRegion (region=0x1ee764) returned 0x0 [0063.024] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0063.024] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0063.024] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0063.024] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0063.024] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0063.024] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0063.024] LocalFree (hMem=0x416cb8) returned 0x0 [0063.024] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0063.024] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0063.024] LocalFree (hMem=0x416cb8) returned 0x0 [0063.024] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0063.024] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0063.024] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0063.024] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0063.024] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0063.024] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0063.025] GetCurrentObject (hdc=0x3801084a, type=0x1) returned 0x1b00017 [0063.025] GetCurrentObject (hdc=0x3801084a, type=0x2) returned 0x1900010 [0063.025] GetCurrentObject (hdc=0x3801084a, type=0x7) returned 0x490500d1 [0063.025] GetCurrentObject (hdc=0x3801084a, type=0x6) returned 0x18a002e [0063.025] SaveDC (hdc=0x3801084a) returned 1 [0063.025] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8c040813 [0063.025] GetClipRgn (hdc=0x3801084a, hrgn=0x8c040813) returned 0 [0063.025] SelectClipRgn (hdc=0x3801084a, hrgn=0x6d040246) returned 2 [0063.025] DeleteObject (ho=0x8c040813) returned 1 [0063.025] DeleteObject (ho=0x6d040246) returned 1 [0063.025] OffsetViewportOrgEx (in: hdc=0x3801084a, x=0, y=0, lppt=0x2635d18 | out: lppt=0x2635d18) returned 1 [0063.025] IsAppThemed () returned 0x1 [0063.025] GetThemeAppProperties () returned 0x3 [0063.025] GetThemeAppProperties () returned 0x3 [0063.025] DrawThemeBackground () returned 0x0 [0063.025] RestoreDC (hdc=0x3801084a, nSavedDC=-1) returned 1 [0063.025] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3801084a) returned 0x0 [0063.025] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0063.025] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0063.025] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0063.025] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0063.026] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0063.026] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0063.026] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0063.026] LocalFree (hMem=0x416cb8) returned 0x0 [0063.026] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0063.026] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0063.026] LocalFree (hMem=0x416cb8) returned 0x0 [0063.026] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0063.026] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0063.026] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0063.026] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0063.026] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0063.026] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0063.026] GetCurrentObject (hdc=0x3801084a, type=0x1) returned 0x1b00017 [0063.026] GetCurrentObject (hdc=0x3801084a, type=0x2) returned 0x1900010 [0063.026] GetCurrentObject (hdc=0x3801084a, type=0x7) returned 0x490500d1 [0063.026] GetCurrentObject (hdc=0x3801084a, type=0x6) returned 0x18a002e [0063.026] SaveDC (hdc=0x3801084a) returned 1 [0063.026] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e040246 [0063.026] GetClipRgn (hdc=0x3801084a, hrgn=0x6e040246) returned 0 [0063.026] SelectClipRgn (hdc=0x3801084a, hrgn=0x8d040813) returned 2 [0063.027] DeleteObject (ho=0x6e040246) returned 1 [0063.027] DeleteObject (ho=0x8d040813) returned 1 [0063.027] OffsetViewportOrgEx (in: hdc=0x3801084a, x=0, y=0, lppt=0x2635fec | out: lppt=0x2635fec) returned 1 [0063.027] IsAppThemed () returned 0x1 [0063.027] GetThemeAppProperties () returned 0x3 [0063.027] GetThemeAppProperties () returned 0x3 [0063.027] GetThemeBackgroundContentRect () returned 0x0 [0063.027] RestoreDC (hdc=0x3801084a, nSavedDC=-1) returned 1 [0063.027] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3801084a) returned 0x0 [0063.027] IsAppThemed () returned 0x1 [0063.027] GetThemeAppProperties () returned 0x3 [0063.027] GetThemeAppProperties () returned 0x3 [0063.027] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0063.028] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0063.028] GetCurrentObject (hdc=0x3801084a, type=0x1) returned 0x1b00017 [0063.028] GetCurrentObject (hdc=0x3801084a, type=0x2) returned 0x1900010 [0063.028] GetCurrentObject (hdc=0x3801084a, type=0x7) returned 0x490500d1 [0063.028] GetCurrentObject (hdc=0x3801084a, type=0x6) returned 0x18a002e [0063.028] SaveDC (hdc=0x3801084a) returned 1 [0063.028] GetTextAlign (hdc=0x3801084a) returned 0x0 [0063.028] GetTextColor (hdc=0x3801084a) returned 0x0 [0063.028] GetCurrentObject (hdc=0x3801084a, type=0x6) returned 0x18a002e [0063.028] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0063.028] SelectObject (hdc=0x3801084a, h=0x220a081a) returned 0x18a002e [0063.028] GetBkMode (hdc=0x3801084a) returned 2 [0063.028] SetBkMode (hdc=0x3801084a, mode=1) returned 2 [0063.028] DrawTextExW (in: hdc=0x3801084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2636380 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0063.028] DrawTextExW (in: hdc=0x3801084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2636380 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0063.029] RestoreDC (hdc=0x3801084a, nSavedDC=-1) returned 1 [0063.029] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3801084a) returned 0x0 [0063.029] GetFocus () returned 0x201d0 [0063.029] IsAppThemed () returned 0x1 [0063.029] GetThemeAppProperties () returned 0x3 [0063.029] GetThemeAppProperties () returned 0x3 [0063.029] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0063.029] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x3801084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0063.029] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3801084a) returned 0x0 [0063.029] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0063.029] SelectObject (hdc=0x3801084a, h=0x185000f) returned 0x490500d1 [0063.029] DeleteDC (hdc=0x3801084a) returned 1 [0063.029] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0063.029] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0063.029] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x263647c, cPoints=0x1 | out: lpPoints=0x263647c) returned 42533703 [0063.029] WindowFromPoint (Point=0x3ec) returned 0x201d0 [0063.029] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ec) returned 0x1 [0063.030] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0063.030] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0063.030] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0063.030] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0063.030] GetSystemMetrics (nIndex=42) returned 0 [0063.030] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0063.030] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0063.030] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0063.030] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0063.030] GetCapture () returned 0x201d0 [0063.030] ReleaseCapture () returned 1 [0063.030] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0063.030] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0063.030] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ec) returned 0x1 [0063.030] IsWindowUnicode (hWnd=0x201d0) returned 1 [0063.030] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0063.030] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ec) returned 0x1 [0063.031] SetCursor (hCursor=0x10003) returned 0x10003 [0063.031] TranslateMessage (lpMsg=0x1ef250) returned 0 [0063.031] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0063.031] GetKeyState (nVirtKey=1) returned 0 [0063.031] GetKeyState (nVirtKey=2) returned 0 [0063.031] GetKeyState (nVirtKey=4) returned 0 [0063.031] GetKeyState (nVirtKey=5) returned 0 [0063.031] GetKeyState (nVirtKey=6) returned 0 [0063.031] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0063.031] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0063.031] WaitMessage () returned 1 [0064.229] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0064.229] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0064.229] TranslateMessage (lpMsg=0x1ef250) returned 0 [0064.230] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0064.230] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0064.230] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0064.230] WaitMessage () returned 1 [0065.971] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0065.971] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940396) returned 0x1 [0065.972] IsWindowUnicode (hWnd=0x201d0) returned 1 [0065.972] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0065.972] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940396) returned 0x1 [0065.972] SetCursor (hCursor=0x10003) returned 0x10003 [0065.972] TranslateMessage (lpMsg=0x1ef250) returned 0 [0065.972] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0065.972] GetKeyState (nVirtKey=1) returned 0 [0065.972] GetKeyState (nVirtKey=2) returned 0 [0065.972] GetKeyState (nVirtKey=4) returned 0 [0065.972] GetKeyState (nVirtKey=5) returned 0 [0065.972] GetKeyState (nVirtKey=6) returned 0 [0065.972] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0065.972] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0065.972] WaitMessage () returned 1 [0066.023] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0066.024] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940396) returned 0x1 [0066.024] IsWindowUnicode (hWnd=0x201d0) returned 1 [0066.024] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0066.024] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940396) returned 0x1 [0066.024] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0066.024] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e30251) returned 0x0 [0066.024] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0066.024] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0066.024] SetCursor (hCursor=0x10003) returned 0x10003 [0066.024] TranslateMessage (lpMsg=0x1ef250) returned 0 [0066.024] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0066.024] GetKeyState (nVirtKey=1) returned -127 [0066.024] GetKeyState (nVirtKey=2) returned 0 [0066.024] GetKeyState (nVirtKey=4) returned 0 [0066.024] GetKeyState (nVirtKey=5) returned 0 [0066.024] GetKeyState (nVirtKey=6) returned 0 [0066.024] IsWindowVisible (hWnd=0x201d0) returned 1 [0066.024] IsWindowEnabled (hWnd=0x201d0) returned 1 [0066.024] SetFocus (hWnd=0x201d0) returned 0x201d0 [0066.025] GetFocus () returned 0x201d0 [0066.025] GetFocus () returned 0x201d0 [0066.025] GetFocus () returned 0x201d0 [0066.025] GetKeyState (nVirtKey=1) returned -127 [0066.025] GetKeyState (nVirtKey=2) returned 0 [0066.025] GetKeyState (nVirtKey=4) returned 0 [0066.025] GetKeyState (nVirtKey=5) returned 0 [0066.025] GetKeyState (nVirtKey=6) returned 0 [0066.025] GetCapture () returned 0x0 [0066.025] SetCapture (hWnd=0x201d0) returned 0x0 [0066.025] GetKeyState (nVirtKey=1) returned -127 [0066.025] GetKeyState (nVirtKey=2) returned 0 [0066.025] GetKeyState (nVirtKey=4) returned 0 [0066.025] GetKeyState (nVirtKey=5) returned 0 [0066.025] GetKeyState (nVirtKey=6) returned 0 [0066.025] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0066.025] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0066.025] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0066.025] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0066.025] TranslateMessage (lpMsg=0x1ef250) returned 0 [0066.025] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0066.025] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0066.025] IsWindowUnicode (hWnd=0x201d0) returned 1 [0066.025] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0066.025] TranslateMessage (lpMsg=0x1ef250) returned 0 [0066.025] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0066.025] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26365c4, cPoints=0x1 | out: lpPoints=0x26365c4) returned 42533703 [0066.025] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0066.025] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0066.025] UpdateWindow (hWnd=0x201d0) returned 1 [0066.026] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0066.026] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0066.026] CreateCompatibleDC (hdc=0x120107ec) returned 0x26010810 [0066.026] SelectObject (hdc=0x26010810, h=0x490500d1) returned 0x185000f [0066.026] GdipCreateFromHDC (hdc=0x26010810, graphics=0x1eea5c) returned 0x0 [0066.026] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0066.026] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0066.026] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0066.026] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0066.026] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0066.026] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0066.026] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0066.026] LocalFree (hMem=0x416cb8) returned 0x0 [0066.026] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0066.026] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0066.026] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0066.027] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0066.027] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0066.027] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd710dbd) returned 0x0 [0066.027] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0066.027] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0066.027] GetCurrentObject (hdc=0x26010810, type=0x1) returned 0x1b00017 [0066.027] GetCurrentObject (hdc=0x26010810, type=0x2) returned 0x1900010 [0066.027] GetCurrentObject (hdc=0x26010810, type=0x7) returned 0x490500d1 [0066.027] GetCurrentObject (hdc=0x26010810, type=0x6) returned 0x18a002e [0066.027] SaveDC (hdc=0x26010810) returned 1 [0066.027] GetNearestColor (hdc=0x26010810, color=0xf5f5f5) returned 0xf5f5f5 [0066.027] GetNearestColor (hdc=0x26010810, color=0x515151) returned 0x515151 [0066.027] GetNearestColor (hdc=0x26010810, color=0x0) returned 0x0 [0066.027] GetNearestColor (hdc=0x26010810, color=0x515151) returned 0x515151 [0066.027] GetNearestColor (hdc=0x26010810, color=0x0) returned 0x0 [0066.027] GetNearestColor (hdc=0x26010810, color=0xfafafa) returned 0xfafafa [0066.027] GetNearestColor (hdc=0x26010810, color=0xe0e0e0) returned 0xe0e0e0 [0066.027] GetNearestColor (hdc=0x26010810, color=0xdcdcdc) returned 0xdcdcdc [0066.027] GetNearestColor (hdc=0x26010810, color=0x0) returned 0x0 [0066.028] RestoreDC (hdc=0x26010810, nSavedDC=-1) returned 1 [0066.028] GdipReleaseDC (graphics=0x504fbc8, hdc=0x26010810) returned 0x0 [0066.028] IsAppThemed () returned 0x1 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] IsAppThemed () returned 0x1 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2636cc8 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0066.028] IsAppThemed () returned 0x1 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] IsAppThemed () returned 0x1 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] IsAppThemed () returned 0x1 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] IsAppThemed () returned 0x1 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] GetThemeAppProperties () returned 0x3 [0066.028] IsThemePartDefined () returned 0x1 [0066.029] IsAppThemed () returned 0x1 [0066.029] GetThemeAppProperties () returned 0x3 [0066.029] GetThemeAppProperties () returned 0x3 [0066.029] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0066.029] IsAppThemed () returned 0x1 [0066.029] GetThemeAppProperties () returned 0x3 [0066.029] GetThemeAppProperties () returned 0x3 [0066.029] IsAppThemed () returned 0x1 [0066.029] GetThemeAppProperties () returned 0x3 [0066.029] GetThemeAppProperties () returned 0x3 [0066.029] IsThemePartDefined () returned 0x1 [0066.029] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0066.029] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0066.029] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0066.029] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0066.029] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0066.029] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0066.029] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0066.029] LocalFree (hMem=0x416cb8) returned 0x0 [0066.029] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0066.029] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0066.029] LocalFree (hMem=0x416cb8) returned 0x0 [0066.029] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0066.029] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0066.029] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0066.029] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0066.029] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0066.029] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0066.029] GetCurrentObject (hdc=0x26010810, type=0x1) returned 0x1b00017 [0066.030] GetCurrentObject (hdc=0x26010810, type=0x2) returned 0x1900010 [0066.030] GetCurrentObject (hdc=0x26010810, type=0x7) returned 0x490500d1 [0066.030] GetCurrentObject (hdc=0x26010810, type=0x6) returned 0x18a002e [0066.030] SaveDC (hdc=0x26010810) returned 1 [0066.030] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8e040813 [0066.030] GetClipRgn (hdc=0x26010810, hrgn=0x8e040813) returned 0 [0066.030] SelectClipRgn (hdc=0x26010810, hrgn=0x72040246) returned 2 [0066.030] DeleteObject (ho=0x8e040813) returned 1 [0066.030] DeleteObject (ho=0x72040246) returned 1 [0066.030] OffsetViewportOrgEx (in: hdc=0x26010810, x=0, y=0, lppt=0x2637378 | out: lppt=0x2637378) returned 1 [0066.030] DrawThemeParentBackground () returned 0x0 [0066.030] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0066.030] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0066.030] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0066.030] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0066.030] GetSystemMetrics (nIndex=42) returned 0 [0066.030] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0066.030] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0066.030] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0066.030] GetCurrentObject (hdc=0x26010810, type=0x1) returned 0x1b00017 [0066.030] GetCurrentObject (hdc=0x26010810, type=0x2) returned 0x1900010 [0066.030] GetCurrentObject (hdc=0x26010810, type=0x7) returned 0x490500d1 [0066.030] GetCurrentObject (hdc=0x26010810, type=0x6) returned 0x18a002e [0066.031] SaveDC (hdc=0x26010810) returned 2 [0066.031] GetNearestColor (hdc=0x26010810, color=0xf5f5f5) returned 0xf5f5f5 [0066.031] CreateSolidBrush (color=0xf5f5f5) returned 0x4c100244 [0066.031] FillRect (hDC=0x26010810, lprc=0x1ee2d0, hbr=0x4c100244) returned 1 [0066.031] DeleteObject (ho=0x4c100244) returned 1 [0066.031] RestoreDC (hdc=0x26010810, nSavedDC=-1) returned 1 [0066.031] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0066.031] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0066.031] GetSystemMetrics (nIndex=42) returned 0 [0066.031] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0066.031] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0066.031] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0066.031] GetCurrentObject (hdc=0x26010810, type=0x1) returned 0x1b00017 [0066.031] GetCurrentObject (hdc=0x26010810, type=0x2) returned 0x1900010 [0066.031] GetCurrentObject (hdc=0x26010810, type=0x7) returned 0x490500d1 [0066.031] GetCurrentObject (hdc=0x26010810, type=0x6) returned 0x18a002e [0066.031] SaveDC (hdc=0x26010810) returned 2 [0066.031] GetNearestColor (hdc=0x26010810, color=0xf5f5f5) returned 0xf5f5f5 [0066.031] CreateSolidBrush (color=0xf5f5f5) returned 0x4d100244 [0066.031] FillRect (hDC=0x26010810, lprc=0x1ee270, hbr=0x4d100244) returned 1 [0066.031] DeleteObject (ho=0x4d100244) returned 1 [0066.032] RestoreDC (hdc=0x26010810, nSavedDC=-1) returned 1 [0066.032] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0066.032] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0066.032] GetSystemMetrics (nIndex=42) returned 0 [0066.032] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0066.032] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0066.032] RestoreDC (hdc=0x26010810, nSavedDC=-1) returned 1 [0066.032] GdipReleaseDC (graphics=0x504fbc8, hdc=0x26010810) returned 0x0 [0066.032] IsAppThemed () returned 0x1 [0066.032] GetThemeAppProperties () returned 0x3 [0066.032] GetThemeAppProperties () returned 0x3 [0066.032] IsAppThemed () returned 0x1 [0066.032] GetThemeAppProperties () returned 0x3 [0066.032] GetThemeAppProperties () returned 0x3 [0066.032] IsThemePartDefined () returned 0x1 [0066.032] GdipCreateRegion (region=0x1ee764) returned 0x0 [0066.032] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0066.032] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0066.032] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0066.032] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0066.032] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0066.032] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0066.032] LocalFree (hMem=0x416cb8) returned 0x0 [0066.032] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0066.032] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0066.033] LocalFree (hMem=0x416cb8) returned 0x0 [0066.033] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0066.033] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0066.033] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0066.033] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0066.033] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0066.033] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0066.033] GetCurrentObject (hdc=0x26010810, type=0x1) returned 0x1b00017 [0066.033] GetCurrentObject (hdc=0x26010810, type=0x2) returned 0x1900010 [0066.033] GetCurrentObject (hdc=0x26010810, type=0x7) returned 0x490500d1 [0066.033] GetCurrentObject (hdc=0x26010810, type=0x6) returned 0x18a002e [0066.033] SaveDC (hdc=0x26010810) returned 1 [0066.033] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x73040246 [0066.033] GetClipRgn (hdc=0x26010810, hrgn=0x73040246) returned 0 [0066.033] SelectClipRgn (hdc=0x26010810, hrgn=0x90040813) returned 2 [0066.033] DeleteObject (ho=0x73040246) returned 1 [0066.033] DeleteObject (ho=0x90040813) returned 1 [0066.033] OffsetViewportOrgEx (in: hdc=0x26010810, x=0, y=0, lppt=0x2637bb8 | out: lppt=0x2637bb8) returned 1 [0066.033] IsAppThemed () returned 0x1 [0066.033] GetThemeAppProperties () returned 0x3 [0066.033] GetThemeAppProperties () returned 0x3 [0066.033] DrawThemeBackground () returned 0x0 [0066.034] RestoreDC (hdc=0x26010810, nSavedDC=-1) returned 1 [0066.034] GdipReleaseDC (graphics=0x504fbc8, hdc=0x26010810) returned 0x0 [0066.034] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0066.034] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0066.034] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0066.034] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0066.034] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0066.034] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0066.034] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0066.034] LocalFree (hMem=0x416cb8) returned 0x0 [0066.034] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0066.034] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0066.034] LocalFree (hMem=0x416cb8) returned 0x0 [0066.034] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0066.034] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0066.034] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0066.034] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0066.034] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0066.034] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0066.034] GetCurrentObject (hdc=0x26010810, type=0x1) returned 0x1b00017 [0066.034] GetCurrentObject (hdc=0x26010810, type=0x2) returned 0x1900010 [0066.034] GetCurrentObject (hdc=0x26010810, type=0x7) returned 0x490500d1 [0066.034] GetCurrentObject (hdc=0x26010810, type=0x6) returned 0x18a002e [0066.034] SaveDC (hdc=0x26010810) returned 1 [0066.035] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x91040813 [0066.035] GetClipRgn (hdc=0x26010810, hrgn=0x91040813) returned 0 [0066.035] SelectClipRgn (hdc=0x26010810, hrgn=0x74040246) returned 2 [0066.035] DeleteObject (ho=0x91040813) returned 1 [0066.035] DeleteObject (ho=0x74040246) returned 1 [0066.035] OffsetViewportOrgEx (in: hdc=0x26010810, x=0, y=0, lppt=0x2637e8c | out: lppt=0x2637e8c) returned 1 [0066.035] IsAppThemed () returned 0x1 [0066.035] GetThemeAppProperties () returned 0x3 [0066.035] GetThemeAppProperties () returned 0x3 [0066.035] GetThemeBackgroundContentRect () returned 0x0 [0066.035] RestoreDC (hdc=0x26010810, nSavedDC=-1) returned 1 [0066.035] GdipReleaseDC (graphics=0x504fbc8, hdc=0x26010810) returned 0x0 [0066.035] IsAppThemed () returned 0x1 [0066.035] GetThemeAppProperties () returned 0x3 [0066.035] GetThemeAppProperties () returned 0x3 [0066.035] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0066.035] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0066.035] GetCurrentObject (hdc=0x26010810, type=0x1) returned 0x1b00017 [0066.035] GetCurrentObject (hdc=0x26010810, type=0x2) returned 0x1900010 [0066.035] GetCurrentObject (hdc=0x26010810, type=0x7) returned 0x490500d1 [0066.035] GetCurrentObject (hdc=0x26010810, type=0x6) returned 0x18a002e [0066.035] SaveDC (hdc=0x26010810) returned 1 [0066.035] GetTextAlign (hdc=0x26010810) returned 0x0 [0066.035] GetTextColor (hdc=0x26010810) returned 0x0 [0066.036] GetCurrentObject (hdc=0x26010810, type=0x6) returned 0x18a002e [0066.036] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0066.036] SelectObject (hdc=0x26010810, h=0x220a081a) returned 0x18a002e [0066.036] GetBkMode (hdc=0x26010810) returned 2 [0066.036] SetBkMode (hdc=0x26010810, mode=1) returned 2 [0066.036] DrawTextExW (in: hdc=0x26010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2638220 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0066.036] DrawTextExW (in: hdc=0x26010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2638220 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0066.036] RestoreDC (hdc=0x26010810, nSavedDC=-1) returned 1 [0066.036] GdipReleaseDC (graphics=0x504fbc8, hdc=0x26010810) returned 0x0 [0066.036] GetFocus () returned 0x201d0 [0066.036] IsAppThemed () returned 0x1 [0066.036] GetThemeAppProperties () returned 0x3 [0066.036] GetThemeAppProperties () returned 0x3 [0066.036] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0066.036] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x26010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0066.037] GdipReleaseDC (graphics=0x504fbc8, hdc=0x26010810) returned 0x0 [0066.037] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0066.037] SelectObject (hdc=0x26010810, h=0x185000f) returned 0x490500d1 [0066.037] DeleteDC (hdc=0x26010810) returned 1 [0066.037] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0066.037] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0066.037] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x263831c, cPoints=0x1 | out: lpPoints=0x263831c) returned 42533703 [0066.037] WindowFromPoint (Point=0x396) returned 0x201d0 [0066.037] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940396) returned 0x1 [0066.037] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0066.037] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0066.037] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0066.037] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0066.037] GetSystemMetrics (nIndex=42) returned 0 [0066.037] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0066.037] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0066.037] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0066.037] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0066.037] GetCapture () returned 0x201d0 [0066.037] ReleaseCapture () returned 1 [0066.037] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0066.038] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0066.038] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940396) returned 0x1 [0066.038] IsWindowUnicode (hWnd=0x201d0) returned 1 [0066.038] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0066.038] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940396) returned 0x1 [0066.038] SetCursor (hCursor=0x10003) returned 0x10003 [0066.038] TranslateMessage (lpMsg=0x1ef250) returned 0 [0066.038] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0066.038] GetKeyState (nVirtKey=1) returned 1 [0066.038] GetKeyState (nVirtKey=2) returned 0 [0066.038] GetKeyState (nVirtKey=4) returned 0 [0066.038] GetKeyState (nVirtKey=5) returned 0 [0066.038] GetKeyState (nVirtKey=6) returned 0 [0066.038] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0066.038] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0066.038] WaitMessage () returned 1 [0069.053] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0069.054] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403ce) returned 0x1 [0069.054] IsWindowUnicode (hWnd=0x201d0) returned 1 [0069.054] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0069.054] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403ce) returned 0x1 [0069.055] SetCursor (hCursor=0x10003) returned 0x10003 [0069.055] TranslateMessage (lpMsg=0x1ef250) returned 0 [0069.055] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0069.055] GetKeyState (nVirtKey=1) returned 1 [0069.055] GetKeyState (nVirtKey=2) returned 0 [0069.055] GetKeyState (nVirtKey=4) returned 0 [0069.055] GetKeyState (nVirtKey=5) returned 0 [0069.055] GetKeyState (nVirtKey=6) returned 0 [0069.055] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0069.055] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0069.055] WaitMessage () returned 1 [0069.124] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0069.124] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403ce) returned 0x1 [0069.124] IsWindowUnicode (hWnd=0x201d0) returned 1 [0069.125] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0069.125] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403ce) returned 0x1 [0069.125] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0069.125] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e30289) returned 0x0 [0069.125] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0069.125] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0069.125] SetCursor (hCursor=0x10003) returned 0x10003 [0069.125] TranslateMessage (lpMsg=0x1ef250) returned 0 [0069.125] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0069.126] GetKeyState (nVirtKey=1) returned -128 [0069.126] GetKeyState (nVirtKey=2) returned 0 [0069.126] GetKeyState (nVirtKey=4) returned 0 [0069.126] GetKeyState (nVirtKey=5) returned 0 [0069.126] GetKeyState (nVirtKey=6) returned 0 [0069.126] IsWindowVisible (hWnd=0x201d0) returned 1 [0069.126] IsWindowEnabled (hWnd=0x201d0) returned 1 [0069.126] SetFocus (hWnd=0x201d0) returned 0x201d0 [0069.126] GetFocus () returned 0x201d0 [0069.126] GetFocus () returned 0x201d0 [0069.126] GetFocus () returned 0x201d0 [0069.126] GetKeyState (nVirtKey=1) returned -128 [0069.126] GetKeyState (nVirtKey=2) returned 0 [0069.126] GetKeyState (nVirtKey=4) returned 0 [0069.126] GetKeyState (nVirtKey=5) returned 0 [0069.126] GetKeyState (nVirtKey=6) returned 0 [0069.126] GetCapture () returned 0x0 [0069.126] SetCapture (hWnd=0x201d0) returned 0x0 [0069.127] GetKeyState (nVirtKey=1) returned -128 [0069.127] GetKeyState (nVirtKey=2) returned 0 [0069.127] GetKeyState (nVirtKey=4) returned 0 [0069.127] GetKeyState (nVirtKey=5) returned 0 [0069.127] GetKeyState (nVirtKey=6) returned 0 [0069.127] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0069.127] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0069.127] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0069.127] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0069.127] TranslateMessage (lpMsg=0x1ef250) returned 0 [0069.127] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0069.127] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0069.127] IsWindowUnicode (hWnd=0x201d0) returned 1 [0069.127] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0069.127] TranslateMessage (lpMsg=0x1ef250) returned 0 [0069.127] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0069.127] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2638440, cPoints=0x1 | out: lpPoints=0x2638440) returned 42533703 [0069.128] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0069.128] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0069.128] UpdateWindow (hWnd=0x201d0) returned 1 [0069.128] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0069.128] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0069.129] CreateCompatibleDC (hdc=0x120107ec) returned 0x27010810 [0069.129] SelectObject (hdc=0x27010810, h=0x490500d1) returned 0x185000f [0069.129] GdipCreateFromHDC (hdc=0x27010810, graphics=0x1eea5c) returned 0x0 [0069.130] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0069.130] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0069.130] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0069.130] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0069.130] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0069.130] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0069.131] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0069.131] LocalFree (hMem=0x416cb8) returned 0x0 [0069.131] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0069.131] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0069.131] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0069.131] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0069.131] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0069.131] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd6f0dbd) returned 0x0 [0069.131] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0069.132] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0069.132] GetCurrentObject (hdc=0x27010810, type=0x1) returned 0x1b00017 [0069.132] GetCurrentObject (hdc=0x27010810, type=0x2) returned 0x1900010 [0069.132] GetCurrentObject (hdc=0x27010810, type=0x7) returned 0x490500d1 [0069.132] GetCurrentObject (hdc=0x27010810, type=0x6) returned 0x18a002e [0069.132] SaveDC (hdc=0x27010810) returned 1 [0069.132] GetNearestColor (hdc=0x27010810, color=0xf5f5f5) returned 0xf5f5f5 [0069.132] GetNearestColor (hdc=0x27010810, color=0x515151) returned 0x515151 [0069.132] GetNearestColor (hdc=0x27010810, color=0x0) returned 0x0 [0069.132] GetNearestColor (hdc=0x27010810, color=0x515151) returned 0x515151 [0069.132] GetNearestColor (hdc=0x27010810, color=0x0) returned 0x0 [0069.132] GetNearestColor (hdc=0x27010810, color=0xfafafa) returned 0xfafafa [0069.133] GetNearestColor (hdc=0x27010810, color=0xe0e0e0) returned 0xe0e0e0 [0069.133] GetNearestColor (hdc=0x27010810, color=0xdcdcdc) returned 0xdcdcdc [0069.133] GetNearestColor (hdc=0x27010810, color=0x0) returned 0x0 [0069.133] RestoreDC (hdc=0x27010810, nSavedDC=-1) returned 1 [0069.133] GdipReleaseDC (graphics=0x504fbc8, hdc=0x27010810) returned 0x0 [0069.133] IsAppThemed () returned 0x1 [0069.133] GetThemeAppProperties () returned 0x3 [0069.133] GetThemeAppProperties () returned 0x3 [0069.133] IsAppThemed () returned 0x1 [0069.133] GetThemeAppProperties () returned 0x3 [0069.133] GetThemeAppProperties () returned 0x3 [0069.133] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2638b44 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0069.135] IsAppThemed () returned 0x1 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] IsAppThemed () returned 0x1 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] IsAppThemed () returned 0x1 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] IsAppThemed () returned 0x1 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] IsThemePartDefined () returned 0x1 [0069.135] IsAppThemed () returned 0x1 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0069.135] IsAppThemed () returned 0x1 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] IsAppThemed () returned 0x1 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] GetThemeAppProperties () returned 0x3 [0069.135] IsThemePartDefined () returned 0x1 [0069.135] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0069.135] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0069.135] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0069.135] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0069.136] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0069.136] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0069.136] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0069.136] LocalFree (hMem=0x416cb8) returned 0x0 [0069.136] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0069.136] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0069.136] LocalFree (hMem=0x416cb8) returned 0x0 [0069.136] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0069.136] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0069.136] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0069.136] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0069.136] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0069.136] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0069.136] GetCurrentObject (hdc=0x27010810, type=0x1) returned 0x1b00017 [0069.136] GetCurrentObject (hdc=0x27010810, type=0x2) returned 0x1900010 [0069.136] GetCurrentObject (hdc=0x27010810, type=0x7) returned 0x490500d1 [0069.136] GetCurrentObject (hdc=0x27010810, type=0x6) returned 0x18a002e [0069.136] SaveDC (hdc=0x27010810) returned 1 [0069.136] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x75040246 [0069.136] GetClipRgn (hdc=0x27010810, hrgn=0x75040246) returned 0 [0069.136] SelectClipRgn (hdc=0x27010810, hrgn=0x95040813) returned 2 [0069.137] DeleteObject (ho=0x75040246) returned 1 [0069.137] DeleteObject (ho=0x95040813) returned 1 [0069.137] OffsetViewportOrgEx (in: hdc=0x27010810, x=0, y=0, lppt=0x26391f4 | out: lppt=0x26391f4) returned 1 [0069.137] DrawThemeParentBackground () returned 0x0 [0069.137] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0069.137] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0069.137] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0069.137] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0069.137] GetSystemMetrics (nIndex=42) returned 0 [0069.137] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0069.137] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0069.137] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0069.137] GetCurrentObject (hdc=0x27010810, type=0x1) returned 0x1b00017 [0069.137] GetCurrentObject (hdc=0x27010810, type=0x2) returned 0x1900010 [0069.137] GetCurrentObject (hdc=0x27010810, type=0x7) returned 0x490500d1 [0069.137] GetCurrentObject (hdc=0x27010810, type=0x6) returned 0x18a002e [0069.138] SaveDC (hdc=0x27010810) returned 2 [0069.138] GetNearestColor (hdc=0x27010810, color=0xf5f5f5) returned 0xf5f5f5 [0069.138] CreateSolidBrush (color=0xf5f5f5) returned 0x4e100244 [0069.138] FillRect (hDC=0x27010810, lprc=0x1ee2d0, hbr=0x4e100244) returned 1 [0069.138] DeleteObject (ho=0x4e100244) returned 1 [0069.138] RestoreDC (hdc=0x27010810, nSavedDC=-1) returned 1 [0069.138] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0069.138] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0069.138] GetSystemMetrics (nIndex=42) returned 0 [0069.138] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0069.138] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0069.138] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0069.138] GetCurrentObject (hdc=0x27010810, type=0x1) returned 0x1b00017 [0069.138] GetCurrentObject (hdc=0x27010810, type=0x2) returned 0x1900010 [0069.139] GetCurrentObject (hdc=0x27010810, type=0x7) returned 0x490500d1 [0069.139] GetCurrentObject (hdc=0x27010810, type=0x6) returned 0x18a002e [0069.139] SaveDC (hdc=0x27010810) returned 2 [0069.139] GetNearestColor (hdc=0x27010810, color=0xf5f5f5) returned 0xf5f5f5 [0069.139] CreateSolidBrush (color=0xf5f5f5) returned 0x4f100244 [0069.139] FillRect (hDC=0x27010810, lprc=0x1ee270, hbr=0x4f100244) returned 1 [0069.139] DeleteObject (ho=0x4f100244) returned 1 [0069.139] RestoreDC (hdc=0x27010810, nSavedDC=-1) returned 1 [0069.139] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0069.139] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0069.139] GetSystemMetrics (nIndex=42) returned 0 [0069.139] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0069.139] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0069.139] RestoreDC (hdc=0x27010810, nSavedDC=-1) returned 1 [0069.139] GdipReleaseDC (graphics=0x504fbc8, hdc=0x27010810) returned 0x0 [0069.139] IsAppThemed () returned 0x1 [0069.139] GetThemeAppProperties () returned 0x3 [0069.139] GetThemeAppProperties () returned 0x3 [0069.139] IsAppThemed () returned 0x1 [0069.139] GetThemeAppProperties () returned 0x3 [0069.139] GetThemeAppProperties () returned 0x3 [0069.139] IsThemePartDefined () returned 0x1 [0069.139] GdipCreateRegion (region=0x1ee764) returned 0x0 [0069.139] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0069.140] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0069.140] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0069.140] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0069.140] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0069.140] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0069.140] LocalFree (hMem=0x416cb8) returned 0x0 [0069.140] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0069.140] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0069.140] LocalFree (hMem=0x416cb8) returned 0x0 [0069.140] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0069.140] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0069.140] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0069.140] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0069.140] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0069.140] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0069.140] GetCurrentObject (hdc=0x27010810, type=0x1) returned 0x1b00017 [0069.140] GetCurrentObject (hdc=0x27010810, type=0x2) returned 0x1900010 [0069.140] GetCurrentObject (hdc=0x27010810, type=0x7) returned 0x490500d1 [0069.140] GetCurrentObject (hdc=0x27010810, type=0x6) returned 0x18a002e [0069.140] SaveDC (hdc=0x27010810) returned 1 [0069.140] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x96040813 [0069.140] GetClipRgn (hdc=0x27010810, hrgn=0x96040813) returned 0 [0069.140] SelectClipRgn (hdc=0x27010810, hrgn=0x77040246) returned 2 [0069.141] DeleteObject (ho=0x96040813) returned 1 [0069.141] DeleteObject (ho=0x77040246) returned 1 [0069.141] OffsetViewportOrgEx (in: hdc=0x27010810, x=0, y=0, lppt=0x2639a34 | out: lppt=0x2639a34) returned 1 [0069.141] IsAppThemed () returned 0x1 [0069.141] GetThemeAppProperties () returned 0x3 [0069.141] GetThemeAppProperties () returned 0x3 [0069.141] DrawThemeBackground () returned 0x0 [0069.141] RestoreDC (hdc=0x27010810, nSavedDC=-1) returned 1 [0069.141] GdipReleaseDC (graphics=0x504fbc8, hdc=0x27010810) returned 0x0 [0069.141] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0069.141] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0069.141] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0069.141] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0069.141] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0069.141] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0069.141] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0069.141] LocalFree (hMem=0x416cb8) returned 0x0 [0069.141] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0069.142] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0069.142] LocalFree (hMem=0x416cb8) returned 0x0 [0069.142] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0069.142] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0069.142] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0069.142] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0069.142] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0069.142] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0069.142] GetCurrentObject (hdc=0x27010810, type=0x1) returned 0x1b00017 [0069.142] GetCurrentObject (hdc=0x27010810, type=0x2) returned 0x1900010 [0069.142] GetCurrentObject (hdc=0x27010810, type=0x7) returned 0x490500d1 [0069.142] GetCurrentObject (hdc=0x27010810, type=0x6) returned 0x18a002e [0069.142] SaveDC (hdc=0x27010810) returned 1 [0069.142] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x78040246 [0069.142] GetClipRgn (hdc=0x27010810, hrgn=0x78040246) returned 0 [0069.142] SelectClipRgn (hdc=0x27010810, hrgn=0x97040813) returned 2 [0069.142] DeleteObject (ho=0x78040246) returned 1 [0069.142] DeleteObject (ho=0x97040813) returned 1 [0069.142] OffsetViewportOrgEx (in: hdc=0x27010810, x=0, y=0, lppt=0x2639d08 | out: lppt=0x2639d08) returned 1 [0069.142] IsAppThemed () returned 0x1 [0069.142] GetThemeAppProperties () returned 0x3 [0069.142] GetThemeAppProperties () returned 0x3 [0069.142] GetThemeBackgroundContentRect () returned 0x0 [0069.142] RestoreDC (hdc=0x27010810, nSavedDC=-1) returned 1 [0069.143] GdipReleaseDC (graphics=0x504fbc8, hdc=0x27010810) returned 0x0 [0069.143] IsAppThemed () returned 0x1 [0069.143] GetThemeAppProperties () returned 0x3 [0069.143] GetThemeAppProperties () returned 0x3 [0069.143] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0069.143] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0069.143] GetCurrentObject (hdc=0x27010810, type=0x1) returned 0x1b00017 [0069.143] GetCurrentObject (hdc=0x27010810, type=0x2) returned 0x1900010 [0069.143] GetCurrentObject (hdc=0x27010810, type=0x7) returned 0x490500d1 [0069.143] GetCurrentObject (hdc=0x27010810, type=0x6) returned 0x18a002e [0069.143] SaveDC (hdc=0x27010810) returned 1 [0069.143] GetTextAlign (hdc=0x27010810) returned 0x0 [0069.143] GetTextColor (hdc=0x27010810) returned 0x0 [0069.143] GetCurrentObject (hdc=0x27010810, type=0x6) returned 0x18a002e [0069.143] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0069.144] SelectObject (hdc=0x27010810, h=0x220a081a) returned 0x18a002e [0069.144] GetBkMode (hdc=0x27010810) returned 2 [0069.144] SetBkMode (hdc=0x27010810, mode=1) returned 2 [0069.144] DrawTextExW (in: hdc=0x27010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x263a09c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0069.144] DrawTextExW (in: hdc=0x27010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x263a09c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0069.145] RestoreDC (hdc=0x27010810, nSavedDC=-1) returned 1 [0069.145] GdipReleaseDC (graphics=0x504fbc8, hdc=0x27010810) returned 0x0 [0069.145] GetFocus () returned 0x201d0 [0069.145] IsAppThemed () returned 0x1 [0069.145] GetThemeAppProperties () returned 0x3 [0069.145] GetThemeAppProperties () returned 0x3 [0069.145] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0069.145] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x27010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.146] GdipReleaseDC (graphics=0x504fbc8, hdc=0x27010810) returned 0x0 [0069.146] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0069.146] SelectObject (hdc=0x27010810, h=0x185000f) returned 0x490500d1 [0069.146] DeleteDC (hdc=0x27010810) returned 1 [0069.146] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0069.146] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0069.146] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x263a198, cPoints=0x1 | out: lpPoints=0x263a198) returned 42533703 [0069.146] WindowFromPoint (Point=0x3ce) returned 0x201d0 [0069.146] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403ce) returned 0x1 [0069.146] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0069.146] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0069.146] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0069.147] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0069.147] GetSystemMetrics (nIndex=42) returned 0 [0069.147] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0069.147] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0069.147] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0069.147] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0069.147] GetCapture () returned 0x201d0 [0069.147] ReleaseCapture () returned 1 [0069.147] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0069.147] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0069.147] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403ce) returned 0x1 [0069.147] IsWindowUnicode (hWnd=0x201d0) returned 1 [0069.147] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0069.147] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403ce) returned 0x1 [0069.147] SetCursor (hCursor=0x10003) returned 0x10003 [0069.148] TranslateMessage (lpMsg=0x1ef250) returned 0 [0069.148] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0069.148] GetKeyState (nVirtKey=1) returned 0 [0069.148] GetKeyState (nVirtKey=2) returned 0 [0069.148] GetKeyState (nVirtKey=4) returned 0 [0069.148] GetKeyState (nVirtKey=5) returned 0 [0069.148] GetKeyState (nVirtKey=6) returned 0 [0069.148] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0069.148] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0069.148] WaitMessage () returned 1 [0069.801] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0069.801] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0069.801] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x40122, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0069.801] NtdllDefWindowProc_W () returned 0x1 [0069.801] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0069.801] WaitMessage () returned 1 [0072.175] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0072.175] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003a5) returned 0x1 [0072.175] IsWindowUnicode (hWnd=0x201d0) returned 1 [0072.175] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0072.175] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003a5) returned 0x1 [0072.175] SetCursor (hCursor=0x10003) returned 0x10003 [0072.175] TranslateMessage (lpMsg=0x1ef250) returned 0 [0072.175] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0072.175] GetKeyState (nVirtKey=1) returned 0 [0072.175] GetKeyState (nVirtKey=2) returned 0 [0072.175] GetKeyState (nVirtKey=4) returned 0 [0072.176] GetKeyState (nVirtKey=5) returned 0 [0072.176] GetKeyState (nVirtKey=6) returned 0 [0072.176] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0072.176] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0072.176] WaitMessage () returned 1 [0072.248] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0072.248] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003a5) returned 0x1 [0072.249] IsWindowUnicode (hWnd=0x201d0) returned 1 [0072.249] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0072.249] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003a5) returned 0x1 [0072.250] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0072.250] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1df0260) returned 0x0 [0072.250] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0072.250] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0072.250] SetCursor (hCursor=0x10003) returned 0x10003 [0072.250] TranslateMessage (lpMsg=0x1ef250) returned 0 [0072.250] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0072.250] GetKeyState (nVirtKey=1) returned -127 [0072.250] GetKeyState (nVirtKey=2) returned 0 [0072.250] GetKeyState (nVirtKey=4) returned 0 [0072.250] GetKeyState (nVirtKey=5) returned 0 [0072.250] GetKeyState (nVirtKey=6) returned 0 [0072.250] IsWindowVisible (hWnd=0x201d0) returned 1 [0072.250] IsWindowEnabled (hWnd=0x201d0) returned 1 [0072.250] SetFocus (hWnd=0x201d0) returned 0x201d0 [0072.250] GetFocus () returned 0x201d0 [0072.250] GetFocus () returned 0x201d0 [0072.250] GetFocus () returned 0x201d0 [0072.250] GetKeyState (nVirtKey=1) returned -127 [0072.250] GetKeyState (nVirtKey=2) returned 0 [0072.250] GetKeyState (nVirtKey=4) returned 0 [0072.251] GetKeyState (nVirtKey=5) returned 0 [0072.251] GetKeyState (nVirtKey=6) returned 0 [0072.251] GetCapture () returned 0x0 [0072.251] SetCapture (hWnd=0x201d0) returned 0x0 [0072.251] GetKeyState (nVirtKey=1) returned -127 [0072.251] GetKeyState (nVirtKey=2) returned 0 [0072.251] GetKeyState (nVirtKey=4) returned 0 [0072.251] GetKeyState (nVirtKey=5) returned 0 [0072.251] GetKeyState (nVirtKey=6) returned 0 [0072.251] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0072.251] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0072.251] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0072.251] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0072.251] TranslateMessage (lpMsg=0x1ef250) returned 0 [0072.251] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0072.251] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0072.251] IsWindowUnicode (hWnd=0x201d0) returned 1 [0072.251] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0072.251] TranslateMessage (lpMsg=0x1ef250) returned 0 [0072.251] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0072.251] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x263a2e0, cPoints=0x1 | out: lpPoints=0x263a2e0) returned 42533703 [0072.251] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0072.251] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0072.252] UpdateWindow (hWnd=0x201d0) returned 1 [0072.252] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0072.252] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0072.252] CreateCompatibleDC (hdc=0x120107ec) returned 0x28010810 [0072.252] SelectObject (hdc=0x28010810, h=0x490500d1) returned 0x185000f [0072.252] GdipCreateFromHDC (hdc=0x28010810, graphics=0x1eea5c) returned 0x0 [0072.252] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0072.252] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0072.253] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0072.253] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0072.253] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0072.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0072.253] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0072.253] LocalFree (hMem=0x416cb8) returned 0x0 [0072.253] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0072.253] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0072.253] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0072.253] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0072.253] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0072.253] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd6d0dbd) returned 0x0 [0072.253] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0072.253] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0072.253] GetCurrentObject (hdc=0x28010810, type=0x1) returned 0x1b00017 [0072.253] GetCurrentObject (hdc=0x28010810, type=0x2) returned 0x1900010 [0072.253] GetCurrentObject (hdc=0x28010810, type=0x7) returned 0x490500d1 [0072.253] GetCurrentObject (hdc=0x28010810, type=0x6) returned 0x18a002e [0072.253] SaveDC (hdc=0x28010810) returned 1 [0072.253] GetNearestColor (hdc=0x28010810, color=0xf5f5f5) returned 0xf5f5f5 [0072.254] GetNearestColor (hdc=0x28010810, color=0x515151) returned 0x515151 [0072.254] GetNearestColor (hdc=0x28010810, color=0x0) returned 0x0 [0072.254] GetNearestColor (hdc=0x28010810, color=0x515151) returned 0x515151 [0072.254] GetNearestColor (hdc=0x28010810, color=0x0) returned 0x0 [0072.254] GetNearestColor (hdc=0x28010810, color=0xfafafa) returned 0xfafafa [0072.254] GetNearestColor (hdc=0x28010810, color=0xe0e0e0) returned 0xe0e0e0 [0072.254] GetNearestColor (hdc=0x28010810, color=0xdcdcdc) returned 0xdcdcdc [0072.254] GetNearestColor (hdc=0x28010810, color=0x0) returned 0x0 [0072.254] RestoreDC (hdc=0x28010810, nSavedDC=-1) returned 1 [0072.254] GdipReleaseDC (graphics=0x504fbc8, hdc=0x28010810) returned 0x0 [0072.254] IsAppThemed () returned 0x1 [0072.254] GetThemeAppProperties () returned 0x3 [0072.254] GetThemeAppProperties () returned 0x3 [0072.254] IsAppThemed () returned 0x1 [0072.254] GetThemeAppProperties () returned 0x3 [0072.254] GetThemeAppProperties () returned 0x3 [0072.254] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x263a9e4 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0072.255] IsAppThemed () returned 0x1 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] IsAppThemed () returned 0x1 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] IsAppThemed () returned 0x1 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] IsAppThemed () returned 0x1 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] IsThemePartDefined () returned 0x1 [0072.255] IsAppThemed () returned 0x1 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0072.255] IsAppThemed () returned 0x1 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] IsAppThemed () returned 0x1 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] GetThemeAppProperties () returned 0x3 [0072.255] IsThemePartDefined () returned 0x1 [0072.255] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0072.255] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0072.255] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0072.255] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0072.256] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0072.256] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0072.256] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0072.256] LocalFree (hMem=0x416cb8) returned 0x0 [0072.256] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0072.256] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0072.256] LocalFree (hMem=0x416cb8) returned 0x0 [0072.256] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0072.256] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0072.256] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0072.256] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0072.256] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0072.256] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0072.256] GetCurrentObject (hdc=0x28010810, type=0x1) returned 0x1b00017 [0072.256] GetCurrentObject (hdc=0x28010810, type=0x2) returned 0x1900010 [0072.256] GetCurrentObject (hdc=0x28010810, type=0x7) returned 0x490500d1 [0072.256] GetCurrentObject (hdc=0x28010810, type=0x6) returned 0x18a002e [0072.256] SaveDC (hdc=0x28010810) returned 1 [0072.256] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x98040813 [0072.256] GetClipRgn (hdc=0x28010810, hrgn=0x98040813) returned 0 [0072.256] SelectClipRgn (hdc=0x28010810, hrgn=0x7c040246) returned 2 [0072.256] DeleteObject (ho=0x98040813) returned 1 [0072.257] DeleteObject (ho=0x7c040246) returned 1 [0072.257] OffsetViewportOrgEx (in: hdc=0x28010810, x=0, y=0, lppt=0x263b094 | out: lppt=0x263b094) returned 1 [0072.257] DrawThemeParentBackground () returned 0x0 [0072.257] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0072.257] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0072.257] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0072.257] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0072.257] GetSystemMetrics (nIndex=42) returned 0 [0072.257] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0072.257] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0072.257] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0072.257] GetCurrentObject (hdc=0x28010810, type=0x1) returned 0x1b00017 [0072.257] GetCurrentObject (hdc=0x28010810, type=0x2) returned 0x1900010 [0072.257] GetCurrentObject (hdc=0x28010810, type=0x7) returned 0x490500d1 [0072.257] GetCurrentObject (hdc=0x28010810, type=0x6) returned 0x18a002e [0072.257] SaveDC (hdc=0x28010810) returned 2 [0072.257] GetNearestColor (hdc=0x28010810, color=0xf5f5f5) returned 0xf5f5f5 [0072.257] CreateSolidBrush (color=0xf5f5f5) returned 0x50100244 [0072.257] FillRect (hDC=0x28010810, lprc=0x1ee2d0, hbr=0x50100244) returned 1 [0072.258] DeleteObject (ho=0x50100244) returned 1 [0072.258] RestoreDC (hdc=0x28010810, nSavedDC=-1) returned 1 [0072.258] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0072.258] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0072.258] GetSystemMetrics (nIndex=42) returned 0 [0072.258] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0072.258] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0072.258] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0072.258] GetCurrentObject (hdc=0x28010810, type=0x1) returned 0x1b00017 [0072.258] GetCurrentObject (hdc=0x28010810, type=0x2) returned 0x1900010 [0072.258] GetCurrentObject (hdc=0x28010810, type=0x7) returned 0x490500d1 [0072.258] GetCurrentObject (hdc=0x28010810, type=0x6) returned 0x18a002e [0072.258] SaveDC (hdc=0x28010810) returned 2 [0072.258] GetNearestColor (hdc=0x28010810, color=0xf5f5f5) returned 0xf5f5f5 [0072.258] CreateSolidBrush (color=0xf5f5f5) returned 0x51100244 [0072.258] FillRect (hDC=0x28010810, lprc=0x1ee270, hbr=0x51100244) returned 1 [0072.258] DeleteObject (ho=0x51100244) returned 1 [0072.258] RestoreDC (hdc=0x28010810, nSavedDC=-1) returned 1 [0072.259] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0072.259] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0072.259] GetSystemMetrics (nIndex=42) returned 0 [0072.259] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0072.259] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0072.259] RestoreDC (hdc=0x28010810, nSavedDC=-1) returned 1 [0072.259] GdipReleaseDC (graphics=0x504fbc8, hdc=0x28010810) returned 0x0 [0072.259] IsAppThemed () returned 0x1 [0072.259] GetThemeAppProperties () returned 0x3 [0072.259] GetThemeAppProperties () returned 0x3 [0072.259] IsAppThemed () returned 0x1 [0072.259] GetThemeAppProperties () returned 0x3 [0072.259] GetThemeAppProperties () returned 0x3 [0072.259] IsThemePartDefined () returned 0x1 [0072.259] GdipCreateRegion (region=0x1ee764) returned 0x0 [0072.259] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0072.259] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0072.259] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0072.259] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0072.259] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0072.259] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0072.259] LocalFree (hMem=0x416cb8) returned 0x0 [0072.259] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0072.259] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0072.259] LocalFree (hMem=0x416cb8) returned 0x0 [0072.259] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0072.259] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0072.260] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0072.260] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0072.260] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0072.260] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0072.260] GetCurrentObject (hdc=0x28010810, type=0x1) returned 0x1b00017 [0072.260] GetCurrentObject (hdc=0x28010810, type=0x2) returned 0x1900010 [0072.260] GetCurrentObject (hdc=0x28010810, type=0x7) returned 0x490500d1 [0072.260] GetCurrentObject (hdc=0x28010810, type=0x6) returned 0x18a002e [0072.260] SaveDC (hdc=0x28010810) returned 1 [0072.260] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d040246 [0072.260] GetClipRgn (hdc=0x28010810, hrgn=0x7d040246) returned 0 [0072.260] SelectClipRgn (hdc=0x28010810, hrgn=0x9a040813) returned 2 [0072.260] DeleteObject (ho=0x7d040246) returned 1 [0072.260] DeleteObject (ho=0x9a040813) returned 1 [0072.260] OffsetViewportOrgEx (in: hdc=0x28010810, x=0, y=0, lppt=0x263b8d4 | out: lppt=0x263b8d4) returned 1 [0072.260] IsAppThemed () returned 0x1 [0072.260] GetThemeAppProperties () returned 0x3 [0072.260] GetThemeAppProperties () returned 0x3 [0072.260] DrawThemeBackground () returned 0x0 [0072.261] RestoreDC (hdc=0x28010810, nSavedDC=-1) returned 1 [0072.261] GdipReleaseDC (graphics=0x504fbc8, hdc=0x28010810) returned 0x0 [0072.261] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0072.261] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0072.261] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0072.261] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0072.261] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0072.261] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0072.261] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0072.261] LocalFree (hMem=0x416cb8) returned 0x0 [0072.261] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0072.261] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0072.261] LocalFree (hMem=0x416cb8) returned 0x0 [0072.261] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0072.261] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0072.261] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0072.261] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0072.261] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0072.261] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0072.261] GetCurrentObject (hdc=0x28010810, type=0x1) returned 0x1b00017 [0072.261] GetCurrentObject (hdc=0x28010810, type=0x2) returned 0x1900010 [0072.261] GetCurrentObject (hdc=0x28010810, type=0x7) returned 0x490500d1 [0072.261] GetCurrentObject (hdc=0x28010810, type=0x6) returned 0x18a002e [0072.262] SaveDC (hdc=0x28010810) returned 1 [0072.262] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9b040813 [0072.262] GetClipRgn (hdc=0x28010810, hrgn=0x9b040813) returned 0 [0072.262] SelectClipRgn (hdc=0x28010810, hrgn=0x7e040246) returned 2 [0072.262] DeleteObject (ho=0x9b040813) returned 1 [0072.262] DeleteObject (ho=0x7e040246) returned 1 [0072.262] OffsetViewportOrgEx (in: hdc=0x28010810, x=0, y=0, lppt=0x263bba8 | out: lppt=0x263bba8) returned 1 [0072.262] IsAppThemed () returned 0x1 [0072.262] GetThemeAppProperties () returned 0x3 [0072.262] GetThemeAppProperties () returned 0x3 [0072.262] GetThemeBackgroundContentRect () returned 0x0 [0072.262] RestoreDC (hdc=0x28010810, nSavedDC=-1) returned 1 [0072.262] GdipReleaseDC (graphics=0x504fbc8, hdc=0x28010810) returned 0x0 [0072.262] IsAppThemed () returned 0x1 [0072.262] GetThemeAppProperties () returned 0x3 [0072.262] GetThemeAppProperties () returned 0x3 [0072.262] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0072.262] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0072.262] GetCurrentObject (hdc=0x28010810, type=0x1) returned 0x1b00017 [0072.262] GetCurrentObject (hdc=0x28010810, type=0x2) returned 0x1900010 [0072.262] GetCurrentObject (hdc=0x28010810, type=0x7) returned 0x490500d1 [0072.262] GetCurrentObject (hdc=0x28010810, type=0x6) returned 0x18a002e [0072.262] SaveDC (hdc=0x28010810) returned 1 [0072.262] GetTextAlign (hdc=0x28010810) returned 0x0 [0072.262] GetTextColor (hdc=0x28010810) returned 0x0 [0072.262] GetCurrentObject (hdc=0x28010810, type=0x6) returned 0x18a002e [0072.263] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0072.263] SelectObject (hdc=0x28010810, h=0x220a081a) returned 0x18a002e [0072.263] GetBkMode (hdc=0x28010810) returned 2 [0072.263] SetBkMode (hdc=0x28010810, mode=1) returned 2 [0072.263] DrawTextExW (in: hdc=0x28010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x263bf3c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0072.263] DrawTextExW (in: hdc=0x28010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x263bf3c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0072.264] RestoreDC (hdc=0x28010810, nSavedDC=-1) returned 1 [0072.264] GdipReleaseDC (graphics=0x504fbc8, hdc=0x28010810) returned 0x0 [0072.264] GetFocus () returned 0x201d0 [0072.264] IsAppThemed () returned 0x1 [0072.264] GetThemeAppProperties () returned 0x3 [0072.264] GetThemeAppProperties () returned 0x3 [0072.264] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0072.264] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x28010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0072.264] GdipReleaseDC (graphics=0x504fbc8, hdc=0x28010810) returned 0x0 [0072.264] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0072.264] SelectObject (hdc=0x28010810, h=0x185000f) returned 0x490500d1 [0072.264] DeleteDC (hdc=0x28010810) returned 1 [0072.264] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0072.265] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0072.265] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x263c038, cPoints=0x1 | out: lpPoints=0x263c038) returned 42533703 [0072.265] WindowFromPoint (Point=0x3a5) returned 0x201d0 [0072.265] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003a5) returned 0x1 [0072.265] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0072.265] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0072.265] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0072.265] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0072.265] GetSystemMetrics (nIndex=42) returned 0 [0072.265] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0072.265] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0072.265] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0072.265] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0072.265] GetCapture () returned 0x201d0 [0072.265] ReleaseCapture () returned 1 [0072.265] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0072.265] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0072.265] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003a5) returned 0x1 [0072.265] IsWindowUnicode (hWnd=0x201d0) returned 1 [0072.265] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0072.265] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003a5) returned 0x1 [0072.266] SetCursor (hCursor=0x10003) returned 0x10003 [0072.266] TranslateMessage (lpMsg=0x1ef250) returned 0 [0072.266] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0072.266] GetKeyState (nVirtKey=1) returned 1 [0072.266] GetKeyState (nVirtKey=2) returned 0 [0072.266] GetKeyState (nVirtKey=4) returned 0 [0072.266] GetKeyState (nVirtKey=5) returned 0 [0072.266] GetKeyState (nVirtKey=6) returned 0 [0072.266] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0072.266] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0072.266] WaitMessage () returned 1 [0075.301] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0075.302] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ac) returned 0x1 [0075.302] IsWindowUnicode (hWnd=0x201d0) returned 1 [0075.302] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0075.302] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ac) returned 0x1 [0075.302] SetCursor (hCursor=0x10003) returned 0x10003 [0075.302] TranslateMessage (lpMsg=0x1ef250) returned 0 [0075.302] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0075.302] GetKeyState (nVirtKey=1) returned 1 [0075.302] GetKeyState (nVirtKey=2) returned 0 [0075.302] GetKeyState (nVirtKey=4) returned 0 [0075.302] GetKeyState (nVirtKey=5) returned 0 [0075.302] GetKeyState (nVirtKey=6) returned 0 [0075.303] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0075.303] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0075.303] WaitMessage () returned 1 [0075.368] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0075.368] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ac) returned 0x1 [0075.368] IsWindowUnicode (hWnd=0x201d0) returned 1 [0075.368] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0075.368] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ac) returned 0x1 [0075.369] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0075.369] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e00267) returned 0x0 [0075.369] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0075.369] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0075.369] SetCursor (hCursor=0x10003) returned 0x10003 [0075.369] TranslateMessage (lpMsg=0x1ef250) returned 0 [0075.369] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0075.369] GetKeyState (nVirtKey=1) returned -128 [0075.369] GetKeyState (nVirtKey=2) returned 0 [0075.369] GetKeyState (nVirtKey=4) returned 0 [0075.369] GetKeyState (nVirtKey=5) returned 0 [0075.369] GetKeyState (nVirtKey=6) returned 0 [0075.370] IsWindowVisible (hWnd=0x201d0) returned 1 [0075.370] IsWindowEnabled (hWnd=0x201d0) returned 1 [0075.370] SetFocus (hWnd=0x201d0) returned 0x201d0 [0075.370] GetFocus () returned 0x201d0 [0075.370] GetFocus () returned 0x201d0 [0075.370] GetFocus () returned 0x201d0 [0075.370] GetKeyState (nVirtKey=1) returned -128 [0075.370] GetKeyState (nVirtKey=2) returned 0 [0075.370] GetKeyState (nVirtKey=4) returned 0 [0075.370] GetKeyState (nVirtKey=5) returned 0 [0075.370] GetKeyState (nVirtKey=6) returned 0 [0075.370] GetCapture () returned 0x0 [0075.370] SetCapture (hWnd=0x201d0) returned 0x0 [0075.370] GetKeyState (nVirtKey=1) returned -128 [0075.370] GetKeyState (nVirtKey=2) returned 0 [0075.370] GetKeyState (nVirtKey=4) returned 0 [0075.370] GetKeyState (nVirtKey=5) returned 0 [0075.370] GetKeyState (nVirtKey=6) returned 0 [0075.370] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0075.370] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0075.370] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0075.370] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0075.370] TranslateMessage (lpMsg=0x1ef250) returned 0 [0075.371] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0075.371] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0075.371] IsWindowUnicode (hWnd=0x201d0) returned 1 [0075.371] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0075.371] TranslateMessage (lpMsg=0x1ef250) returned 0 [0075.371] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0075.371] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x263c15c, cPoints=0x1 | out: lpPoints=0x263c15c) returned 42533703 [0075.371] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0075.371] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0075.371] UpdateWindow (hWnd=0x201d0) returned 1 [0075.371] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0075.371] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0075.371] CreateCompatibleDC (hdc=0x120107ec) returned 0x29010810 [0075.372] SelectObject (hdc=0x29010810, h=0x490500d1) returned 0x185000f [0075.372] GdipCreateFromHDC (hdc=0x29010810, graphics=0x1eea5c) returned 0x0 [0075.372] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0075.373] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0075.373] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0075.373] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0075.373] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0075.373] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0075.373] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0075.373] LocalFree (hMem=0x416cb8) returned 0x0 [0075.373] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0075.373] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0075.373] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0075.373] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0075.373] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0075.373] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd6b0dbd) returned 0x0 [0075.374] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0075.374] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0075.374] GetCurrentObject (hdc=0x29010810, type=0x1) returned 0x1b00017 [0075.374] GetCurrentObject (hdc=0x29010810, type=0x2) returned 0x1900010 [0075.374] GetCurrentObject (hdc=0x29010810, type=0x7) returned 0x490500d1 [0075.374] GetCurrentObject (hdc=0x29010810, type=0x6) returned 0x18a002e [0075.374] SaveDC (hdc=0x29010810) returned 1 [0075.374] GetNearestColor (hdc=0x29010810, color=0xf5f5f5) returned 0xf5f5f5 [0075.374] GetNearestColor (hdc=0x29010810, color=0x515151) returned 0x515151 [0075.375] GetNearestColor (hdc=0x29010810, color=0x0) returned 0x0 [0075.375] GetNearestColor (hdc=0x29010810, color=0x515151) returned 0x515151 [0075.375] GetNearestColor (hdc=0x29010810, color=0x0) returned 0x0 [0075.375] GetNearestColor (hdc=0x29010810, color=0xfafafa) returned 0xfafafa [0075.375] GetNearestColor (hdc=0x29010810, color=0xe0e0e0) returned 0xe0e0e0 [0075.375] GetNearestColor (hdc=0x29010810, color=0xdcdcdc) returned 0xdcdcdc [0075.375] GetNearestColor (hdc=0x29010810, color=0x0) returned 0x0 [0075.375] RestoreDC (hdc=0x29010810, nSavedDC=-1) returned 1 [0075.375] GdipReleaseDC (graphics=0x504fbc8, hdc=0x29010810) returned 0x0 [0075.375] IsAppThemed () returned 0x1 [0075.375] GetThemeAppProperties () returned 0x3 [0075.375] GetThemeAppProperties () returned 0x3 [0075.375] IsAppThemed () returned 0x1 [0075.375] GetThemeAppProperties () returned 0x3 [0075.375] GetThemeAppProperties () returned 0x3 [0075.375] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x263c860 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0075.376] IsAppThemed () returned 0x1 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] IsAppThemed () returned 0x1 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] IsAppThemed () returned 0x1 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] IsAppThemed () returned 0x1 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] IsThemePartDefined () returned 0x1 [0075.376] IsAppThemed () returned 0x1 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0075.376] IsAppThemed () returned 0x1 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] IsAppThemed () returned 0x1 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] GetThemeAppProperties () returned 0x3 [0075.376] IsThemePartDefined () returned 0x1 [0075.377] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0075.377] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0075.377] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0075.377] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0075.377] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0075.377] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0075.377] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0075.377] LocalFree (hMem=0x416cb8) returned 0x0 [0075.377] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0075.377] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0075.377] LocalFree (hMem=0x416cb8) returned 0x0 [0075.377] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0075.377] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0075.377] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0075.377] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0075.377] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0075.377] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0075.377] GetCurrentObject (hdc=0x29010810, type=0x1) returned 0x1b00017 [0075.377] GetCurrentObject (hdc=0x29010810, type=0x2) returned 0x1900010 [0075.377] GetCurrentObject (hdc=0x29010810, type=0x7) returned 0x490500d1 [0075.377] GetCurrentObject (hdc=0x29010810, type=0x6) returned 0x18a002e [0075.377] SaveDC (hdc=0x29010810) returned 1 [0075.377] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7f040246 [0075.378] GetClipRgn (hdc=0x29010810, hrgn=0x7f040246) returned 0 [0075.378] SelectClipRgn (hdc=0x29010810, hrgn=0x9f040813) returned 2 [0075.378] DeleteObject (ho=0x7f040246) returned 1 [0075.378] DeleteObject (ho=0x9f040813) returned 1 [0075.378] OffsetViewportOrgEx (in: hdc=0x29010810, x=0, y=0, lppt=0x263cf10 | out: lppt=0x263cf10) returned 1 [0075.378] DrawThemeParentBackground () returned 0x0 [0075.378] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0075.378] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0075.378] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0075.378] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0075.378] GetSystemMetrics (nIndex=42) returned 0 [0075.378] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0075.378] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0075.378] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0075.378] GetCurrentObject (hdc=0x29010810, type=0x1) returned 0x1b00017 [0075.378] GetCurrentObject (hdc=0x29010810, type=0x2) returned 0x1900010 [0075.378] GetCurrentObject (hdc=0x29010810, type=0x7) returned 0x490500d1 [0075.378] GetCurrentObject (hdc=0x29010810, type=0x6) returned 0x18a002e [0075.378] SaveDC (hdc=0x29010810) returned 2 [0075.379] GetNearestColor (hdc=0x29010810, color=0xf5f5f5) returned 0xf5f5f5 [0075.379] CreateSolidBrush (color=0xf5f5f5) returned 0x52100244 [0075.379] FillRect (hDC=0x29010810, lprc=0x1ee2d0, hbr=0x52100244) returned 1 [0075.379] DeleteObject (ho=0x52100244) returned 1 [0075.379] RestoreDC (hdc=0x29010810, nSavedDC=-1) returned 1 [0075.379] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0075.379] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0075.379] GetSystemMetrics (nIndex=42) returned 0 [0075.379] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0075.379] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0075.379] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0075.379] GetCurrentObject (hdc=0x29010810, type=0x1) returned 0x1b00017 [0075.379] GetCurrentObject (hdc=0x29010810, type=0x2) returned 0x1900010 [0075.379] GetCurrentObject (hdc=0x29010810, type=0x7) returned 0x490500d1 [0075.379] GetCurrentObject (hdc=0x29010810, type=0x6) returned 0x18a002e [0075.379] SaveDC (hdc=0x29010810) returned 2 [0075.379] GetNearestColor (hdc=0x29010810, color=0xf5f5f5) returned 0xf5f5f5 [0075.379] CreateSolidBrush (color=0xf5f5f5) returned 0x53100244 [0075.379] FillRect (hDC=0x29010810, lprc=0x1ee270, hbr=0x53100244) returned 1 [0075.380] DeleteObject (ho=0x53100244) returned 1 [0075.380] RestoreDC (hdc=0x29010810, nSavedDC=-1) returned 1 [0075.380] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0075.380] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0075.380] GetSystemMetrics (nIndex=42) returned 0 [0075.380] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0075.380] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0075.380] RestoreDC (hdc=0x29010810, nSavedDC=-1) returned 1 [0075.380] GdipReleaseDC (graphics=0x504fbc8, hdc=0x29010810) returned 0x0 [0075.380] IsAppThemed () returned 0x1 [0075.380] GetThemeAppProperties () returned 0x3 [0075.380] GetThemeAppProperties () returned 0x3 [0075.380] IsAppThemed () returned 0x1 [0075.380] GetThemeAppProperties () returned 0x3 [0075.380] GetThemeAppProperties () returned 0x3 [0075.380] IsThemePartDefined () returned 0x1 [0075.380] GdipCreateRegion (region=0x1ee764) returned 0x0 [0075.380] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0075.380] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0075.380] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0075.380] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0075.380] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0075.380] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0075.380] LocalFree (hMem=0x416cb8) returned 0x0 [0075.380] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0075.381] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0075.381] LocalFree (hMem=0x416cb8) returned 0x0 [0075.381] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0075.381] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0075.381] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0075.381] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0075.381] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0075.381] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0075.381] GetCurrentObject (hdc=0x29010810, type=0x1) returned 0x1b00017 [0075.381] GetCurrentObject (hdc=0x29010810, type=0x2) returned 0x1900010 [0075.381] GetCurrentObject (hdc=0x29010810, type=0x7) returned 0x490500d1 [0075.381] GetCurrentObject (hdc=0x29010810, type=0x6) returned 0x18a002e [0075.381] SaveDC (hdc=0x29010810) returned 1 [0075.381] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa0040813 [0075.381] GetClipRgn (hdc=0x29010810, hrgn=0xa0040813) returned 0 [0075.381] SelectClipRgn (hdc=0x29010810, hrgn=0x81040246) returned 2 [0075.381] DeleteObject (ho=0xa0040813) returned 1 [0075.381] DeleteObject (ho=0x81040246) returned 1 [0075.381] OffsetViewportOrgEx (in: hdc=0x29010810, x=0, y=0, lppt=0x263d750 | out: lppt=0x263d750) returned 1 [0075.381] IsAppThemed () returned 0x1 [0075.381] GetThemeAppProperties () returned 0x3 [0075.381] GetThemeAppProperties () returned 0x3 [0075.381] DrawThemeBackground () returned 0x0 [0075.381] RestoreDC (hdc=0x29010810, nSavedDC=-1) returned 1 [0075.382] GdipReleaseDC (graphics=0x504fbc8, hdc=0x29010810) returned 0x0 [0075.382] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0075.382] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0075.382] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0075.382] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0075.382] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0075.382] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0075.382] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0075.382] LocalFree (hMem=0x416cb8) returned 0x0 [0075.382] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0075.382] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0075.382] LocalFree (hMem=0x416cb8) returned 0x0 [0075.382] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0075.382] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0075.382] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0075.382] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0075.382] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0075.382] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0075.382] GetCurrentObject (hdc=0x29010810, type=0x1) returned 0x1b00017 [0075.382] GetCurrentObject (hdc=0x29010810, type=0x2) returned 0x1900010 [0075.382] GetCurrentObject (hdc=0x29010810, type=0x7) returned 0x490500d1 [0075.382] GetCurrentObject (hdc=0x29010810, type=0x6) returned 0x18a002e [0075.382] SaveDC (hdc=0x29010810) returned 1 [0075.383] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x82040246 [0075.383] GetClipRgn (hdc=0x29010810, hrgn=0x82040246) returned 0 [0075.383] SelectClipRgn (hdc=0x29010810, hrgn=0xa1040813) returned 2 [0075.383] DeleteObject (ho=0x82040246) returned 1 [0075.383] DeleteObject (ho=0xa1040813) returned 1 [0075.383] OffsetViewportOrgEx (in: hdc=0x29010810, x=0, y=0, lppt=0x263da24 | out: lppt=0x263da24) returned 1 [0075.383] IsAppThemed () returned 0x1 [0075.383] GetThemeAppProperties () returned 0x3 [0075.383] GetThemeAppProperties () returned 0x3 [0075.383] GetThemeBackgroundContentRect () returned 0x0 [0075.383] RestoreDC (hdc=0x29010810, nSavedDC=-1) returned 1 [0075.383] GdipReleaseDC (graphics=0x504fbc8, hdc=0x29010810) returned 0x0 [0075.383] IsAppThemed () returned 0x1 [0075.383] GetThemeAppProperties () returned 0x3 [0075.383] GetThemeAppProperties () returned 0x3 [0075.383] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0075.383] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0075.383] GetCurrentObject (hdc=0x29010810, type=0x1) returned 0x1b00017 [0075.383] GetCurrentObject (hdc=0x29010810, type=0x2) returned 0x1900010 [0075.383] GetCurrentObject (hdc=0x29010810, type=0x7) returned 0x490500d1 [0075.383] GetCurrentObject (hdc=0x29010810, type=0x6) returned 0x18a002e [0075.383] SaveDC (hdc=0x29010810) returned 1 [0075.384] GetTextAlign (hdc=0x29010810) returned 0x0 [0075.384] GetTextColor (hdc=0x29010810) returned 0x0 [0075.384] GetCurrentObject (hdc=0x29010810, type=0x6) returned 0x18a002e [0075.384] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0075.384] SelectObject (hdc=0x29010810, h=0x220a081a) returned 0x18a002e [0075.384] GetBkMode (hdc=0x29010810) returned 2 [0075.384] SetBkMode (hdc=0x29010810, mode=1) returned 2 [0075.384] DrawTextExW (in: hdc=0x29010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x263ddb8 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0075.384] DrawTextExW (in: hdc=0x29010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x263ddb8 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0075.384] RestoreDC (hdc=0x29010810, nSavedDC=-1) returned 1 [0075.384] GdipReleaseDC (graphics=0x504fbc8, hdc=0x29010810) returned 0x0 [0075.384] GetFocus () returned 0x201d0 [0075.384] IsAppThemed () returned 0x1 [0075.384] GetThemeAppProperties () returned 0x3 [0075.384] GetThemeAppProperties () returned 0x3 [0075.385] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0075.385] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x29010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0075.385] GdipReleaseDC (graphics=0x504fbc8, hdc=0x29010810) returned 0x0 [0075.385] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0075.385] SelectObject (hdc=0x29010810, h=0x185000f) returned 0x490500d1 [0075.385] DeleteDC (hdc=0x29010810) returned 1 [0075.385] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0075.385] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0075.385] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x263deb4, cPoints=0x1 | out: lpPoints=0x263deb4) returned 42533703 [0075.385] WindowFromPoint (Point=0x3ac) returned 0x201d0 [0075.385] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ac) returned 0x1 [0075.385] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0075.385] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0075.385] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0075.385] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0075.386] GetSystemMetrics (nIndex=42) returned 0 [0075.386] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0075.386] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0075.386] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0075.386] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0075.386] GetCapture () returned 0x201d0 [0075.386] ReleaseCapture () returned 1 [0075.386] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0075.386] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0075.386] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ac) returned 0x1 [0075.386] IsWindowUnicode (hWnd=0x201d0) returned 1 [0075.386] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0075.386] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ac) returned 0x1 [0075.386] SetCursor (hCursor=0x10003) returned 0x10003 [0075.386] TranslateMessage (lpMsg=0x1ef250) returned 0 [0075.386] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0075.386] GetKeyState (nVirtKey=1) returned 0 [0075.386] GetKeyState (nVirtKey=2) returned 0 [0075.386] GetKeyState (nVirtKey=4) returned 0 [0075.386] GetKeyState (nVirtKey=5) returned 0 [0075.386] GetKeyState (nVirtKey=6) returned 0 [0075.387] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0075.387] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0075.387] WaitMessage () returned 1 [0078.410] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0078.411] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403e8) returned 0x1 [0078.411] IsWindowUnicode (hWnd=0x201d0) returned 1 [0078.411] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0078.411] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403e8) returned 0x1 [0078.411] SetCursor (hCursor=0x10003) returned 0x10003 [0078.411] TranslateMessage (lpMsg=0x1ef250) returned 0 [0078.411] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0078.411] GetKeyState (nVirtKey=1) returned 0 [0078.411] GetKeyState (nVirtKey=2) returned 0 [0078.411] GetKeyState (nVirtKey=4) returned 0 [0078.411] GetKeyState (nVirtKey=5) returned 0 [0078.411] GetKeyState (nVirtKey=6) returned 0 [0078.411] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0078.411] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0078.411] WaitMessage () returned 1 [0078.489] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0078.489] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403e8) returned 0x1 [0078.489] IsWindowUnicode (hWnd=0x201d0) returned 1 [0078.489] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0078.489] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403e8) returned 0x1 [0078.489] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0078.489] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e302a3) returned 0x0 [0078.490] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0078.490] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0078.490] SetCursor (hCursor=0x10003) returned 0x10003 [0078.490] TranslateMessage (lpMsg=0x1ef250) returned 0 [0078.490] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0078.490] GetKeyState (nVirtKey=1) returned -127 [0078.490] GetKeyState (nVirtKey=2) returned 0 [0078.490] GetKeyState (nVirtKey=4) returned 0 [0078.490] GetKeyState (nVirtKey=5) returned 0 [0078.490] GetKeyState (nVirtKey=6) returned 0 [0078.490] IsWindowVisible (hWnd=0x201d0) returned 1 [0078.490] IsWindowEnabled (hWnd=0x201d0) returned 1 [0078.490] SetFocus (hWnd=0x201d0) returned 0x201d0 [0078.490] GetFocus () returned 0x201d0 [0078.490] GetFocus () returned 0x201d0 [0078.490] GetFocus () returned 0x201d0 [0078.490] GetKeyState (nVirtKey=1) returned -127 [0078.490] GetKeyState (nVirtKey=2) returned 0 [0078.490] GetKeyState (nVirtKey=4) returned 0 [0078.490] GetKeyState (nVirtKey=5) returned 0 [0078.490] GetKeyState (nVirtKey=6) returned 0 [0078.490] GetCapture () returned 0x0 [0078.490] SetCapture (hWnd=0x201d0) returned 0x0 [0078.490] GetKeyState (nVirtKey=1) returned -127 [0078.490] GetKeyState (nVirtKey=2) returned 0 [0078.490] GetKeyState (nVirtKey=4) returned 0 [0078.490] GetKeyState (nVirtKey=5) returned 0 [0078.490] GetKeyState (nVirtKey=6) returned 0 [0078.490] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0078.490] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0078.490] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0078.490] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0078.491] TranslateMessage (lpMsg=0x1ef250) returned 0 [0078.491] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0078.491] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0078.491] IsWindowUnicode (hWnd=0x201d0) returned 1 [0078.491] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0078.491] TranslateMessage (lpMsg=0x1ef250) returned 0 [0078.491] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0078.491] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x263dfd8, cPoints=0x1 | out: lpPoints=0x263dfd8) returned 42533703 [0078.491] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0078.491] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0078.491] UpdateWindow (hWnd=0x201d0) returned 1 [0078.491] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0078.491] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0078.491] CreateCompatibleDC (hdc=0x120107ec) returned 0x2a010810 [0078.491] SelectObject (hdc=0x2a010810, h=0x490500d1) returned 0x185000f [0078.491] GdipCreateFromHDC (hdc=0x2a010810, graphics=0x1eea5c) returned 0x0 [0078.491] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0078.491] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0078.491] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0078.491] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0078.491] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0078.491] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0078.492] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0078.492] LocalFree (hMem=0x416cb8) returned 0x0 [0078.492] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0078.492] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0078.492] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0078.492] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0078.492] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0078.492] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd690dbd) returned 0x0 [0078.492] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0078.492] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0078.492] GetCurrentObject (hdc=0x2a010810, type=0x1) returned 0x1b00017 [0078.492] GetCurrentObject (hdc=0x2a010810, type=0x2) returned 0x1900010 [0078.492] GetCurrentObject (hdc=0x2a010810, type=0x7) returned 0x490500d1 [0078.492] GetCurrentObject (hdc=0x2a010810, type=0x6) returned 0x18a002e [0078.492] SaveDC (hdc=0x2a010810) returned 1 [0078.492] GetNearestColor (hdc=0x2a010810, color=0xf5f5f5) returned 0xf5f5f5 [0078.492] GetNearestColor (hdc=0x2a010810, color=0x515151) returned 0x515151 [0078.492] GetNearestColor (hdc=0x2a010810, color=0x0) returned 0x0 [0078.493] GetNearestColor (hdc=0x2a010810, color=0x515151) returned 0x515151 [0078.493] GetNearestColor (hdc=0x2a010810, color=0x0) returned 0x0 [0078.493] GetNearestColor (hdc=0x2a010810, color=0xfafafa) returned 0xfafafa [0078.493] GetNearestColor (hdc=0x2a010810, color=0xe0e0e0) returned 0xe0e0e0 [0078.493] GetNearestColor (hdc=0x2a010810, color=0xdcdcdc) returned 0xdcdcdc [0078.493] GetNearestColor (hdc=0x2a010810, color=0x0) returned 0x0 [0078.493] RestoreDC (hdc=0x2a010810, nSavedDC=-1) returned 1 [0078.493] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a010810) returned 0x0 [0078.493] IsAppThemed () returned 0x1 [0078.493] GetThemeAppProperties () returned 0x3 [0078.493] GetThemeAppProperties () returned 0x3 [0078.493] IsAppThemed () returned 0x1 [0078.493] GetThemeAppProperties () returned 0x3 [0078.493] GetThemeAppProperties () returned 0x3 [0078.493] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x263e6dc | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0078.493] IsAppThemed () returned 0x1 [0078.493] GetThemeAppProperties () returned 0x3 [0078.493] GetThemeAppProperties () returned 0x3 [0078.493] IsAppThemed () returned 0x1 [0078.493] GetThemeAppProperties () returned 0x3 [0078.493] GetThemeAppProperties () returned 0x3 [0078.493] IsAppThemed () returned 0x1 [0078.493] GetThemeAppProperties () returned 0x3 [0078.494] GetThemeAppProperties () returned 0x3 [0078.494] IsAppThemed () returned 0x1 [0078.494] GetThemeAppProperties () returned 0x3 [0078.494] GetThemeAppProperties () returned 0x3 [0078.494] IsThemePartDefined () returned 0x1 [0078.494] IsAppThemed () returned 0x1 [0078.494] GetThemeAppProperties () returned 0x3 [0078.494] GetThemeAppProperties () returned 0x3 [0078.494] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0078.494] IsAppThemed () returned 0x1 [0078.494] GetThemeAppProperties () returned 0x3 [0078.494] GetThemeAppProperties () returned 0x3 [0078.494] IsAppThemed () returned 0x1 [0078.494] GetThemeAppProperties () returned 0x3 [0078.494] GetThemeAppProperties () returned 0x3 [0078.494] IsThemePartDefined () returned 0x1 [0078.494] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0078.494] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0078.494] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0078.494] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0078.494] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0078.494] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0078.494] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0078.494] LocalFree (hMem=0x416cb8) returned 0x0 [0078.494] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0078.494] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0078.494] LocalFree (hMem=0x416cb8) returned 0x0 [0078.494] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0078.494] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0078.495] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0078.495] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0078.495] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0078.495] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0078.495] GetCurrentObject (hdc=0x2a010810, type=0x1) returned 0x1b00017 [0078.495] GetCurrentObject (hdc=0x2a010810, type=0x2) returned 0x1900010 [0078.495] GetCurrentObject (hdc=0x2a010810, type=0x7) returned 0x490500d1 [0078.495] GetCurrentObject (hdc=0x2a010810, type=0x6) returned 0x18a002e [0078.495] SaveDC (hdc=0x2a010810) returned 1 [0078.495] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa2040813 [0078.495] GetClipRgn (hdc=0x2a010810, hrgn=0xa2040813) returned 0 [0078.495] SelectClipRgn (hdc=0x2a010810, hrgn=0x86040246) returned 2 [0078.495] DeleteObject (ho=0xa2040813) returned 1 [0078.495] DeleteObject (ho=0x86040246) returned 1 [0078.495] OffsetViewportOrgEx (in: hdc=0x2a010810, x=0, y=0, lppt=0x263ed8c | out: lppt=0x263ed8c) returned 1 [0078.495] DrawThemeParentBackground () returned 0x0 [0078.495] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0078.496] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0078.496] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0078.496] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0078.496] GetSystemMetrics (nIndex=42) returned 0 [0078.496] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0078.496] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0078.496] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0078.496] GetCurrentObject (hdc=0x2a010810, type=0x1) returned 0x1b00017 [0078.496] GetCurrentObject (hdc=0x2a010810, type=0x2) returned 0x1900010 [0078.496] GetCurrentObject (hdc=0x2a010810, type=0x7) returned 0x490500d1 [0078.496] GetCurrentObject (hdc=0x2a010810, type=0x6) returned 0x18a002e [0078.496] SaveDC (hdc=0x2a010810) returned 2 [0078.496] GetNearestColor (hdc=0x2a010810, color=0xf5f5f5) returned 0xf5f5f5 [0078.496] CreateSolidBrush (color=0xf5f5f5) returned 0x54100244 [0078.496] FillRect (hDC=0x2a010810, lprc=0x1ee2d0, hbr=0x54100244) returned 1 [0078.496] DeleteObject (ho=0x54100244) returned 1 [0078.496] RestoreDC (hdc=0x2a010810, nSavedDC=-1) returned 1 [0078.496] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0078.496] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0078.497] GetSystemMetrics (nIndex=42) returned 0 [0078.497] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0078.497] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0078.497] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0078.497] GetCurrentObject (hdc=0x2a010810, type=0x1) returned 0x1b00017 [0078.497] GetCurrentObject (hdc=0x2a010810, type=0x2) returned 0x1900010 [0078.497] GetCurrentObject (hdc=0x2a010810, type=0x7) returned 0x490500d1 [0078.497] GetCurrentObject (hdc=0x2a010810, type=0x6) returned 0x18a002e [0078.497] SaveDC (hdc=0x2a010810) returned 2 [0078.497] GetNearestColor (hdc=0x2a010810, color=0xf5f5f5) returned 0xf5f5f5 [0078.497] CreateSolidBrush (color=0xf5f5f5) returned 0x55100244 [0078.497] FillRect (hDC=0x2a010810, lprc=0x1ee270, hbr=0x55100244) returned 1 [0078.497] DeleteObject (ho=0x55100244) returned 1 [0078.497] RestoreDC (hdc=0x2a010810, nSavedDC=-1) returned 1 [0078.497] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0078.497] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0078.497] GetSystemMetrics (nIndex=42) returned 0 [0078.497] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0078.497] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0078.498] RestoreDC (hdc=0x2a010810, nSavedDC=-1) returned 1 [0078.498] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a010810) returned 0x0 [0078.498] IsAppThemed () returned 0x1 [0078.498] GetThemeAppProperties () returned 0x3 [0078.498] GetThemeAppProperties () returned 0x3 [0078.498] IsAppThemed () returned 0x1 [0078.498] GetThemeAppProperties () returned 0x3 [0078.498] GetThemeAppProperties () returned 0x3 [0078.498] IsThemePartDefined () returned 0x1 [0078.498] GdipCreateRegion (region=0x1ee764) returned 0x0 [0078.498] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0078.498] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0078.498] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0078.498] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0078.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0078.498] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0078.498] LocalFree (hMem=0x416cb8) returned 0x0 [0078.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0078.498] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0078.498] LocalFree (hMem=0x416cb8) returned 0x0 [0078.498] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0078.498] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0078.498] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0078.498] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0078.498] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0078.498] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0078.499] GetCurrentObject (hdc=0x2a010810, type=0x1) returned 0x1b00017 [0078.499] GetCurrentObject (hdc=0x2a010810, type=0x2) returned 0x1900010 [0078.499] GetCurrentObject (hdc=0x2a010810, type=0x7) returned 0x490500d1 [0078.499] GetCurrentObject (hdc=0x2a010810, type=0x6) returned 0x18a002e [0078.499] SaveDC (hdc=0x2a010810) returned 1 [0078.499] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x87040246 [0078.499] GetClipRgn (hdc=0x2a010810, hrgn=0x87040246) returned 0 [0078.499] SelectClipRgn (hdc=0x2a010810, hrgn=0xa4040813) returned 2 [0078.499] DeleteObject (ho=0x87040246) returned 1 [0078.499] DeleteObject (ho=0xa4040813) returned 1 [0078.499] OffsetViewportOrgEx (in: hdc=0x2a010810, x=0, y=0, lppt=0x263f5cc | out: lppt=0x263f5cc) returned 1 [0078.499] IsAppThemed () returned 0x1 [0078.499] GetThemeAppProperties () returned 0x3 [0078.499] GetThemeAppProperties () returned 0x3 [0078.499] DrawThemeBackground () returned 0x0 [0078.499] RestoreDC (hdc=0x2a010810, nSavedDC=-1) returned 1 [0078.499] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a010810) returned 0x0 [0078.499] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0078.499] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0078.499] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0078.499] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0078.499] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0078.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0078.499] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0078.500] LocalFree (hMem=0x416cb8) returned 0x0 [0078.500] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0078.500] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0078.500] LocalFree (hMem=0x416cb8) returned 0x0 [0078.500] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0078.500] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0078.500] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0078.500] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0078.500] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0078.500] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0078.500] GetCurrentObject (hdc=0x2a010810, type=0x1) returned 0x1b00017 [0078.500] GetCurrentObject (hdc=0x2a010810, type=0x2) returned 0x1900010 [0078.500] GetCurrentObject (hdc=0x2a010810, type=0x7) returned 0x490500d1 [0078.500] GetCurrentObject (hdc=0x2a010810, type=0x6) returned 0x18a002e [0078.500] SaveDC (hdc=0x2a010810) returned 1 [0078.500] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa5040813 [0078.500] GetClipRgn (hdc=0x2a010810, hrgn=0xa5040813) returned 0 [0078.500] SelectClipRgn (hdc=0x2a010810, hrgn=0x88040246) returned 2 [0078.500] DeleteObject (ho=0xa5040813) returned 1 [0078.500] DeleteObject (ho=0x88040246) returned 1 [0078.500] OffsetViewportOrgEx (in: hdc=0x2a010810, x=0, y=0, lppt=0x263f8a0 | out: lppt=0x263f8a0) returned 1 [0078.500] IsAppThemed () returned 0x1 [0078.500] GetThemeAppProperties () returned 0x3 [0078.500] GetThemeAppProperties () returned 0x3 [0078.501] GetThemeBackgroundContentRect () returned 0x0 [0078.501] RestoreDC (hdc=0x2a010810, nSavedDC=-1) returned 1 [0078.501] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a010810) returned 0x0 [0078.501] IsAppThemed () returned 0x1 [0078.501] GetThemeAppProperties () returned 0x3 [0078.501] GetThemeAppProperties () returned 0x3 [0078.501] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0078.501] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0078.501] GetCurrentObject (hdc=0x2a010810, type=0x1) returned 0x1b00017 [0078.501] GetCurrentObject (hdc=0x2a010810, type=0x2) returned 0x1900010 [0078.501] GetCurrentObject (hdc=0x2a010810, type=0x7) returned 0x490500d1 [0078.501] GetCurrentObject (hdc=0x2a010810, type=0x6) returned 0x18a002e [0078.501] SaveDC (hdc=0x2a010810) returned 1 [0078.501] GetTextAlign (hdc=0x2a010810) returned 0x0 [0078.501] GetTextColor (hdc=0x2a010810) returned 0x0 [0078.501] GetCurrentObject (hdc=0x2a010810, type=0x6) returned 0x18a002e [0078.501] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0078.501] SelectObject (hdc=0x2a010810, h=0x220a081a) returned 0x18a002e [0078.501] GetBkMode (hdc=0x2a010810) returned 2 [0078.501] SetBkMode (hdc=0x2a010810, mode=1) returned 2 [0078.502] DrawTextExW (in: hdc=0x2a010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x263fc34 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0078.502] DrawTextExW (in: hdc=0x2a010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x263fc34 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0078.502] RestoreDC (hdc=0x2a010810, nSavedDC=-1) returned 1 [0078.502] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a010810) returned 0x0 [0078.502] GetFocus () returned 0x201d0 [0078.502] IsAppThemed () returned 0x1 [0078.502] GetThemeAppProperties () returned 0x3 [0078.502] GetThemeAppProperties () returned 0x3 [0078.502] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0078.502] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x2a010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.502] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2a010810) returned 0x0 [0078.502] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0078.502] SelectObject (hdc=0x2a010810, h=0x185000f) returned 0x490500d1 [0078.502] DeleteDC (hdc=0x2a010810) returned 1 [0078.502] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0078.503] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0078.503] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x263fd30, cPoints=0x1 | out: lpPoints=0x263fd30) returned 42533703 [0078.503] WindowFromPoint (Point=0x3e8) returned 0x201d0 [0078.503] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403e8) returned 0x1 [0078.503] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0078.503] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0078.503] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0078.503] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0078.503] GetSystemMetrics (nIndex=42) returned 0 [0078.503] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0078.503] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0078.503] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0078.503] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0078.503] GetCapture () returned 0x201d0 [0078.503] ReleaseCapture () returned 1 [0078.503] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0078.504] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0078.504] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403e8) returned 0x1 [0078.504] IsWindowUnicode (hWnd=0x201d0) returned 1 [0078.504] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0078.504] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403e8) returned 0x1 [0078.504] SetCursor (hCursor=0x10003) returned 0x10003 [0078.504] TranslateMessage (lpMsg=0x1ef250) returned 0 [0078.504] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0078.504] GetKeyState (nVirtKey=1) returned 1 [0078.504] GetKeyState (nVirtKey=2) returned 0 [0078.504] GetKeyState (nVirtKey=4) returned 0 [0078.504] GetKeyState (nVirtKey=5) returned 0 [0078.504] GetKeyState (nVirtKey=6) returned 0 [0078.504] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0078.504] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0078.504] WaitMessage () returned 1 [0081.531] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0081.531] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930396) returned 0x1 [0081.531] IsWindowUnicode (hWnd=0x201d0) returned 1 [0081.531] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0081.531] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930396) returned 0x1 [0081.531] SetCursor (hCursor=0x10003) returned 0x10003 [0081.531] TranslateMessage (lpMsg=0x1ef250) returned 0 [0081.531] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0081.531] GetKeyState (nVirtKey=1) returned 1 [0081.531] GetKeyState (nVirtKey=2) returned 0 [0081.531] GetKeyState (nVirtKey=4) returned 0 [0081.531] GetKeyState (nVirtKey=5) returned 0 [0081.531] GetKeyState (nVirtKey=6) returned 0 [0081.531] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0081.532] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0081.532] WaitMessage () returned 1 [0081.608] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0081.608] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930396) returned 0x1 [0081.609] IsWindowUnicode (hWnd=0x201d0) returned 1 [0081.609] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0081.609] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930396) returned 0x1 [0081.610] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0081.610] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e20251) returned 0x0 [0081.610] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0081.610] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0081.610] SetCursor (hCursor=0x10003) returned 0x10003 [0081.610] TranslateMessage (lpMsg=0x1ef250) returned 0 [0081.610] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0081.610] GetKeyState (nVirtKey=1) returned -128 [0081.610] GetKeyState (nVirtKey=2) returned 0 [0081.610] GetKeyState (nVirtKey=4) returned 0 [0081.610] GetKeyState (nVirtKey=5) returned 0 [0081.610] GetKeyState (nVirtKey=6) returned 0 [0081.610] IsWindowVisible (hWnd=0x201d0) returned 1 [0081.610] IsWindowEnabled (hWnd=0x201d0) returned 1 [0081.610] SetFocus (hWnd=0x201d0) returned 0x201d0 [0081.610] GetFocus () returned 0x201d0 [0081.610] GetFocus () returned 0x201d0 [0081.610] GetFocus () returned 0x201d0 [0081.610] GetKeyState (nVirtKey=1) returned -128 [0081.610] GetKeyState (nVirtKey=2) returned 0 [0081.610] GetKeyState (nVirtKey=4) returned 0 [0081.610] GetKeyState (nVirtKey=5) returned 0 [0081.610] GetKeyState (nVirtKey=6) returned 0 [0081.610] GetCapture () returned 0x0 [0081.610] SetCapture (hWnd=0x201d0) returned 0x0 [0081.610] GetKeyState (nVirtKey=1) returned -128 [0081.610] GetKeyState (nVirtKey=2) returned 0 [0081.610] GetKeyState (nVirtKey=4) returned 0 [0081.610] GetKeyState (nVirtKey=5) returned 0 [0081.610] GetKeyState (nVirtKey=6) returned 0 [0081.611] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0081.611] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0081.611] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0081.611] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0081.611] TranslateMessage (lpMsg=0x1ef250) returned 0 [0081.611] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0081.611] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0081.611] IsWindowUnicode (hWnd=0x201d0) returned 1 [0081.611] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0081.611] TranslateMessage (lpMsg=0x1ef250) returned 0 [0081.611] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0081.611] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x263fe54, cPoints=0x1 | out: lpPoints=0x263fe54) returned 42533703 [0081.611] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0081.611] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0081.611] UpdateWindow (hWnd=0x201d0) returned 1 [0081.611] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0081.611] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0081.611] CreateCompatibleDC (hdc=0x120107ec) returned 0x2b010810 [0081.611] SelectObject (hdc=0x2b010810, h=0x490500d1) returned 0x185000f [0081.611] GdipCreateFromHDC (hdc=0x2b010810, graphics=0x1eea5c) returned 0x0 [0081.612] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0081.612] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0081.612] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0081.612] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0081.612] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0081.612] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0081.612] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0081.612] LocalFree (hMem=0x416cb8) returned 0x0 [0081.612] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0081.612] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0081.612] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0081.612] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0081.612] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0081.612] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd670dbd) returned 0x0 [0081.612] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0081.612] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0081.612] GetCurrentObject (hdc=0x2b010810, type=0x1) returned 0x1b00017 [0081.612] GetCurrentObject (hdc=0x2b010810, type=0x2) returned 0x1900010 [0081.612] GetCurrentObject (hdc=0x2b010810, type=0x7) returned 0x490500d1 [0081.612] GetCurrentObject (hdc=0x2b010810, type=0x6) returned 0x18a002e [0081.612] SaveDC (hdc=0x2b010810) returned 1 [0081.613] GetNearestColor (hdc=0x2b010810, color=0xf5f5f5) returned 0xf5f5f5 [0081.613] GetNearestColor (hdc=0x2b010810, color=0x515151) returned 0x515151 [0081.613] GetNearestColor (hdc=0x2b010810, color=0x0) returned 0x0 [0081.613] GetNearestColor (hdc=0x2b010810, color=0x515151) returned 0x515151 [0081.613] GetNearestColor (hdc=0x2b010810, color=0x0) returned 0x0 [0081.613] GetNearestColor (hdc=0x2b010810, color=0xfafafa) returned 0xfafafa [0081.613] GetNearestColor (hdc=0x2b010810, color=0xe0e0e0) returned 0xe0e0e0 [0081.613] GetNearestColor (hdc=0x2b010810, color=0xdcdcdc) returned 0xdcdcdc [0081.613] GetNearestColor (hdc=0x2b010810, color=0x0) returned 0x0 [0081.613] RestoreDC (hdc=0x2b010810, nSavedDC=-1) returned 1 [0081.613] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b010810) returned 0x0 [0081.613] IsAppThemed () returned 0x1 [0081.613] GetThemeAppProperties () returned 0x3 [0081.613] GetThemeAppProperties () returned 0x3 [0081.613] IsAppThemed () returned 0x1 [0081.613] GetThemeAppProperties () returned 0x3 [0081.613] GetThemeAppProperties () returned 0x3 [0081.613] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2640558 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0081.614] IsAppThemed () returned 0x1 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] IsAppThemed () returned 0x1 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] IsAppThemed () returned 0x1 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] IsAppThemed () returned 0x1 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] IsThemePartDefined () returned 0x1 [0081.614] IsAppThemed () returned 0x1 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0081.614] IsAppThemed () returned 0x1 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] IsAppThemed () returned 0x1 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] GetThemeAppProperties () returned 0x3 [0081.614] IsThemePartDefined () returned 0x1 [0081.614] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0081.614] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0081.615] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0081.615] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0081.615] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0081.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0081.615] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0081.615] LocalFree (hMem=0x416cb8) returned 0x0 [0081.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0081.615] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0081.615] LocalFree (hMem=0x416cb8) returned 0x0 [0081.615] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0081.615] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0081.615] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0081.615] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0081.615] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0081.615] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0081.615] GetCurrentObject (hdc=0x2b010810, type=0x1) returned 0x1b00017 [0081.615] GetCurrentObject (hdc=0x2b010810, type=0x2) returned 0x1900010 [0081.615] GetCurrentObject (hdc=0x2b010810, type=0x7) returned 0x490500d1 [0081.615] GetCurrentObject (hdc=0x2b010810, type=0x6) returned 0x18a002e [0081.615] SaveDC (hdc=0x2b010810) returned 1 [0081.615] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x89040246 [0081.615] GetClipRgn (hdc=0x2b010810, hrgn=0x89040246) returned 0 [0081.616] SelectClipRgn (hdc=0x2b010810, hrgn=0xa9040813) returned 2 [0081.616] DeleteObject (ho=0x89040246) returned 1 [0081.616] DeleteObject (ho=0xa9040813) returned 1 [0081.616] OffsetViewportOrgEx (in: hdc=0x2b010810, x=0, y=0, lppt=0x2640c08 | out: lppt=0x2640c08) returned 1 [0081.616] DrawThemeParentBackground () returned 0x0 [0081.616] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0081.616] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0081.616] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0081.616] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0081.616] GetSystemMetrics (nIndex=42) returned 0 [0081.616] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0081.616] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0081.616] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0081.616] GetCurrentObject (hdc=0x2b010810, type=0x1) returned 0x1b00017 [0081.616] GetCurrentObject (hdc=0x2b010810, type=0x2) returned 0x1900010 [0081.616] GetCurrentObject (hdc=0x2b010810, type=0x7) returned 0x490500d1 [0081.616] GetCurrentObject (hdc=0x2b010810, type=0x6) returned 0x18a002e [0081.616] SaveDC (hdc=0x2b010810) returned 2 [0081.616] GetNearestColor (hdc=0x2b010810, color=0xf5f5f5) returned 0xf5f5f5 [0081.616] CreateSolidBrush (color=0xf5f5f5) returned 0x56100244 [0081.616] FillRect (hDC=0x2b010810, lprc=0x1ee2d0, hbr=0x56100244) returned 1 [0081.617] DeleteObject (ho=0x56100244) returned 1 [0081.617] RestoreDC (hdc=0x2b010810, nSavedDC=-1) returned 1 [0081.617] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0081.617] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0081.617] GetSystemMetrics (nIndex=42) returned 0 [0081.617] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0081.617] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0081.617] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0081.617] GetCurrentObject (hdc=0x2b010810, type=0x1) returned 0x1b00017 [0081.617] GetCurrentObject (hdc=0x2b010810, type=0x2) returned 0x1900010 [0081.617] GetCurrentObject (hdc=0x2b010810, type=0x7) returned 0x490500d1 [0081.617] GetCurrentObject (hdc=0x2b010810, type=0x6) returned 0x18a002e [0081.617] SaveDC (hdc=0x2b010810) returned 2 [0081.617] GetNearestColor (hdc=0x2b010810, color=0xf5f5f5) returned 0xf5f5f5 [0081.617] CreateSolidBrush (color=0xf5f5f5) returned 0x57100244 [0081.617] FillRect (hDC=0x2b010810, lprc=0x1ee270, hbr=0x57100244) returned 1 [0081.617] DeleteObject (ho=0x57100244) returned 1 [0081.617] RestoreDC (hdc=0x2b010810, nSavedDC=-1) returned 1 [0081.617] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0081.617] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0081.617] GetSystemMetrics (nIndex=42) returned 0 [0081.618] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0081.618] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0081.618] RestoreDC (hdc=0x2b010810, nSavedDC=-1) returned 1 [0081.618] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b010810) returned 0x0 [0081.618] IsAppThemed () returned 0x1 [0081.618] GetThemeAppProperties () returned 0x3 [0081.618] GetThemeAppProperties () returned 0x3 [0081.618] IsAppThemed () returned 0x1 [0081.618] GetThemeAppProperties () returned 0x3 [0081.618] GetThemeAppProperties () returned 0x3 [0081.618] IsThemePartDefined () returned 0x1 [0081.618] GdipCreateRegion (region=0x1ee764) returned 0x0 [0081.618] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0081.618] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0081.618] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0081.618] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0081.618] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0081.618] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0081.618] LocalFree (hMem=0x416cb8) returned 0x0 [0081.618] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0081.618] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0081.618] LocalFree (hMem=0x416cb8) returned 0x0 [0081.618] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0081.618] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0081.619] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0081.619] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0081.619] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0081.619] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0081.619] GetCurrentObject (hdc=0x2b010810, type=0x1) returned 0x1b00017 [0081.619] GetCurrentObject (hdc=0x2b010810, type=0x2) returned 0x1900010 [0081.619] GetCurrentObject (hdc=0x2b010810, type=0x7) returned 0x490500d1 [0081.619] GetCurrentObject (hdc=0x2b010810, type=0x6) returned 0x18a002e [0081.619] SaveDC (hdc=0x2b010810) returned 1 [0081.619] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaa040813 [0081.619] GetClipRgn (hdc=0x2b010810, hrgn=0xaa040813) returned 0 [0081.619] SelectClipRgn (hdc=0x2b010810, hrgn=0x8b040246) returned 2 [0081.619] DeleteObject (ho=0xaa040813) returned 1 [0081.619] DeleteObject (ho=0x8b040246) returned 1 [0081.619] OffsetViewportOrgEx (in: hdc=0x2b010810, x=0, y=0, lppt=0x2641448 | out: lppt=0x2641448) returned 1 [0081.619] IsAppThemed () returned 0x1 [0081.619] GetThemeAppProperties () returned 0x3 [0081.619] GetThemeAppProperties () returned 0x3 [0081.619] DrawThemeBackground () returned 0x0 [0081.619] RestoreDC (hdc=0x2b010810, nSavedDC=-1) returned 1 [0081.619] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b010810) returned 0x0 [0081.619] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0081.620] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0081.620] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0081.620] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0081.620] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0081.620] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0081.620] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0081.620] LocalFree (hMem=0x416cb8) returned 0x0 [0081.620] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0081.620] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0081.620] LocalFree (hMem=0x416cb8) returned 0x0 [0081.620] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0081.620] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0081.620] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0081.620] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0081.620] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0081.620] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0081.620] GetCurrentObject (hdc=0x2b010810, type=0x1) returned 0x1b00017 [0081.620] GetCurrentObject (hdc=0x2b010810, type=0x2) returned 0x1900010 [0081.620] GetCurrentObject (hdc=0x2b010810, type=0x7) returned 0x490500d1 [0081.620] GetCurrentObject (hdc=0x2b010810, type=0x6) returned 0x18a002e [0081.620] SaveDC (hdc=0x2b010810) returned 1 [0081.620] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8c040246 [0081.620] GetClipRgn (hdc=0x2b010810, hrgn=0x8c040246) returned 0 [0081.621] SelectClipRgn (hdc=0x2b010810, hrgn=0xab040813) returned 2 [0081.621] DeleteObject (ho=0x8c040246) returned 1 [0081.621] DeleteObject (ho=0xab040813) returned 1 [0081.621] OffsetViewportOrgEx (in: hdc=0x2b010810, x=0, y=0, lppt=0x264171c | out: lppt=0x264171c) returned 1 [0081.621] IsAppThemed () returned 0x1 [0081.621] GetThemeAppProperties () returned 0x3 [0081.621] GetThemeAppProperties () returned 0x3 [0081.621] GetThemeBackgroundContentRect () returned 0x0 [0081.621] RestoreDC (hdc=0x2b010810, nSavedDC=-1) returned 1 [0081.621] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b010810) returned 0x0 [0081.621] IsAppThemed () returned 0x1 [0081.621] GetThemeAppProperties () returned 0x3 [0081.621] GetThemeAppProperties () returned 0x3 [0081.621] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0081.621] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0081.621] GetCurrentObject (hdc=0x2b010810, type=0x1) returned 0x1b00017 [0081.621] GetCurrentObject (hdc=0x2b010810, type=0x2) returned 0x1900010 [0081.621] GetCurrentObject (hdc=0x2b010810, type=0x7) returned 0x490500d1 [0081.621] GetCurrentObject (hdc=0x2b010810, type=0x6) returned 0x18a002e [0081.621] SaveDC (hdc=0x2b010810) returned 1 [0081.622] GetTextAlign (hdc=0x2b010810) returned 0x0 [0081.622] GetTextColor (hdc=0x2b010810) returned 0x0 [0081.622] GetCurrentObject (hdc=0x2b010810, type=0x6) returned 0x18a002e [0081.622] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0081.622] SelectObject (hdc=0x2b010810, h=0x220a081a) returned 0x18a002e [0081.622] GetBkMode (hdc=0x2b010810) returned 2 [0081.622] SetBkMode (hdc=0x2b010810, mode=1) returned 2 [0081.622] DrawTextExW (in: hdc=0x2b010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2641ab0 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0081.622] DrawTextExW (in: hdc=0x2b010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2641ab0 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0081.623] RestoreDC (hdc=0x2b010810, nSavedDC=-1) returned 1 [0081.623] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b010810) returned 0x0 [0081.623] GetFocus () returned 0x201d0 [0081.623] IsAppThemed () returned 0x1 [0081.623] GetThemeAppProperties () returned 0x3 [0081.623] GetThemeAppProperties () returned 0x3 [0081.623] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0081.623] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x2b010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0081.623] GdipReleaseDC (graphics=0x504fbc8, hdc=0x2b010810) returned 0x0 [0081.623] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0081.623] SelectObject (hdc=0x2b010810, h=0x185000f) returned 0x490500d1 [0081.623] DeleteDC (hdc=0x2b010810) returned 1 [0081.623] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0081.623] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0081.623] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2641bac, cPoints=0x1 | out: lpPoints=0x2641bac) returned 42533703 [0081.623] WindowFromPoint (Point=0x396) returned 0x201d0 [0081.623] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930396) returned 0x1 [0081.624] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0081.624] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0081.624] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0081.624] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0081.624] GetSystemMetrics (nIndex=42) returned 0 [0081.624] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0081.624] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0081.624] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0081.624] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0081.624] GetCapture () returned 0x201d0 [0081.624] ReleaseCapture () returned 1 [0081.624] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0081.624] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0081.624] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930396) returned 0x1 [0081.624] IsWindowUnicode (hWnd=0x201d0) returned 1 [0081.624] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0081.624] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930396) returned 0x1 [0081.624] SetCursor (hCursor=0x10003) returned 0x10003 [0081.624] TranslateMessage (lpMsg=0x1ef250) returned 0 [0081.624] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0081.624] GetKeyState (nVirtKey=1) returned 0 [0081.624] GetKeyState (nVirtKey=2) returned 0 [0081.625] GetKeyState (nVirtKey=4) returned 0 [0081.625] GetKeyState (nVirtKey=5) returned 0 [0081.625] GetKeyState (nVirtKey=6) returned 0 [0081.625] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0081.625] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0081.625] WaitMessage () returned 1 [0084.651] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0084.651] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03d6) returned 0x1 [0084.651] IsWindowUnicode (hWnd=0x201d0) returned 1 [0084.651] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0084.651] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03d6) returned 0x1 [0084.651] SetCursor (hCursor=0x10003) returned 0x10003 [0084.651] TranslateMessage (lpMsg=0x1ef250) returned 0 [0084.651] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0084.651] GetKeyState (nVirtKey=1) returned 0 [0084.651] GetKeyState (nVirtKey=2) returned 0 [0084.651] GetKeyState (nVirtKey=4) returned 0 [0084.651] GetKeyState (nVirtKey=5) returned 0 [0084.651] GetKeyState (nVirtKey=6) returned 0 [0084.651] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0084.651] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0084.651] WaitMessage () returned 1 [0084.710] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0084.710] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03d6) returned 0x1 [0084.711] IsWindowUnicode (hWnd=0x201d0) returned 1 [0084.711] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0084.711] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03d6) returned 0x1 [0084.711] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0084.711] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dd0291) returned 0x0 [0084.711] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0084.711] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0084.711] SetCursor (hCursor=0x10003) returned 0x10003 [0084.711] TranslateMessage (lpMsg=0x1ef250) returned 0 [0084.711] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0084.711] GetKeyState (nVirtKey=1) returned -127 [0084.711] GetKeyState (nVirtKey=2) returned 0 [0084.712] GetKeyState (nVirtKey=4) returned 0 [0084.712] GetKeyState (nVirtKey=5) returned 0 [0084.712] GetKeyState (nVirtKey=6) returned 0 [0084.712] IsWindowVisible (hWnd=0x201d0) returned 1 [0084.712] IsWindowEnabled (hWnd=0x201d0) returned 1 [0084.712] SetFocus (hWnd=0x201d0) returned 0x201d0 [0084.712] GetFocus () returned 0x201d0 [0084.712] GetFocus () returned 0x201d0 [0084.712] GetFocus () returned 0x201d0 [0084.712] GetKeyState (nVirtKey=1) returned -127 [0084.712] GetKeyState (nVirtKey=2) returned 0 [0084.712] GetKeyState (nVirtKey=4) returned 0 [0084.712] GetKeyState (nVirtKey=5) returned 0 [0084.712] GetKeyState (nVirtKey=6) returned 0 [0084.712] GetCapture () returned 0x0 [0084.712] SetCapture (hWnd=0x201d0) returned 0x0 [0084.712] GetKeyState (nVirtKey=1) returned -127 [0084.712] GetKeyState (nVirtKey=2) returned 0 [0084.712] GetKeyState (nVirtKey=4) returned 0 [0084.712] GetKeyState (nVirtKey=5) returned 0 [0084.712] GetKeyState (nVirtKey=6) returned 0 [0084.712] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0084.712] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0084.712] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0084.712] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0084.712] TranslateMessage (lpMsg=0x1ef250) returned 0 [0084.712] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0084.712] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0084.712] IsWindowUnicode (hWnd=0x201d0) returned 1 [0084.712] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0084.712] TranslateMessage (lpMsg=0x1ef250) returned 0 [0084.712] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0084.712] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2641cd0, cPoints=0x1 | out: lpPoints=0x2641cd0) returned 42533703 [0084.712] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0084.712] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0084.713] UpdateWindow (hWnd=0x201d0) returned 1 [0084.713] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0084.713] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0084.713] CreateCompatibleDC (hdc=0x120107ec) returned 0xf0107cc [0084.713] SelectObject (hdc=0xf0107cc, h=0x490500d1) returned 0x185000f [0084.713] GdipCreateFromHDC (hdc=0xf0107cc, graphics=0x1eea5c) returned 0x0 [0084.713] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0084.713] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0084.713] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0084.713] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0084.713] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0084.713] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0084.713] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0084.713] LocalFree (hMem=0x416cb8) returned 0x0 [0084.713] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0084.713] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0084.713] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0084.714] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0084.714] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0084.714] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd650dbd) returned 0x0 [0084.714] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0084.714] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0084.714] GetCurrentObject (hdc=0xf0107cc, type=0x1) returned 0x1b00017 [0084.714] GetCurrentObject (hdc=0xf0107cc, type=0x2) returned 0x1900010 [0084.714] GetCurrentObject (hdc=0xf0107cc, type=0x7) returned 0x490500d1 [0084.714] GetCurrentObject (hdc=0xf0107cc, type=0x6) returned 0x18a002e [0084.714] SaveDC (hdc=0xf0107cc) returned 1 [0084.714] GetNearestColor (hdc=0xf0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0084.714] GetNearestColor (hdc=0xf0107cc, color=0x515151) returned 0x515151 [0084.714] GetNearestColor (hdc=0xf0107cc, color=0x0) returned 0x0 [0084.714] GetNearestColor (hdc=0xf0107cc, color=0x515151) returned 0x515151 [0084.714] GetNearestColor (hdc=0xf0107cc, color=0x0) returned 0x0 [0084.714] GetNearestColor (hdc=0xf0107cc, color=0xfafafa) returned 0xfafafa [0084.714] GetNearestColor (hdc=0xf0107cc, color=0xe0e0e0) returned 0xe0e0e0 [0084.714] GetNearestColor (hdc=0xf0107cc, color=0xdcdcdc) returned 0xdcdcdc [0084.714] GetNearestColor (hdc=0xf0107cc, color=0x0) returned 0x0 [0084.715] RestoreDC (hdc=0xf0107cc, nSavedDC=-1) returned 1 [0084.715] GdipReleaseDC (graphics=0x504fbc8, hdc=0xf0107cc) returned 0x0 [0084.715] IsAppThemed () returned 0x1 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] IsAppThemed () returned 0x1 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26423d4 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0084.715] IsAppThemed () returned 0x1 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] IsAppThemed () returned 0x1 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] IsAppThemed () returned 0x1 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] IsAppThemed () returned 0x1 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] IsThemePartDefined () returned 0x1 [0084.715] IsAppThemed () returned 0x1 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] GetThemeAppProperties () returned 0x3 [0084.715] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0084.716] IsAppThemed () returned 0x1 [0084.716] GetThemeAppProperties () returned 0x3 [0084.716] GetThemeAppProperties () returned 0x3 [0084.716] IsAppThemed () returned 0x1 [0084.716] GetThemeAppProperties () returned 0x3 [0084.716] GetThemeAppProperties () returned 0x3 [0084.716] IsThemePartDefined () returned 0x1 [0084.716] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0084.716] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0084.716] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0084.716] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0084.716] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0084.716] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0084.716] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0084.716] LocalFree (hMem=0x416cb8) returned 0x0 [0084.716] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0084.716] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0084.716] LocalFree (hMem=0x416cb8) returned 0x0 [0084.716] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0084.716] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0084.716] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0084.716] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0084.716] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0084.716] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0084.716] GetCurrentObject (hdc=0xf0107cc, type=0x1) returned 0x1b00017 [0084.716] GetCurrentObject (hdc=0xf0107cc, type=0x2) returned 0x1900010 [0084.717] GetCurrentObject (hdc=0xf0107cc, type=0x7) returned 0x490500d1 [0084.717] GetCurrentObject (hdc=0xf0107cc, type=0x6) returned 0x18a002e [0084.717] SaveDC (hdc=0xf0107cc) returned 1 [0084.717] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xac040813 [0084.717] GetClipRgn (hdc=0xf0107cc, hrgn=0xac040813) returned 0 [0084.717] SelectClipRgn (hdc=0xf0107cc, hrgn=0x90040246) returned 2 [0084.717] DeleteObject (ho=0xac040813) returned 1 [0084.717] DeleteObject (ho=0x90040246) returned 1 [0084.717] OffsetViewportOrgEx (in: hdc=0xf0107cc, x=0, y=0, lppt=0x2642a84 | out: lppt=0x2642a84) returned 1 [0084.717] DrawThemeParentBackground () returned 0x0 [0084.717] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0084.717] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0084.717] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0084.717] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0084.717] GetSystemMetrics (nIndex=42) returned 0 [0084.717] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0084.717] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0084.717] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0084.717] GetCurrentObject (hdc=0xf0107cc, type=0x1) returned 0x1b00017 [0084.717] GetCurrentObject (hdc=0xf0107cc, type=0x2) returned 0x1900010 [0084.717] GetCurrentObject (hdc=0xf0107cc, type=0x7) returned 0x490500d1 [0084.717] GetCurrentObject (hdc=0xf0107cc, type=0x6) returned 0x18a002e [0084.718] SaveDC (hdc=0xf0107cc) returned 2 [0084.718] GetNearestColor (hdc=0xf0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0084.718] CreateSolidBrush (color=0xf5f5f5) returned 0x58100244 [0084.718] FillRect (hDC=0xf0107cc, lprc=0x1ee2d0, hbr=0x58100244) returned 1 [0084.718] DeleteObject (ho=0x58100244) returned 1 [0084.718] RestoreDC (hdc=0xf0107cc, nSavedDC=-1) returned 1 [0084.718] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0084.718] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0084.718] GetSystemMetrics (nIndex=42) returned 0 [0084.718] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0084.718] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0084.718] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0084.718] GetCurrentObject (hdc=0xf0107cc, type=0x1) returned 0x1b00017 [0084.718] GetCurrentObject (hdc=0xf0107cc, type=0x2) returned 0x1900010 [0084.718] GetCurrentObject (hdc=0xf0107cc, type=0x7) returned 0x490500d1 [0084.718] GetCurrentObject (hdc=0xf0107cc, type=0x6) returned 0x18a002e [0084.718] SaveDC (hdc=0xf0107cc) returned 2 [0084.718] GetNearestColor (hdc=0xf0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0084.718] CreateSolidBrush (color=0xf5f5f5) returned 0x59100244 [0084.718] FillRect (hDC=0xf0107cc, lprc=0x1ee270, hbr=0x59100244) returned 1 [0084.718] DeleteObject (ho=0x59100244) returned 1 [0084.719] RestoreDC (hdc=0xf0107cc, nSavedDC=-1) returned 1 [0084.719] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0084.719] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0084.719] GetSystemMetrics (nIndex=42) returned 0 [0084.719] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0084.719] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0084.719] RestoreDC (hdc=0xf0107cc, nSavedDC=-1) returned 1 [0084.719] GdipReleaseDC (graphics=0x504fbc8, hdc=0xf0107cc) returned 0x0 [0084.719] IsAppThemed () returned 0x1 [0084.719] GetThemeAppProperties () returned 0x3 [0084.719] GetThemeAppProperties () returned 0x3 [0084.719] IsAppThemed () returned 0x1 [0084.719] GetThemeAppProperties () returned 0x3 [0084.719] GetThemeAppProperties () returned 0x3 [0084.719] IsThemePartDefined () returned 0x1 [0084.719] GdipCreateRegion (region=0x1ee764) returned 0x0 [0084.719] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0084.719] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0084.719] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0084.719] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0084.719] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0084.719] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0084.719] LocalFree (hMem=0x416cb8) returned 0x0 [0084.719] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0084.719] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0084.720] LocalFree (hMem=0x416cb8) returned 0x0 [0084.720] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0084.720] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0084.720] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0084.720] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0084.720] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0084.720] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0084.720] GetCurrentObject (hdc=0xf0107cc, type=0x1) returned 0x1b00017 [0084.720] GetCurrentObject (hdc=0xf0107cc, type=0x2) returned 0x1900010 [0084.720] GetCurrentObject (hdc=0xf0107cc, type=0x7) returned 0x490500d1 [0084.720] GetCurrentObject (hdc=0xf0107cc, type=0x6) returned 0x18a002e [0084.720] SaveDC (hdc=0xf0107cc) returned 1 [0084.720] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x91040246 [0084.720] GetClipRgn (hdc=0xf0107cc, hrgn=0x91040246) returned 0 [0084.720] SelectClipRgn (hdc=0xf0107cc, hrgn=0xae040813) returned 2 [0084.720] DeleteObject (ho=0x91040246) returned 1 [0084.720] DeleteObject (ho=0xae040813) returned 1 [0084.720] OffsetViewportOrgEx (in: hdc=0xf0107cc, x=0, y=0, lppt=0x26432c4 | out: lppt=0x26432c4) returned 1 [0084.720] IsAppThemed () returned 0x1 [0084.720] GetThemeAppProperties () returned 0x3 [0084.720] GetThemeAppProperties () returned 0x3 [0084.720] DrawThemeBackground () returned 0x0 [0084.720] RestoreDC (hdc=0xf0107cc, nSavedDC=-1) returned 1 [0084.721] GdipReleaseDC (graphics=0x504fbc8, hdc=0xf0107cc) returned 0x0 [0084.721] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0084.721] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0084.721] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0084.721] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0084.721] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0084.721] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0084.721] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0084.721] LocalFree (hMem=0x416cb8) returned 0x0 [0084.721] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0084.721] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0084.721] LocalFree (hMem=0x416cb8) returned 0x0 [0084.721] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0084.721] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0084.721] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0084.721] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0084.721] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0084.721] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0084.721] GetCurrentObject (hdc=0xf0107cc, type=0x1) returned 0x1b00017 [0084.721] GetCurrentObject (hdc=0xf0107cc, type=0x2) returned 0x1900010 [0084.721] GetCurrentObject (hdc=0xf0107cc, type=0x7) returned 0x490500d1 [0084.721] GetCurrentObject (hdc=0xf0107cc, type=0x6) returned 0x18a002e [0084.721] SaveDC (hdc=0xf0107cc) returned 1 [0084.721] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaf040813 [0084.722] GetClipRgn (hdc=0xf0107cc, hrgn=0xaf040813) returned 0 [0084.722] SelectClipRgn (hdc=0xf0107cc, hrgn=0x92040246) returned 2 [0084.722] DeleteObject (ho=0xaf040813) returned 1 [0084.722] DeleteObject (ho=0x92040246) returned 1 [0084.722] OffsetViewportOrgEx (in: hdc=0xf0107cc, x=0, y=0, lppt=0x2643598 | out: lppt=0x2643598) returned 1 [0084.722] IsAppThemed () returned 0x1 [0084.722] GetThemeAppProperties () returned 0x3 [0084.722] GetThemeAppProperties () returned 0x3 [0084.722] GetThemeBackgroundContentRect () returned 0x0 [0084.722] RestoreDC (hdc=0xf0107cc, nSavedDC=-1) returned 1 [0084.722] GdipReleaseDC (graphics=0x504fbc8, hdc=0xf0107cc) returned 0x0 [0084.722] IsAppThemed () returned 0x1 [0084.722] GetThemeAppProperties () returned 0x3 [0084.722] GetThemeAppProperties () returned 0x3 [0084.722] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0084.722] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0084.722] GetCurrentObject (hdc=0xf0107cc, type=0x1) returned 0x1b00017 [0084.722] GetCurrentObject (hdc=0xf0107cc, type=0x2) returned 0x1900010 [0084.722] GetCurrentObject (hdc=0xf0107cc, type=0x7) returned 0x490500d1 [0084.722] GetCurrentObject (hdc=0xf0107cc, type=0x6) returned 0x18a002e [0084.722] SaveDC (hdc=0xf0107cc) returned 1 [0084.722] GetTextAlign (hdc=0xf0107cc) returned 0x0 [0084.722] GetTextColor (hdc=0xf0107cc) returned 0x0 [0084.722] GetCurrentObject (hdc=0xf0107cc, type=0x6) returned 0x18a002e [0084.722] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0084.723] SelectObject (hdc=0xf0107cc, h=0x220a081a) returned 0x18a002e [0084.723] GetBkMode (hdc=0xf0107cc) returned 2 [0084.723] SetBkMode (hdc=0xf0107cc, mode=1) returned 2 [0084.723] DrawTextExW (in: hdc=0xf0107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x264392c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0084.723] DrawTextExW (in: hdc=0xf0107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x264392c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0084.723] RestoreDC (hdc=0xf0107cc, nSavedDC=-1) returned 1 [0084.723] GdipReleaseDC (graphics=0x504fbc8, hdc=0xf0107cc) returned 0x0 [0084.723] GetFocus () returned 0x201d0 [0084.723] IsAppThemed () returned 0x1 [0084.723] GetThemeAppProperties () returned 0x3 [0084.723] GetThemeAppProperties () returned 0x3 [0084.723] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0084.723] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0xf0107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.723] GdipReleaseDC (graphics=0x504fbc8, hdc=0xf0107cc) returned 0x0 [0084.723] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0084.723] SelectObject (hdc=0xf0107cc, h=0x185000f) returned 0x490500d1 [0084.724] DeleteDC (hdc=0xf0107cc) returned 1 [0084.724] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0084.724] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0084.724] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2643a28, cPoints=0x1 | out: lpPoints=0x2643a28) returned 42533703 [0084.724] WindowFromPoint (Point=0x3d6) returned 0x201d0 [0084.724] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03d6) returned 0x1 [0084.724] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0084.724] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0084.724] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0084.724] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0084.724] GetSystemMetrics (nIndex=42) returned 0 [0084.724] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0084.724] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0084.724] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0084.724] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0084.724] GetCapture () returned 0x201d0 [0084.724] ReleaseCapture () returned 1 [0084.724] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0084.724] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0084.724] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03d6) returned 0x1 [0084.725] IsWindowUnicode (hWnd=0x201d0) returned 1 [0084.725] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0084.725] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03d6) returned 0x1 [0084.725] SetCursor (hCursor=0x10003) returned 0x10003 [0084.725] TranslateMessage (lpMsg=0x1ef250) returned 0 [0084.725] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0084.725] GetKeyState (nVirtKey=1) returned 1 [0084.725] GetKeyState (nVirtKey=2) returned 0 [0084.725] GetKeyState (nVirtKey=4) returned 0 [0084.725] GetKeyState (nVirtKey=5) returned 0 [0084.725] GetKeyState (nVirtKey=6) returned 0 [0084.725] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0084.725] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0084.725] WaitMessage () returned 1 [0087.772] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0087.773] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0385) returned 0x1 [0087.773] IsWindowUnicode (hWnd=0x201d0) returned 1 [0087.773] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0087.773] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0385) returned 0x1 [0087.773] SetCursor (hCursor=0x10003) returned 0x10003 [0087.773] TranslateMessage (lpMsg=0x1ef250) returned 0 [0087.773] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0087.773] GetKeyState (nVirtKey=1) returned 1 [0087.773] GetKeyState (nVirtKey=2) returned 0 [0087.773] GetKeyState (nVirtKey=4) returned 0 [0087.773] GetKeyState (nVirtKey=5) returned 0 [0087.773] GetKeyState (nVirtKey=6) returned 0 [0087.773] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0087.773] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0087.773] WaitMessage () returned 1 [0087.848] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0087.848] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0385) returned 0x1 [0087.849] IsWindowUnicode (hWnd=0x201d0) returned 1 [0087.849] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0087.849] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0385) returned 0x1 [0087.850] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0087.850] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dc0240) returned 0x0 [0087.850] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0087.850] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0087.850] SetCursor (hCursor=0x10003) returned 0x10003 [0087.850] TranslateMessage (lpMsg=0x1ef250) returned 0 [0087.850] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0087.850] GetKeyState (nVirtKey=1) returned -128 [0087.850] GetKeyState (nVirtKey=2) returned 0 [0087.850] GetKeyState (nVirtKey=4) returned 0 [0087.850] GetKeyState (nVirtKey=5) returned 0 [0087.850] GetKeyState (nVirtKey=6) returned 0 [0087.850] IsWindowVisible (hWnd=0x201d0) returned 1 [0087.850] IsWindowEnabled (hWnd=0x201d0) returned 1 [0087.850] SetFocus (hWnd=0x201d0) returned 0x201d0 [0087.850] GetFocus () returned 0x201d0 [0087.850] GetFocus () returned 0x201d0 [0087.850] GetFocus () returned 0x201d0 [0087.850] GetKeyState (nVirtKey=1) returned -128 [0087.850] GetKeyState (nVirtKey=2) returned 0 [0087.850] GetKeyState (nVirtKey=4) returned 0 [0087.850] GetKeyState (nVirtKey=5) returned 0 [0087.850] GetKeyState (nVirtKey=6) returned 0 [0087.850] GetCapture () returned 0x0 [0087.850] SetCapture (hWnd=0x201d0) returned 0x0 [0087.850] GetKeyState (nVirtKey=1) returned -128 [0087.850] GetKeyState (nVirtKey=2) returned 0 [0087.850] GetKeyState (nVirtKey=4) returned 0 [0087.851] GetKeyState (nVirtKey=5) returned 0 [0087.851] GetKeyState (nVirtKey=6) returned 0 [0087.851] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0087.851] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0087.851] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0087.851] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0087.851] TranslateMessage (lpMsg=0x1ef250) returned 0 [0087.851] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0087.851] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0087.851] IsWindowUnicode (hWnd=0x201d0) returned 1 [0087.851] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0087.851] TranslateMessage (lpMsg=0x1ef250) returned 0 [0087.851] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0087.851] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2643b4c, cPoints=0x1 | out: lpPoints=0x2643b4c) returned 42533703 [0087.851] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0087.851] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0087.851] UpdateWindow (hWnd=0x201d0) returned 1 [0087.851] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0087.851] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0087.851] CreateCompatibleDC (hdc=0x120107ec) returned 0x100107cc [0087.851] SelectObject (hdc=0x100107cc, h=0x490500d1) returned 0x185000f [0087.852] GdipCreateFromHDC (hdc=0x100107cc, graphics=0x1eea5c) returned 0x0 [0087.852] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0087.852] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0087.852] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0087.852] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0087.852] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0087.852] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0087.852] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0087.852] LocalFree (hMem=0x416cb8) returned 0x0 [0087.852] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0087.852] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0087.852] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0087.852] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0087.852] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0087.853] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd630dbd) returned 0x0 [0087.853] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0087.853] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0087.853] GetCurrentObject (hdc=0x100107cc, type=0x1) returned 0x1b00017 [0087.853] GetCurrentObject (hdc=0x100107cc, type=0x2) returned 0x1900010 [0087.853] GetCurrentObject (hdc=0x100107cc, type=0x7) returned 0x490500d1 [0087.853] GetCurrentObject (hdc=0x100107cc, type=0x6) returned 0x18a002e [0087.853] SaveDC (hdc=0x100107cc) returned 1 [0087.853] GetNearestColor (hdc=0x100107cc, color=0xf5f5f5) returned 0xf5f5f5 [0087.853] GetNearestColor (hdc=0x100107cc, color=0x515151) returned 0x515151 [0087.853] GetNearestColor (hdc=0x100107cc, color=0x0) returned 0x0 [0087.853] GetNearestColor (hdc=0x100107cc, color=0x515151) returned 0x515151 [0087.853] GetNearestColor (hdc=0x100107cc, color=0x0) returned 0x0 [0087.853] GetNearestColor (hdc=0x100107cc, color=0xfafafa) returned 0xfafafa [0087.853] GetNearestColor (hdc=0x100107cc, color=0xe0e0e0) returned 0xe0e0e0 [0087.853] GetNearestColor (hdc=0x100107cc, color=0xdcdcdc) returned 0xdcdcdc [0087.853] GetNearestColor (hdc=0x100107cc, color=0x0) returned 0x0 [0087.853] RestoreDC (hdc=0x100107cc, nSavedDC=-1) returned 1 [0087.854] GdipReleaseDC (graphics=0x504fbc8, hdc=0x100107cc) returned 0x0 [0087.854] IsAppThemed () returned 0x1 [0087.854] GetThemeAppProperties () returned 0x3 [0087.854] GetThemeAppProperties () returned 0x3 [0087.854] IsAppThemed () returned 0x1 [0087.854] GetThemeAppProperties () returned 0x3 [0087.854] GetThemeAppProperties () returned 0x3 [0087.854] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2644250 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0087.854] IsAppThemed () returned 0x1 [0087.854] GetThemeAppProperties () returned 0x3 [0087.854] GetThemeAppProperties () returned 0x3 [0087.854] IsAppThemed () returned 0x1 [0087.854] GetThemeAppProperties () returned 0x3 [0087.854] GetThemeAppProperties () returned 0x3 [0087.854] IsAppThemed () returned 0x1 [0087.854] GetThemeAppProperties () returned 0x3 [0087.854] GetThemeAppProperties () returned 0x3 [0087.855] IsAppThemed () returned 0x1 [0087.855] GetThemeAppProperties () returned 0x3 [0087.855] GetThemeAppProperties () returned 0x3 [0087.855] IsThemePartDefined () returned 0x1 [0087.855] IsAppThemed () returned 0x1 [0087.855] GetThemeAppProperties () returned 0x3 [0087.855] GetThemeAppProperties () returned 0x3 [0087.855] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0087.855] IsAppThemed () returned 0x1 [0087.855] GetThemeAppProperties () returned 0x3 [0087.855] GetThemeAppProperties () returned 0x3 [0087.855] IsAppThemed () returned 0x1 [0087.855] GetThemeAppProperties () returned 0x3 [0087.855] GetThemeAppProperties () returned 0x3 [0087.855] IsThemePartDefined () returned 0x1 [0087.855] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0087.855] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0087.855] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0087.855] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0087.855] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0087.855] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0087.855] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0087.855] LocalFree (hMem=0x416cb8) returned 0x0 [0087.855] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0087.855] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0087.855] LocalFree (hMem=0x416cb8) returned 0x0 [0087.855] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0087.856] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0087.856] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0087.856] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0087.856] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0087.856] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0087.856] GetCurrentObject (hdc=0x100107cc, type=0x1) returned 0x1b00017 [0087.856] GetCurrentObject (hdc=0x100107cc, type=0x2) returned 0x1900010 [0087.856] GetCurrentObject (hdc=0x100107cc, type=0x7) returned 0x490500d1 [0087.856] GetCurrentObject (hdc=0x100107cc, type=0x6) returned 0x18a002e [0087.856] SaveDC (hdc=0x100107cc) returned 1 [0087.856] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x93040246 [0087.856] GetClipRgn (hdc=0x100107cc, hrgn=0x93040246) returned 0 [0087.856] SelectClipRgn (hdc=0x100107cc, hrgn=0xb3040813) returned 2 [0087.856] DeleteObject (ho=0x93040246) returned 1 [0087.856] DeleteObject (ho=0xb3040813) returned 1 [0087.856] OffsetViewportOrgEx (in: hdc=0x100107cc, x=0, y=0, lppt=0x2644900 | out: lppt=0x2644900) returned 1 [0087.856] DrawThemeParentBackground () returned 0x0 [0087.856] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0087.856] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0087.857] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0087.857] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0087.857] GetSystemMetrics (nIndex=42) returned 0 [0087.857] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0087.857] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0087.857] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0087.857] GetCurrentObject (hdc=0x100107cc, type=0x1) returned 0x1b00017 [0087.857] GetCurrentObject (hdc=0x100107cc, type=0x2) returned 0x1900010 [0087.857] GetCurrentObject (hdc=0x100107cc, type=0x7) returned 0x490500d1 [0087.857] GetCurrentObject (hdc=0x100107cc, type=0x6) returned 0x18a002e [0087.857] SaveDC (hdc=0x100107cc) returned 2 [0087.857] GetNearestColor (hdc=0x100107cc, color=0xf5f5f5) returned 0xf5f5f5 [0087.857] CreateSolidBrush (color=0xf5f5f5) returned 0x5a100244 [0087.857] FillRect (hDC=0x100107cc, lprc=0x1ee2d0, hbr=0x5a100244) returned 1 [0087.857] DeleteObject (ho=0x5a100244) returned 1 [0087.857] RestoreDC (hdc=0x100107cc, nSavedDC=-1) returned 1 [0087.857] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0087.857] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0087.857] GetSystemMetrics (nIndex=42) returned 0 [0087.857] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0087.857] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0087.858] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0087.858] GetCurrentObject (hdc=0x100107cc, type=0x1) returned 0x1b00017 [0087.858] GetCurrentObject (hdc=0x100107cc, type=0x2) returned 0x1900010 [0087.858] GetCurrentObject (hdc=0x100107cc, type=0x7) returned 0x490500d1 [0087.858] GetCurrentObject (hdc=0x100107cc, type=0x6) returned 0x18a002e [0087.858] SaveDC (hdc=0x100107cc) returned 2 [0087.858] GetNearestColor (hdc=0x100107cc, color=0xf5f5f5) returned 0xf5f5f5 [0087.858] CreateSolidBrush (color=0xf5f5f5) returned 0x5b100244 [0087.858] FillRect (hDC=0x100107cc, lprc=0x1ee270, hbr=0x5b100244) returned 1 [0087.858] DeleteObject (ho=0x5b100244) returned 1 [0087.858] RestoreDC (hdc=0x100107cc, nSavedDC=-1) returned 1 [0087.858] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0087.858] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0087.858] GetSystemMetrics (nIndex=42) returned 0 [0087.858] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0087.858] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0087.858] RestoreDC (hdc=0x100107cc, nSavedDC=-1) returned 1 [0087.858] GdipReleaseDC (graphics=0x504fbc8, hdc=0x100107cc) returned 0x0 [0087.858] IsAppThemed () returned 0x1 [0087.858] GetThemeAppProperties () returned 0x3 [0087.858] GetThemeAppProperties () returned 0x3 [0087.859] IsAppThemed () returned 0x1 [0087.859] GetThemeAppProperties () returned 0x3 [0087.859] GetThemeAppProperties () returned 0x3 [0087.859] IsThemePartDefined () returned 0x1 [0087.859] GdipCreateRegion (region=0x1ee764) returned 0x0 [0087.859] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0087.859] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0087.859] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0087.859] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0087.859] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0087.859] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0087.859] LocalFree (hMem=0x416cb8) returned 0x0 [0087.859] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0087.859] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0087.859] LocalFree (hMem=0x416cb8) returned 0x0 [0087.859] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0087.859] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0087.859] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0087.859] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0087.859] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0087.859] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0087.859] GetCurrentObject (hdc=0x100107cc, type=0x1) returned 0x1b00017 [0087.859] GetCurrentObject (hdc=0x100107cc, type=0x2) returned 0x1900010 [0087.859] GetCurrentObject (hdc=0x100107cc, type=0x7) returned 0x490500d1 [0087.860] GetCurrentObject (hdc=0x100107cc, type=0x6) returned 0x18a002e [0087.860] SaveDC (hdc=0x100107cc) returned 1 [0087.860] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb4040813 [0087.860] GetClipRgn (hdc=0x100107cc, hrgn=0xb4040813) returned 0 [0087.860] SelectClipRgn (hdc=0x100107cc, hrgn=0x95040246) returned 2 [0087.860] DeleteObject (ho=0xb4040813) returned 1 [0087.860] DeleteObject (ho=0x95040246) returned 1 [0087.860] OffsetViewportOrgEx (in: hdc=0x100107cc, x=0, y=0, lppt=0x2645140 | out: lppt=0x2645140) returned 1 [0087.860] IsAppThemed () returned 0x1 [0087.860] GetThemeAppProperties () returned 0x3 [0087.860] GetThemeAppProperties () returned 0x3 [0087.860] DrawThemeBackground () returned 0x0 [0087.860] RestoreDC (hdc=0x100107cc, nSavedDC=-1) returned 1 [0087.860] GdipReleaseDC (graphics=0x504fbc8, hdc=0x100107cc) returned 0x0 [0087.860] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0087.860] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0087.860] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0087.860] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0087.860] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0087.860] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0087.860] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0087.861] LocalFree (hMem=0x416cb8) returned 0x0 [0087.861] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0087.861] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0087.861] LocalFree (hMem=0x416cb8) returned 0x0 [0087.861] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0087.861] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0087.861] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0087.861] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0087.861] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0087.861] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0087.861] GetCurrentObject (hdc=0x100107cc, type=0x1) returned 0x1b00017 [0087.861] GetCurrentObject (hdc=0x100107cc, type=0x2) returned 0x1900010 [0087.861] GetCurrentObject (hdc=0x100107cc, type=0x7) returned 0x490500d1 [0087.861] GetCurrentObject (hdc=0x100107cc, type=0x6) returned 0x18a002e [0087.861] SaveDC (hdc=0x100107cc) returned 1 [0087.861] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x96040246 [0087.861] GetClipRgn (hdc=0x100107cc, hrgn=0x96040246) returned 0 [0087.861] SelectClipRgn (hdc=0x100107cc, hrgn=0xb5040813) returned 2 [0087.861] DeleteObject (ho=0x96040246) returned 1 [0087.861] DeleteObject (ho=0xb5040813) returned 1 [0087.861] OffsetViewportOrgEx (in: hdc=0x100107cc, x=0, y=0, lppt=0x2645414 | out: lppt=0x2645414) returned 1 [0087.861] IsAppThemed () returned 0x1 [0087.862] GetThemeAppProperties () returned 0x3 [0087.862] GetThemeAppProperties () returned 0x3 [0087.862] GetThemeBackgroundContentRect () returned 0x0 [0087.862] RestoreDC (hdc=0x100107cc, nSavedDC=-1) returned 1 [0087.862] GdipReleaseDC (graphics=0x504fbc8, hdc=0x100107cc) returned 0x0 [0087.862] IsAppThemed () returned 0x1 [0087.862] GetThemeAppProperties () returned 0x3 [0087.862] GetThemeAppProperties () returned 0x3 [0087.862] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0087.862] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0087.862] GetCurrentObject (hdc=0x100107cc, type=0x1) returned 0x1b00017 [0087.862] GetCurrentObject (hdc=0x100107cc, type=0x2) returned 0x1900010 [0087.862] GetCurrentObject (hdc=0x100107cc, type=0x7) returned 0x490500d1 [0087.862] GetCurrentObject (hdc=0x100107cc, type=0x6) returned 0x18a002e [0087.862] SaveDC (hdc=0x100107cc) returned 1 [0087.862] GetTextAlign (hdc=0x100107cc) returned 0x0 [0087.862] GetTextColor (hdc=0x100107cc) returned 0x0 [0087.862] GetCurrentObject (hdc=0x100107cc, type=0x6) returned 0x18a002e [0087.862] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0087.862] SelectObject (hdc=0x100107cc, h=0x220a081a) returned 0x18a002e [0087.862] GetBkMode (hdc=0x100107cc) returned 2 [0087.862] SetBkMode (hdc=0x100107cc, mode=1) returned 2 [0087.863] DrawTextExW (in: hdc=0x100107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26457a8 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0087.863] DrawTextExW (in: hdc=0x100107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26457a8 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0087.863] RestoreDC (hdc=0x100107cc, nSavedDC=-1) returned 1 [0087.863] GdipReleaseDC (graphics=0x504fbc8, hdc=0x100107cc) returned 0x0 [0087.863] GetFocus () returned 0x201d0 [0087.863] IsAppThemed () returned 0x1 [0087.863] GetThemeAppProperties () returned 0x3 [0087.863] GetThemeAppProperties () returned 0x3 [0087.863] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0087.863] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x100107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0087.863] GdipReleaseDC (graphics=0x504fbc8, hdc=0x100107cc) returned 0x0 [0087.863] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0087.863] SelectObject (hdc=0x100107cc, h=0x185000f) returned 0x490500d1 [0087.863] DeleteDC (hdc=0x100107cc) returned 1 [0087.863] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0087.864] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0087.864] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26458a4, cPoints=0x1 | out: lpPoints=0x26458a4) returned 42533703 [0087.864] WindowFromPoint (Point=0x385) returned 0x201d0 [0087.864] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0385) returned 0x1 [0087.864] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0087.864] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0087.864] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0087.864] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0087.864] GetSystemMetrics (nIndex=42) returned 0 [0087.864] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0087.864] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0087.864] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0087.864] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0087.864] GetCapture () returned 0x201d0 [0087.864] ReleaseCapture () returned 1 [0087.864] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0087.864] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0087.864] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0385) returned 0x1 [0087.864] IsWindowUnicode (hWnd=0x201d0) returned 1 [0087.864] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0087.864] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0385) returned 0x1 [0087.865] SetCursor (hCursor=0x10003) returned 0x10003 [0087.865] TranslateMessage (lpMsg=0x1ef250) returned 0 [0087.865] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0087.865] GetKeyState (nVirtKey=1) returned 0 [0087.865] GetKeyState (nVirtKey=2) returned 0 [0087.865] GetKeyState (nVirtKey=4) returned 0 [0087.865] GetKeyState (nVirtKey=5) returned 0 [0087.865] GetKeyState (nVirtKey=6) returned 0 [0087.865] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0087.865] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0087.865] WaitMessage () returned 1 [0090.891] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0090.891] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c7) returned 0x1 [0090.891] IsWindowUnicode (hWnd=0x201d0) returned 1 [0090.891] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0090.891] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c7) returned 0x1 [0090.891] SetCursor (hCursor=0x10003) returned 0x10003 [0090.891] TranslateMessage (lpMsg=0x1ef250) returned 0 [0090.891] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0090.892] GetKeyState (nVirtKey=1) returned 0 [0090.892] GetKeyState (nVirtKey=2) returned 0 [0090.892] GetKeyState (nVirtKey=4) returned 0 [0090.892] GetKeyState (nVirtKey=5) returned 0 [0090.892] GetKeyState (nVirtKey=6) returned 0 [0090.892] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0090.892] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0090.892] WaitMessage () returned 1 [0090.954] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0090.954] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c7) returned 0x1 [0090.954] IsWindowUnicode (hWnd=0x201d0) returned 1 [0090.954] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0090.955] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c7) returned 0x1 [0090.955] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0090.955] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1de0282) returned 0x0 [0090.956] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0090.956] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0090.956] SetCursor (hCursor=0x10003) returned 0x10003 [0090.956] TranslateMessage (lpMsg=0x1ef250) returned 0 [0090.956] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0090.956] GetKeyState (nVirtKey=1) returned -127 [0090.956] GetKeyState (nVirtKey=2) returned 0 [0090.956] GetKeyState (nVirtKey=4) returned 0 [0090.956] GetKeyState (nVirtKey=5) returned 0 [0090.956] GetKeyState (nVirtKey=6) returned 0 [0090.956] IsWindowVisible (hWnd=0x201d0) returned 1 [0090.957] IsWindowEnabled (hWnd=0x201d0) returned 1 [0090.957] SetFocus (hWnd=0x201d0) returned 0x201d0 [0090.957] GetFocus () returned 0x201d0 [0090.957] GetFocus () returned 0x201d0 [0090.957] GetFocus () returned 0x201d0 [0090.957] GetKeyState (nVirtKey=1) returned -127 [0090.957] GetKeyState (nVirtKey=2) returned 0 [0090.957] GetKeyState (nVirtKey=4) returned 0 [0090.957] GetKeyState (nVirtKey=5) returned 0 [0090.957] GetKeyState (nVirtKey=6) returned 0 [0090.957] GetCapture () returned 0x0 [0090.957] SetCapture (hWnd=0x201d0) returned 0x0 [0090.957] GetKeyState (nVirtKey=1) returned -127 [0090.957] GetKeyState (nVirtKey=2) returned 0 [0090.957] GetKeyState (nVirtKey=4) returned 0 [0090.957] GetKeyState (nVirtKey=5) returned 0 [0090.957] GetKeyState (nVirtKey=6) returned 0 [0090.957] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0090.957] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0090.957] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0090.957] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0090.958] TranslateMessage (lpMsg=0x1ef250) returned 0 [0090.958] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0090.958] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0090.958] IsWindowUnicode (hWnd=0x201d0) returned 1 [0090.958] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0090.958] TranslateMessage (lpMsg=0x1ef250) returned 0 [0090.958] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0090.958] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26459c8, cPoints=0x1 | out: lpPoints=0x26459c8) returned 42533703 [0090.958] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0090.958] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0090.958] UpdateWindow (hWnd=0x201d0) returned 1 [0090.958] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0090.958] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0090.958] CreateCompatibleDC (hdc=0x120107ec) returned 0x110107cc [0090.958] SelectObject (hdc=0x110107cc, h=0x490500d1) returned 0x185000f [0090.958] GdipCreateFromHDC (hdc=0x110107cc, graphics=0x1eea5c) returned 0x0 [0090.959] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0090.959] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0090.959] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0090.959] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0090.959] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0090.959] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0090.959] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0090.959] LocalFree (hMem=0x416cb8) returned 0x0 [0090.959] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0090.959] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0090.959] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0090.959] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0090.959] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0090.960] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd610dbd) returned 0x0 [0090.960] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0090.960] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0090.960] GetCurrentObject (hdc=0x110107cc, type=0x1) returned 0x1b00017 [0090.960] GetCurrentObject (hdc=0x110107cc, type=0x2) returned 0x1900010 [0090.960] GetCurrentObject (hdc=0x110107cc, type=0x7) returned 0x490500d1 [0090.960] GetCurrentObject (hdc=0x110107cc, type=0x6) returned 0x18a002e [0090.960] SaveDC (hdc=0x110107cc) returned 1 [0090.960] GetNearestColor (hdc=0x110107cc, color=0xf5f5f5) returned 0xf5f5f5 [0090.960] GetNearestColor (hdc=0x110107cc, color=0x515151) returned 0x515151 [0090.960] GetNearestColor (hdc=0x110107cc, color=0x0) returned 0x0 [0090.960] GetNearestColor (hdc=0x110107cc, color=0x515151) returned 0x515151 [0090.960] GetNearestColor (hdc=0x110107cc, color=0x0) returned 0x0 [0090.960] GetNearestColor (hdc=0x110107cc, color=0xfafafa) returned 0xfafafa [0090.961] GetNearestColor (hdc=0x110107cc, color=0xe0e0e0) returned 0xe0e0e0 [0090.961] GetNearestColor (hdc=0x110107cc, color=0xdcdcdc) returned 0xdcdcdc [0090.961] GetNearestColor (hdc=0x110107cc, color=0x0) returned 0x0 [0090.961] RestoreDC (hdc=0x110107cc, nSavedDC=-1) returned 1 [0090.961] GdipReleaseDC (graphics=0x504fbc8, hdc=0x110107cc) returned 0x0 [0090.961] IsAppThemed () returned 0x1 [0090.961] GetThemeAppProperties () returned 0x3 [0090.961] GetThemeAppProperties () returned 0x3 [0090.961] IsAppThemed () returned 0x1 [0090.961] GetThemeAppProperties () returned 0x3 [0090.961] GetThemeAppProperties () returned 0x3 [0090.961] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26460cc | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0090.962] IsAppThemed () returned 0x1 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] IsAppThemed () returned 0x1 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] IsAppThemed () returned 0x1 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] IsAppThemed () returned 0x1 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] IsThemePartDefined () returned 0x1 [0090.962] IsAppThemed () returned 0x1 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0090.962] IsAppThemed () returned 0x1 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] IsAppThemed () returned 0x1 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] GetThemeAppProperties () returned 0x3 [0090.962] IsThemePartDefined () returned 0x1 [0090.962] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0090.962] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0090.963] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0090.963] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0090.963] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0090.963] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0090.963] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0090.963] LocalFree (hMem=0x416cb8) returned 0x0 [0090.963] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0090.963] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0090.963] LocalFree (hMem=0x416cb8) returned 0x0 [0090.963] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0090.963] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0090.963] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0090.963] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0090.963] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0090.963] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0090.963] GetCurrentObject (hdc=0x110107cc, type=0x1) returned 0x1b00017 [0090.964] GetCurrentObject (hdc=0x110107cc, type=0x2) returned 0x1900010 [0090.964] GetCurrentObject (hdc=0x110107cc, type=0x7) returned 0x490500d1 [0090.964] GetCurrentObject (hdc=0x110107cc, type=0x6) returned 0x18a002e [0090.964] SaveDC (hdc=0x110107cc) returned 1 [0090.964] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb6040813 [0090.964] GetClipRgn (hdc=0x110107cc, hrgn=0xb6040813) returned 0 [0090.964] SelectClipRgn (hdc=0x110107cc, hrgn=0x9a040246) returned 2 [0090.964] DeleteObject (ho=0xb6040813) returned 1 [0090.964] DeleteObject (ho=0x9a040246) returned 1 [0090.964] OffsetViewportOrgEx (in: hdc=0x110107cc, x=0, y=0, lppt=0x264677c | out: lppt=0x264677c) returned 1 [0090.964] DrawThemeParentBackground () returned 0x0 [0090.964] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0090.964] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0090.964] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0090.964] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0090.965] GetSystemMetrics (nIndex=42) returned 0 [0090.965] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0090.965] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0090.965] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0090.965] GetCurrentObject (hdc=0x110107cc, type=0x1) returned 0x1b00017 [0090.965] GetCurrentObject (hdc=0x110107cc, type=0x2) returned 0x1900010 [0090.965] GetCurrentObject (hdc=0x110107cc, type=0x7) returned 0x490500d1 [0090.965] GetCurrentObject (hdc=0x110107cc, type=0x6) returned 0x18a002e [0090.965] SaveDC (hdc=0x110107cc) returned 2 [0090.965] GetNearestColor (hdc=0x110107cc, color=0xf5f5f5) returned 0xf5f5f5 [0090.965] CreateSolidBrush (color=0xf5f5f5) returned 0x5c100244 [0090.965] FillRect (hDC=0x110107cc, lprc=0x1ee2d0, hbr=0x5c100244) returned 1 [0090.965] DeleteObject (ho=0x5c100244) returned 1 [0090.965] RestoreDC (hdc=0x110107cc, nSavedDC=-1) returned 1 [0090.966] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0090.966] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0090.966] GetSystemMetrics (nIndex=42) returned 0 [0090.966] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0090.966] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0090.966] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0090.966] GetCurrentObject (hdc=0x110107cc, type=0x1) returned 0x1b00017 [0090.966] GetCurrentObject (hdc=0x110107cc, type=0x2) returned 0x1900010 [0090.966] GetCurrentObject (hdc=0x110107cc, type=0x7) returned 0x490500d1 [0090.966] GetCurrentObject (hdc=0x110107cc, type=0x6) returned 0x18a002e [0090.966] SaveDC (hdc=0x110107cc) returned 2 [0090.966] GetNearestColor (hdc=0x110107cc, color=0xf5f5f5) returned 0xf5f5f5 [0090.966] CreateSolidBrush (color=0xf5f5f5) returned 0x5d100244 [0090.966] FillRect (hDC=0x110107cc, lprc=0x1ee270, hbr=0x5d100244) returned 1 [0090.966] DeleteObject (ho=0x5d100244) returned 1 [0090.966] RestoreDC (hdc=0x110107cc, nSavedDC=-1) returned 1 [0090.967] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0090.967] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0090.967] GetSystemMetrics (nIndex=42) returned 0 [0090.967] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0090.967] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0090.967] RestoreDC (hdc=0x110107cc, nSavedDC=-1) returned 1 [0090.967] GdipReleaseDC (graphics=0x504fbc8, hdc=0x110107cc) returned 0x0 [0090.967] IsAppThemed () returned 0x1 [0090.967] GetThemeAppProperties () returned 0x3 [0090.967] GetThemeAppProperties () returned 0x3 [0090.967] IsAppThemed () returned 0x1 [0090.967] GetThemeAppProperties () returned 0x3 [0090.967] GetThemeAppProperties () returned 0x3 [0090.967] IsThemePartDefined () returned 0x1 [0090.967] GdipCreateRegion (region=0x1ee764) returned 0x0 [0090.968] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0090.968] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0090.968] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0090.968] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0090.968] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0090.968] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0090.968] LocalFree (hMem=0x416cb8) returned 0x0 [0090.968] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0090.968] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0090.968] LocalFree (hMem=0x416cb8) returned 0x0 [0090.968] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0090.968] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0090.968] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0090.968] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0090.968] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0090.968] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0090.969] GetCurrentObject (hdc=0x110107cc, type=0x1) returned 0x1b00017 [0090.969] GetCurrentObject (hdc=0x110107cc, type=0x2) returned 0x1900010 [0090.969] GetCurrentObject (hdc=0x110107cc, type=0x7) returned 0x490500d1 [0090.969] GetCurrentObject (hdc=0x110107cc, type=0x6) returned 0x18a002e [0090.969] SaveDC (hdc=0x110107cc) returned 1 [0090.969] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9b040246 [0090.969] GetClipRgn (hdc=0x110107cc, hrgn=0x9b040246) returned 0 [0090.969] SelectClipRgn (hdc=0x110107cc, hrgn=0xb8040813) returned 2 [0090.969] DeleteObject (ho=0x9b040246) returned 1 [0090.969] DeleteObject (ho=0xb8040813) returned 1 [0090.969] OffsetViewportOrgEx (in: hdc=0x110107cc, x=0, y=0, lppt=0x2646fbc | out: lppt=0x2646fbc) returned 1 [0090.969] IsAppThemed () returned 0x1 [0090.969] GetThemeAppProperties () returned 0x3 [0090.969] GetThemeAppProperties () returned 0x3 [0090.969] DrawThemeBackground () returned 0x0 [0090.969] RestoreDC (hdc=0x110107cc, nSavedDC=-1) returned 1 [0090.970] GdipReleaseDC (graphics=0x504fbc8, hdc=0x110107cc) returned 0x0 [0090.970] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0090.970] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0090.970] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0090.970] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0090.970] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0090.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0090.970] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0090.970] LocalFree (hMem=0x416cb8) returned 0x0 [0090.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0090.970] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0090.970] LocalFree (hMem=0x416cb8) returned 0x0 [0090.970] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0090.970] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0090.970] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0090.970] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0090.970] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0090.971] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0090.971] GetCurrentObject (hdc=0x110107cc, type=0x1) returned 0x1b00017 [0090.971] GetCurrentObject (hdc=0x110107cc, type=0x2) returned 0x1900010 [0090.971] GetCurrentObject (hdc=0x110107cc, type=0x7) returned 0x490500d1 [0090.971] GetCurrentObject (hdc=0x110107cc, type=0x6) returned 0x18a002e [0090.971] SaveDC (hdc=0x110107cc) returned 1 [0090.971] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb9040813 [0090.971] GetClipRgn (hdc=0x110107cc, hrgn=0xb9040813) returned 0 [0090.971] SelectClipRgn (hdc=0x110107cc, hrgn=0x9c040246) returned 2 [0090.971] DeleteObject (ho=0xb9040813) returned 1 [0090.971] DeleteObject (ho=0x9c040246) returned 1 [0090.971] OffsetViewportOrgEx (in: hdc=0x110107cc, x=0, y=0, lppt=0x2647290 | out: lppt=0x2647290) returned 1 [0090.971] IsAppThemed () returned 0x1 [0090.971] GetThemeAppProperties () returned 0x3 [0090.971] GetThemeAppProperties () returned 0x3 [0090.971] GetThemeBackgroundContentRect () returned 0x0 [0090.971] RestoreDC (hdc=0x110107cc, nSavedDC=-1) returned 1 [0090.972] GdipReleaseDC (graphics=0x504fbc8, hdc=0x110107cc) returned 0x0 [0090.972] IsAppThemed () returned 0x1 [0090.972] GetThemeAppProperties () returned 0x3 [0090.972] GetThemeAppProperties () returned 0x3 [0090.972] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0090.972] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0090.972] GetCurrentObject (hdc=0x110107cc, type=0x1) returned 0x1b00017 [0090.972] GetCurrentObject (hdc=0x110107cc, type=0x2) returned 0x1900010 [0090.972] GetCurrentObject (hdc=0x110107cc, type=0x7) returned 0x490500d1 [0090.972] GetCurrentObject (hdc=0x110107cc, type=0x6) returned 0x18a002e [0090.972] SaveDC (hdc=0x110107cc) returned 1 [0090.972] GetTextAlign (hdc=0x110107cc) returned 0x0 [0090.972] GetTextColor (hdc=0x110107cc) returned 0x0 [0090.972] GetCurrentObject (hdc=0x110107cc, type=0x6) returned 0x18a002e [0090.972] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0090.972] SelectObject (hdc=0x110107cc, h=0x220a081a) returned 0x18a002e [0090.972] GetBkMode (hdc=0x110107cc) returned 2 [0090.973] SetBkMode (hdc=0x110107cc, mode=1) returned 2 [0090.973] DrawTextExW (in: hdc=0x110107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2647624 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0090.973] DrawTextExW (in: hdc=0x110107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2647624 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0090.973] RestoreDC (hdc=0x110107cc, nSavedDC=-1) returned 1 [0090.973] GdipReleaseDC (graphics=0x504fbc8, hdc=0x110107cc) returned 0x0 [0090.973] GetFocus () returned 0x201d0 [0090.973] IsAppThemed () returned 0x1 [0090.973] GetThemeAppProperties () returned 0x3 [0090.973] GetThemeAppProperties () returned 0x3 [0090.973] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0090.973] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x110107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0090.974] GdipReleaseDC (graphics=0x504fbc8, hdc=0x110107cc) returned 0x0 [0090.974] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0090.974] SelectObject (hdc=0x110107cc, h=0x185000f) returned 0x490500d1 [0090.974] DeleteDC (hdc=0x110107cc) returned 1 [0090.974] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0090.974] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0090.974] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2647720, cPoints=0x1 | out: lpPoints=0x2647720) returned 42533703 [0090.974] WindowFromPoint (Point=0x3c7) returned 0x201d0 [0090.974] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c7) returned 0x1 [0090.974] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0090.974] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0090.974] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0090.974] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0090.974] GetSystemMetrics (nIndex=42) returned 0 [0090.974] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0090.974] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0090.975] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0090.975] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0090.975] GetCapture () returned 0x201d0 [0090.975] ReleaseCapture () returned 1 [0090.975] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0090.975] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0090.975] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c7) returned 0x1 [0090.975] IsWindowUnicode (hWnd=0x201d0) returned 1 [0090.975] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0090.975] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c7) returned 0x1 [0090.975] SetCursor (hCursor=0x10003) returned 0x10003 [0090.975] TranslateMessage (lpMsg=0x1ef250) returned 0 [0090.975] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0090.975] GetKeyState (nVirtKey=1) returned 1 [0090.975] GetKeyState (nVirtKey=2) returned 0 [0090.975] GetKeyState (nVirtKey=4) returned 0 [0090.976] GetKeyState (nVirtKey=5) returned 0 [0090.976] GetKeyState (nVirtKey=6) returned 0 [0090.976] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0090.976] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0090.976] WaitMessage () returned 1 [0093.899] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0093.899] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03bf) returned 0x1 [0093.899] IsWindowUnicode (hWnd=0x201d0) returned 1 [0093.899] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0093.899] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03bf) returned 0x1 [0093.899] SetCursor (hCursor=0x10003) returned 0x10003 [0093.899] TranslateMessage (lpMsg=0x1ef250) returned 0 [0093.899] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0093.899] GetKeyState (nVirtKey=1) returned 1 [0093.899] GetKeyState (nVirtKey=2) returned 0 [0093.899] GetKeyState (nVirtKey=4) returned 0 [0093.899] GetKeyState (nVirtKey=5) returned 0 [0093.899] GetKeyState (nVirtKey=6) returned 0 [0093.900] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0093.900] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0093.900] WaitMessage () returned 1 [0093.979] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0093.979] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03bf) returned 0x1 [0093.979] IsWindowUnicode (hWnd=0x201d0) returned 1 [0093.979] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0093.980] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03bf) returned 0x1 [0093.980] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0093.980] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dc027a) returned 0x0 [0093.980] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0093.980] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0093.980] SetCursor (hCursor=0x10003) returned 0x10003 [0093.980] TranslateMessage (lpMsg=0x1ef250) returned 0 [0093.980] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0093.980] GetKeyState (nVirtKey=1) returned -128 [0093.980] GetKeyState (nVirtKey=2) returned 0 [0093.980] GetKeyState (nVirtKey=4) returned 0 [0093.980] GetKeyState (nVirtKey=5) returned 0 [0093.980] GetKeyState (nVirtKey=6) returned 0 [0093.980] IsWindowVisible (hWnd=0x201d0) returned 1 [0093.980] IsWindowEnabled (hWnd=0x201d0) returned 1 [0093.980] SetFocus (hWnd=0x201d0) returned 0x201d0 [0093.981] GetFocus () returned 0x201d0 [0093.981] GetFocus () returned 0x201d0 [0093.981] GetFocus () returned 0x201d0 [0093.981] GetKeyState (nVirtKey=1) returned -128 [0093.981] GetKeyState (nVirtKey=2) returned 0 [0093.981] GetKeyState (nVirtKey=4) returned 0 [0093.981] GetKeyState (nVirtKey=5) returned 0 [0093.981] GetKeyState (nVirtKey=6) returned 0 [0093.981] GetCapture () returned 0x0 [0093.981] SetCapture (hWnd=0x201d0) returned 0x0 [0093.981] GetKeyState (nVirtKey=1) returned -128 [0093.981] GetKeyState (nVirtKey=2) returned 0 [0093.981] GetKeyState (nVirtKey=4) returned 0 [0093.981] GetKeyState (nVirtKey=5) returned 0 [0093.981] GetKeyState (nVirtKey=6) returned 0 [0093.981] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0093.981] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0093.981] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0093.981] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0093.981] TranslateMessage (lpMsg=0x1ef250) returned 0 [0093.981] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0093.981] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0093.981] IsWindowUnicode (hWnd=0x201d0) returned 1 [0093.981] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0093.981] TranslateMessage (lpMsg=0x1ef250) returned 0 [0093.981] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0093.981] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2647844, cPoints=0x1 | out: lpPoints=0x2647844) returned 42533703 [0093.981] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0093.981] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0093.981] UpdateWindow (hWnd=0x201d0) returned 1 [0093.982] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0093.982] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0093.982] CreateCompatibleDC (hdc=0x120107ec) returned 0x120107cc [0093.982] SelectObject (hdc=0x120107cc, h=0x490500d1) returned 0x185000f [0093.982] GdipCreateFromHDC (hdc=0x120107cc, graphics=0x1eea5c) returned 0x0 [0093.982] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0093.982] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0093.982] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0093.982] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0093.982] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0093.982] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0093.982] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0093.982] LocalFree (hMem=0x416cb8) returned 0x0 [0093.982] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0093.982] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0093.982] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0093.982] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0093.982] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0093.982] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd5f0dbd) returned 0x0 [0093.983] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0093.983] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0093.983] GetCurrentObject (hdc=0x120107cc, type=0x1) returned 0x1b00017 [0093.983] GetCurrentObject (hdc=0x120107cc, type=0x2) returned 0x1900010 [0093.983] GetCurrentObject (hdc=0x120107cc, type=0x7) returned 0x490500d1 [0093.983] GetCurrentObject (hdc=0x120107cc, type=0x6) returned 0x18a002e [0093.983] SaveDC (hdc=0x120107cc) returned 1 [0093.983] GetNearestColor (hdc=0x120107cc, color=0xf5f5f5) returned 0xf5f5f5 [0093.983] GetNearestColor (hdc=0x120107cc, color=0x515151) returned 0x515151 [0093.983] GetNearestColor (hdc=0x120107cc, color=0x0) returned 0x0 [0093.983] GetNearestColor (hdc=0x120107cc, color=0x515151) returned 0x515151 [0093.983] GetNearestColor (hdc=0x120107cc, color=0x0) returned 0x0 [0093.983] GetNearestColor (hdc=0x120107cc, color=0xfafafa) returned 0xfafafa [0093.983] GetNearestColor (hdc=0x120107cc, color=0xe0e0e0) returned 0xe0e0e0 [0093.983] GetNearestColor (hdc=0x120107cc, color=0xdcdcdc) returned 0xdcdcdc [0093.983] GetNearestColor (hdc=0x120107cc, color=0x0) returned 0x0 [0093.983] RestoreDC (hdc=0x120107cc, nSavedDC=-1) returned 1 [0093.983] GdipReleaseDC (graphics=0x504fbc8, hdc=0x120107cc) returned 0x0 [0093.984] IsAppThemed () returned 0x1 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] IsAppThemed () returned 0x1 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2647f48 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0093.984] IsAppThemed () returned 0x1 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] IsAppThemed () returned 0x1 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] IsAppThemed () returned 0x1 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] IsAppThemed () returned 0x1 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] IsThemePartDefined () returned 0x1 [0093.984] IsAppThemed () returned 0x1 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] GetThemeAppProperties () returned 0x3 [0093.984] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0093.985] IsAppThemed () returned 0x1 [0093.985] GetThemeAppProperties () returned 0x3 [0093.985] GetThemeAppProperties () returned 0x3 [0093.985] IsAppThemed () returned 0x1 [0093.985] GetThemeAppProperties () returned 0x3 [0093.985] GetThemeAppProperties () returned 0x3 [0093.985] IsThemePartDefined () returned 0x1 [0093.985] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0093.985] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0093.985] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0093.985] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0093.985] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0093.985] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0093.985] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0093.985] LocalFree (hMem=0x416cb8) returned 0x0 [0093.985] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0093.985] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0093.985] LocalFree (hMem=0x416cb8) returned 0x0 [0093.985] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0093.985] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0093.985] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0093.985] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0093.985] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0093.985] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0093.986] GetCurrentObject (hdc=0x120107cc, type=0x1) returned 0x1b00017 [0093.986] GetCurrentObject (hdc=0x120107cc, type=0x2) returned 0x1900010 [0093.986] GetCurrentObject (hdc=0x120107cc, type=0x7) returned 0x490500d1 [0093.986] GetCurrentObject (hdc=0x120107cc, type=0x6) returned 0x18a002e [0093.986] SaveDC (hdc=0x120107cc) returned 1 [0093.986] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9d040246 [0093.986] GetClipRgn (hdc=0x120107cc, hrgn=0x9d040246) returned 0 [0093.986] SelectClipRgn (hdc=0x120107cc, hrgn=0xbd040813) returned 2 [0093.986] DeleteObject (ho=0x9d040246) returned 1 [0093.986] DeleteObject (ho=0xbd040813) returned 1 [0093.986] OffsetViewportOrgEx (in: hdc=0x120107cc, x=0, y=0, lppt=0x26485f8 | out: lppt=0x26485f8) returned 1 [0093.986] DrawThemeParentBackground () returned 0x0 [0093.986] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0093.986] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0093.986] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0093.986] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0093.986] GetSystemMetrics (nIndex=42) returned 0 [0093.986] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0093.986] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0093.986] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0093.987] GetCurrentObject (hdc=0x120107cc, type=0x1) returned 0x1b00017 [0093.987] GetCurrentObject (hdc=0x120107cc, type=0x2) returned 0x1900010 [0093.987] GetCurrentObject (hdc=0x120107cc, type=0x7) returned 0x490500d1 [0093.987] GetCurrentObject (hdc=0x120107cc, type=0x6) returned 0x18a002e [0093.987] SaveDC (hdc=0x120107cc) returned 2 [0093.987] GetNearestColor (hdc=0x120107cc, color=0xf5f5f5) returned 0xf5f5f5 [0093.987] CreateSolidBrush (color=0xf5f5f5) returned 0x5e100244 [0093.987] FillRect (hDC=0x120107cc, lprc=0x1ee2d0, hbr=0x5e100244) returned 1 [0093.987] DeleteObject (ho=0x5e100244) returned 1 [0093.987] RestoreDC (hdc=0x120107cc, nSavedDC=-1) returned 1 [0093.987] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0093.987] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0093.987] GetSystemMetrics (nIndex=42) returned 0 [0093.987] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0093.987] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0093.987] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0093.987] GetCurrentObject (hdc=0x120107cc, type=0x1) returned 0x1b00017 [0093.987] GetCurrentObject (hdc=0x120107cc, type=0x2) returned 0x1900010 [0093.987] GetCurrentObject (hdc=0x120107cc, type=0x7) returned 0x490500d1 [0093.987] GetCurrentObject (hdc=0x120107cc, type=0x6) returned 0x18a002e [0093.988] SaveDC (hdc=0x120107cc) returned 2 [0093.988] GetNearestColor (hdc=0x120107cc, color=0xf5f5f5) returned 0xf5f5f5 [0093.988] CreateSolidBrush (color=0xf5f5f5) returned 0x5f100244 [0093.988] FillRect (hDC=0x120107cc, lprc=0x1ee270, hbr=0x5f100244) returned 1 [0093.988] DeleteObject (ho=0x5f100244) returned 1 [0093.988] RestoreDC (hdc=0x120107cc, nSavedDC=-1) returned 1 [0093.988] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0093.988] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0093.988] GetSystemMetrics (nIndex=42) returned 0 [0093.988] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0093.988] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0093.988] RestoreDC (hdc=0x120107cc, nSavedDC=-1) returned 1 [0093.988] GdipReleaseDC (graphics=0x504fbc8, hdc=0x120107cc) returned 0x0 [0093.988] IsAppThemed () returned 0x1 [0093.988] GetThemeAppProperties () returned 0x3 [0093.988] GetThemeAppProperties () returned 0x3 [0093.988] IsAppThemed () returned 0x1 [0093.988] GetThemeAppProperties () returned 0x3 [0093.988] GetThemeAppProperties () returned 0x3 [0093.988] IsThemePartDefined () returned 0x1 [0093.988] GdipCreateRegion (region=0x1ee764) returned 0x0 [0093.988] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0093.988] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0093.988] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0093.989] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0093.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0093.989] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0093.989] LocalFree (hMem=0x416cb8) returned 0x0 [0093.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0093.989] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0093.989] LocalFree (hMem=0x416cb8) returned 0x0 [0093.989] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0093.989] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0093.989] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0093.989] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0093.989] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0093.989] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0093.989] GetCurrentObject (hdc=0x120107cc, type=0x1) returned 0x1b00017 [0093.989] GetCurrentObject (hdc=0x120107cc, type=0x2) returned 0x1900010 [0093.989] GetCurrentObject (hdc=0x120107cc, type=0x7) returned 0x490500d1 [0093.989] GetCurrentObject (hdc=0x120107cc, type=0x6) returned 0x18a002e [0093.989] SaveDC (hdc=0x120107cc) returned 1 [0093.989] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbe040813 [0093.989] GetClipRgn (hdc=0x120107cc, hrgn=0xbe040813) returned 0 [0093.989] SelectClipRgn (hdc=0x120107cc, hrgn=0x9f040246) returned 2 [0093.989] DeleteObject (ho=0xbe040813) returned 1 [0093.989] DeleteObject (ho=0x9f040246) returned 1 [0093.990] OffsetViewportOrgEx (in: hdc=0x120107cc, x=0, y=0, lppt=0x2648e38 | out: lppt=0x2648e38) returned 1 [0093.990] IsAppThemed () returned 0x1 [0093.990] GetThemeAppProperties () returned 0x3 [0093.990] GetThemeAppProperties () returned 0x3 [0093.990] DrawThemeBackground () returned 0x0 [0093.990] RestoreDC (hdc=0x120107cc, nSavedDC=-1) returned 1 [0093.990] GdipReleaseDC (graphics=0x504fbc8, hdc=0x120107cc) returned 0x0 [0093.990] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0093.990] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0093.990] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0093.990] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0093.990] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0093.990] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0093.990] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0093.990] LocalFree (hMem=0x416cb8) returned 0x0 [0093.990] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0093.990] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0093.990] LocalFree (hMem=0x416cb8) returned 0x0 [0093.990] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0093.990] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0093.990] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0093.991] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0093.991] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0093.991] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0093.991] GetCurrentObject (hdc=0x120107cc, type=0x1) returned 0x1b00017 [0093.991] GetCurrentObject (hdc=0x120107cc, type=0x2) returned 0x1900010 [0093.991] GetCurrentObject (hdc=0x120107cc, type=0x7) returned 0x490500d1 [0093.991] GetCurrentObject (hdc=0x120107cc, type=0x6) returned 0x18a002e [0093.991] SaveDC (hdc=0x120107cc) returned 1 [0093.991] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa0040246 [0093.991] GetClipRgn (hdc=0x120107cc, hrgn=0xa0040246) returned 0 [0093.991] SelectClipRgn (hdc=0x120107cc, hrgn=0xbf040813) returned 2 [0093.991] DeleteObject (ho=0xa0040246) returned 1 [0093.991] DeleteObject (ho=0xbf040813) returned 1 [0093.991] OffsetViewportOrgEx (in: hdc=0x120107cc, x=0, y=0, lppt=0x264910c | out: lppt=0x264910c) returned 1 [0093.991] IsAppThemed () returned 0x1 [0093.991] GetThemeAppProperties () returned 0x3 [0093.991] GetThemeAppProperties () returned 0x3 [0093.991] GetThemeBackgroundContentRect () returned 0x0 [0093.991] RestoreDC (hdc=0x120107cc, nSavedDC=-1) returned 1 [0093.991] GdipReleaseDC (graphics=0x504fbc8, hdc=0x120107cc) returned 0x0 [0093.991] IsAppThemed () returned 0x1 [0093.991] GetThemeAppProperties () returned 0x3 [0093.991] GetThemeAppProperties () returned 0x3 [0093.991] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0093.992] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0093.992] GetCurrentObject (hdc=0x120107cc, type=0x1) returned 0x1b00017 [0093.992] GetCurrentObject (hdc=0x120107cc, type=0x2) returned 0x1900010 [0093.992] GetCurrentObject (hdc=0x120107cc, type=0x7) returned 0x490500d1 [0093.992] GetCurrentObject (hdc=0x120107cc, type=0x6) returned 0x18a002e [0093.992] SaveDC (hdc=0x120107cc) returned 1 [0093.992] GetTextAlign (hdc=0x120107cc) returned 0x0 [0093.992] GetTextColor (hdc=0x120107cc) returned 0x0 [0093.992] GetCurrentObject (hdc=0x120107cc, type=0x6) returned 0x18a002e [0093.992] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0093.992] SelectObject (hdc=0x120107cc, h=0x220a081a) returned 0x18a002e [0093.992] GetBkMode (hdc=0x120107cc) returned 2 [0093.992] SetBkMode (hdc=0x120107cc, mode=1) returned 2 [0093.992] DrawTextExW (in: hdc=0x120107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26494a0 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0093.992] DrawTextExW (in: hdc=0x120107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26494a0 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0093.992] RestoreDC (hdc=0x120107cc, nSavedDC=-1) returned 1 [0093.993] GdipReleaseDC (graphics=0x504fbc8, hdc=0x120107cc) returned 0x0 [0093.993] GetFocus () returned 0x201d0 [0093.993] IsAppThemed () returned 0x1 [0093.993] GetThemeAppProperties () returned 0x3 [0093.993] GetThemeAppProperties () returned 0x3 [0093.993] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0093.993] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x120107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0093.993] GdipReleaseDC (graphics=0x504fbc8, hdc=0x120107cc) returned 0x0 [0093.993] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0093.993] SelectObject (hdc=0x120107cc, h=0x185000f) returned 0x490500d1 [0093.993] DeleteDC (hdc=0x120107cc) returned 1 [0093.993] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0093.993] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0093.993] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x264959c, cPoints=0x1 | out: lpPoints=0x264959c) returned 42533703 [0093.993] WindowFromPoint (Point=0x3bf) returned 0x201d0 [0093.993] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03bf) returned 0x1 [0093.993] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0093.993] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0093.993] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0093.993] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0093.994] GetSystemMetrics (nIndex=42) returned 0 [0093.994] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0093.994] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0093.994] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0093.994] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0093.994] GetCapture () returned 0x201d0 [0093.994] ReleaseCapture () returned 1 [0093.994] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0093.994] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0093.994] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03bf) returned 0x1 [0093.994] IsWindowUnicode (hWnd=0x201d0) returned 1 [0093.994] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0093.994] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d03bf) returned 0x1 [0093.994] SetCursor (hCursor=0x10003) returned 0x10003 [0093.995] TranslateMessage (lpMsg=0x1ef250) returned 0 [0093.995] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0093.995] GetKeyState (nVirtKey=1) returned 0 [0093.995] GetKeyState (nVirtKey=2) returned 0 [0093.995] GetKeyState (nVirtKey=4) returned 0 [0093.995] GetKeyState (nVirtKey=5) returned 0 [0093.995] GetKeyState (nVirtKey=6) returned 0 [0093.995] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0093.995] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0093.995] WaitMessage () returned 1 [0097.022] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0097.022] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d8) returned 0x1 [0097.022] IsWindowUnicode (hWnd=0x201d0) returned 1 [0097.022] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0097.022] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d8) returned 0x1 [0097.022] SetCursor (hCursor=0x10003) returned 0x10003 [0097.022] TranslateMessage (lpMsg=0x1ef250) returned 0 [0097.022] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0097.022] GetKeyState (nVirtKey=1) returned 0 [0097.022] GetKeyState (nVirtKey=2) returned 0 [0097.022] GetKeyState (nVirtKey=4) returned 0 [0097.022] GetKeyState (nVirtKey=5) returned 0 [0097.022] GetKeyState (nVirtKey=6) returned 0 [0097.022] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0097.022] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0097.022] WaitMessage () returned 1 [0097.091] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0097.091] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d8) returned 0x1 [0097.091] IsWindowUnicode (hWnd=0x201d0) returned 1 [0097.091] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0097.091] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d8) returned 0x1 [0097.091] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0097.091] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e20293) returned 0x0 [0097.091] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0097.091] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0097.091] SetCursor (hCursor=0x10003) returned 0x10003 [0097.092] TranslateMessage (lpMsg=0x1ef250) returned 0 [0097.092] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0097.092] GetKeyState (nVirtKey=1) returned -127 [0097.092] GetKeyState (nVirtKey=2) returned 0 [0097.092] GetKeyState (nVirtKey=4) returned 0 [0097.092] GetKeyState (nVirtKey=5) returned 0 [0097.092] GetKeyState (nVirtKey=6) returned 0 [0097.092] IsWindowVisible (hWnd=0x201d0) returned 1 [0097.092] IsWindowEnabled (hWnd=0x201d0) returned 1 [0097.092] SetFocus (hWnd=0x201d0) returned 0x201d0 [0097.092] GetFocus () returned 0x201d0 [0097.092] GetFocus () returned 0x201d0 [0097.092] GetFocus () returned 0x201d0 [0097.092] GetKeyState (nVirtKey=1) returned -127 [0097.092] GetKeyState (nVirtKey=2) returned 0 [0097.093] GetKeyState (nVirtKey=4) returned 0 [0097.093] GetKeyState (nVirtKey=5) returned 0 [0097.093] GetKeyState (nVirtKey=6) returned 0 [0097.093] GetCapture () returned 0x0 [0097.093] SetCapture (hWnd=0x201d0) returned 0x0 [0097.093] GetKeyState (nVirtKey=1) returned -127 [0097.093] GetKeyState (nVirtKey=2) returned 0 [0097.093] GetKeyState (nVirtKey=4) returned 0 [0097.093] GetKeyState (nVirtKey=5) returned 0 [0097.093] GetKeyState (nVirtKey=6) returned 0 [0097.093] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0097.093] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0097.093] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0097.093] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0097.093] TranslateMessage (lpMsg=0x1ef250) returned 0 [0097.093] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0097.093] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0097.093] IsWindowUnicode (hWnd=0x201d0) returned 1 [0097.093] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0097.093] TranslateMessage (lpMsg=0x1ef250) returned 0 [0097.093] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0097.093] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26496c0, cPoints=0x1 | out: lpPoints=0x26496c0) returned 42533703 [0097.093] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0097.093] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0097.093] UpdateWindow (hWnd=0x201d0) returned 1 [0097.093] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0097.094] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0097.094] CreateCompatibleDC (hdc=0x120107ec) returned 0x130107cc [0097.094] SelectObject (hdc=0x130107cc, h=0x490500d1) returned 0x185000f [0097.094] GdipCreateFromHDC (hdc=0x130107cc, graphics=0x1eea5c) returned 0x0 [0097.094] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0097.094] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0097.094] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0097.094] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0097.094] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0097.094] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0097.094] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0097.094] LocalFree (hMem=0x416cb8) returned 0x0 [0097.094] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0097.094] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0097.094] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0097.095] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0097.095] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0097.095] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd5d0dbd) returned 0x0 [0097.095] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0097.095] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0097.095] GetCurrentObject (hdc=0x130107cc, type=0x1) returned 0x1b00017 [0097.095] GetCurrentObject (hdc=0x130107cc, type=0x2) returned 0x1900010 [0097.095] GetCurrentObject (hdc=0x130107cc, type=0x7) returned 0x490500d1 [0097.095] GetCurrentObject (hdc=0x130107cc, type=0x6) returned 0x18a002e [0097.095] SaveDC (hdc=0x130107cc) returned 1 [0097.095] GetNearestColor (hdc=0x130107cc, color=0xf5f5f5) returned 0xf5f5f5 [0097.095] GetNearestColor (hdc=0x130107cc, color=0x515151) returned 0x515151 [0097.095] GetNearestColor (hdc=0x130107cc, color=0x0) returned 0x0 [0097.095] GetNearestColor (hdc=0x130107cc, color=0x515151) returned 0x515151 [0097.095] GetNearestColor (hdc=0x130107cc, color=0x0) returned 0x0 [0097.096] GetNearestColor (hdc=0x130107cc, color=0xfafafa) returned 0xfafafa [0097.096] GetNearestColor (hdc=0x130107cc, color=0xe0e0e0) returned 0xe0e0e0 [0097.096] GetNearestColor (hdc=0x130107cc, color=0xdcdcdc) returned 0xdcdcdc [0097.096] GetNearestColor (hdc=0x130107cc, color=0x0) returned 0x0 [0097.096] RestoreDC (hdc=0x130107cc, nSavedDC=-1) returned 1 [0097.096] GdipReleaseDC (graphics=0x504fbc8, hdc=0x130107cc) returned 0x0 [0097.096] IsAppThemed () returned 0x1 [0097.096] GetThemeAppProperties () returned 0x3 [0097.096] GetThemeAppProperties () returned 0x3 [0097.096] IsAppThemed () returned 0x1 [0097.096] GetThemeAppProperties () returned 0x3 [0097.096] GetThemeAppProperties () returned 0x3 [0097.096] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2649dc4 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0097.096] IsAppThemed () returned 0x1 [0097.096] GetThemeAppProperties () returned 0x3 [0097.096] GetThemeAppProperties () returned 0x3 [0097.096] IsAppThemed () returned 0x1 [0097.096] GetThemeAppProperties () returned 0x3 [0097.096] GetThemeAppProperties () returned 0x3 [0097.096] IsAppThemed () returned 0x1 [0097.097] GetThemeAppProperties () returned 0x3 [0097.097] GetThemeAppProperties () returned 0x3 [0097.097] IsAppThemed () returned 0x1 [0097.097] GetThemeAppProperties () returned 0x3 [0097.097] GetThemeAppProperties () returned 0x3 [0097.097] IsThemePartDefined () returned 0x1 [0097.097] IsAppThemed () returned 0x1 [0097.097] GetThemeAppProperties () returned 0x3 [0097.097] GetThemeAppProperties () returned 0x3 [0097.097] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0097.097] IsAppThemed () returned 0x1 [0097.097] GetThemeAppProperties () returned 0x3 [0097.097] GetThemeAppProperties () returned 0x3 [0097.097] IsAppThemed () returned 0x1 [0097.097] GetThemeAppProperties () returned 0x3 [0097.097] GetThemeAppProperties () returned 0x3 [0097.097] IsThemePartDefined () returned 0x1 [0097.097] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0097.097] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0097.097] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0097.097] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0097.097] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0097.097] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0097.097] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0097.097] LocalFree (hMem=0x416cb8) returned 0x0 [0097.097] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0097.097] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0097.098] LocalFree (hMem=0x416cb8) returned 0x0 [0097.098] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0097.098] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0097.098] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0097.098] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0097.098] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0097.098] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0097.098] GetCurrentObject (hdc=0x130107cc, type=0x1) returned 0x1b00017 [0097.098] GetCurrentObject (hdc=0x130107cc, type=0x2) returned 0x1900010 [0097.098] GetCurrentObject (hdc=0x130107cc, type=0x7) returned 0x490500d1 [0097.098] GetCurrentObject (hdc=0x130107cc, type=0x6) returned 0x18a002e [0097.098] SaveDC (hdc=0x130107cc) returned 1 [0097.098] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc0040813 [0097.098] GetClipRgn (hdc=0x130107cc, hrgn=0xc0040813) returned 0 [0097.098] SelectClipRgn (hdc=0x130107cc, hrgn=0xa4040246) returned 2 [0097.099] DeleteObject (ho=0xc0040813) returned 1 [0097.099] DeleteObject (ho=0xa4040246) returned 1 [0097.099] OffsetViewportOrgEx (in: hdc=0x130107cc, x=0, y=0, lppt=0x264a474 | out: lppt=0x264a474) returned 1 [0097.099] DrawThemeParentBackground () returned 0x0 [0097.099] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0097.099] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0097.099] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0097.099] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0097.099] GetSystemMetrics (nIndex=42) returned 0 [0097.099] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0097.099] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0097.099] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0097.099] GetCurrentObject (hdc=0x130107cc, type=0x1) returned 0x1b00017 [0097.099] GetCurrentObject (hdc=0x130107cc, type=0x2) returned 0x1900010 [0097.099] GetCurrentObject (hdc=0x130107cc, type=0x7) returned 0x490500d1 [0097.099] GetCurrentObject (hdc=0x130107cc, type=0x6) returned 0x18a002e [0097.099] SaveDC (hdc=0x130107cc) returned 2 [0097.099] GetNearestColor (hdc=0x130107cc, color=0xf5f5f5) returned 0xf5f5f5 [0097.100] CreateSolidBrush (color=0xf5f5f5) returned 0x60100244 [0097.100] FillRect (hDC=0x130107cc, lprc=0x1ee2d0, hbr=0x60100244) returned 1 [0097.100] DeleteObject (ho=0x60100244) returned 1 [0097.100] RestoreDC (hdc=0x130107cc, nSavedDC=-1) returned 1 [0097.100] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0097.100] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0097.100] GetSystemMetrics (nIndex=42) returned 0 [0097.100] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0097.100] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0097.100] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0097.100] GetCurrentObject (hdc=0x130107cc, type=0x1) returned 0x1b00017 [0097.100] GetCurrentObject (hdc=0x130107cc, type=0x2) returned 0x1900010 [0097.100] GetCurrentObject (hdc=0x130107cc, type=0x7) returned 0x490500d1 [0097.100] GetCurrentObject (hdc=0x130107cc, type=0x6) returned 0x18a002e [0097.100] SaveDC (hdc=0x130107cc) returned 2 [0097.101] GetNearestColor (hdc=0x130107cc, color=0xf5f5f5) returned 0xf5f5f5 [0097.101] CreateSolidBrush (color=0xf5f5f5) returned 0x61100244 [0097.101] FillRect (hDC=0x130107cc, lprc=0x1ee270, hbr=0x61100244) returned 1 [0097.101] DeleteObject (ho=0x61100244) returned 1 [0097.101] RestoreDC (hdc=0x130107cc, nSavedDC=-1) returned 1 [0097.101] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0097.101] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0097.101] GetSystemMetrics (nIndex=42) returned 0 [0097.101] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0097.101] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0097.101] RestoreDC (hdc=0x130107cc, nSavedDC=-1) returned 1 [0097.101] GdipReleaseDC (graphics=0x504fbc8, hdc=0x130107cc) returned 0x0 [0097.101] IsAppThemed () returned 0x1 [0097.101] GetThemeAppProperties () returned 0x3 [0097.101] GetThemeAppProperties () returned 0x3 [0097.101] IsAppThemed () returned 0x1 [0097.101] GetThemeAppProperties () returned 0x3 [0097.101] GetThemeAppProperties () returned 0x3 [0097.101] IsThemePartDefined () returned 0x1 [0097.101] GdipCreateRegion (region=0x1ee764) returned 0x0 [0097.102] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0097.102] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0097.102] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0097.102] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0097.102] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0097.102] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0097.102] LocalFree (hMem=0x416cb8) returned 0x0 [0097.102] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0097.102] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0097.102] LocalFree (hMem=0x416cb8) returned 0x0 [0097.102] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0097.102] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0097.102] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0097.102] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0097.102] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0097.102] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0097.102] GetCurrentObject (hdc=0x130107cc, type=0x1) returned 0x1b00017 [0097.102] GetCurrentObject (hdc=0x130107cc, type=0x2) returned 0x1900010 [0097.103] GetCurrentObject (hdc=0x130107cc, type=0x7) returned 0x490500d1 [0097.103] GetCurrentObject (hdc=0x130107cc, type=0x6) returned 0x18a002e [0097.103] SaveDC (hdc=0x130107cc) returned 1 [0097.103] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa5040246 [0097.103] GetClipRgn (hdc=0x130107cc, hrgn=0xa5040246) returned 0 [0097.103] SelectClipRgn (hdc=0x130107cc, hrgn=0xc2040813) returned 2 [0097.103] DeleteObject (ho=0xa5040246) returned 1 [0097.103] DeleteObject (ho=0xc2040813) returned 1 [0097.103] OffsetViewportOrgEx (in: hdc=0x130107cc, x=0, y=0, lppt=0x264acb4 | out: lppt=0x264acb4) returned 1 [0097.103] IsAppThemed () returned 0x1 [0097.103] GetThemeAppProperties () returned 0x3 [0097.103] GetThemeAppProperties () returned 0x3 [0097.103] DrawThemeBackground () returned 0x0 [0097.103] RestoreDC (hdc=0x130107cc, nSavedDC=-1) returned 1 [0097.103] GdipReleaseDC (graphics=0x504fbc8, hdc=0x130107cc) returned 0x0 [0097.103] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0097.103] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0097.103] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0097.104] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0097.104] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0097.104] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0097.104] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0097.104] LocalFree (hMem=0x416cb8) returned 0x0 [0097.104] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0097.104] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0097.104] LocalFree (hMem=0x416cb8) returned 0x0 [0097.104] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0097.104] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0097.104] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0097.104] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0097.104] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0097.104] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0097.104] GetCurrentObject (hdc=0x130107cc, type=0x1) returned 0x1b00017 [0097.104] GetCurrentObject (hdc=0x130107cc, type=0x2) returned 0x1900010 [0097.104] GetCurrentObject (hdc=0x130107cc, type=0x7) returned 0x490500d1 [0097.104] GetCurrentObject (hdc=0x130107cc, type=0x6) returned 0x18a002e [0097.104] SaveDC (hdc=0x130107cc) returned 1 [0097.105] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc3040813 [0097.105] GetClipRgn (hdc=0x130107cc, hrgn=0xc3040813) returned 0 [0097.105] SelectClipRgn (hdc=0x130107cc, hrgn=0xa6040246) returned 2 [0097.105] DeleteObject (ho=0xc3040813) returned 1 [0097.105] DeleteObject (ho=0xa6040246) returned 1 [0097.105] OffsetViewportOrgEx (in: hdc=0x130107cc, x=0, y=0, lppt=0x264af88 | out: lppt=0x264af88) returned 1 [0097.105] IsAppThemed () returned 0x1 [0097.105] GetThemeAppProperties () returned 0x3 [0097.105] GetThemeAppProperties () returned 0x3 [0097.105] GetThemeBackgroundContentRect () returned 0x0 [0097.105] RestoreDC (hdc=0x130107cc, nSavedDC=-1) returned 1 [0097.105] GdipReleaseDC (graphics=0x504fbc8, hdc=0x130107cc) returned 0x0 [0097.105] IsAppThemed () returned 0x1 [0097.105] GetThemeAppProperties () returned 0x3 [0097.105] GetThemeAppProperties () returned 0x3 [0097.105] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0097.105] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0097.105] GetCurrentObject (hdc=0x130107cc, type=0x1) returned 0x1b00017 [0097.105] GetCurrentObject (hdc=0x130107cc, type=0x2) returned 0x1900010 [0097.105] GetCurrentObject (hdc=0x130107cc, type=0x7) returned 0x490500d1 [0097.106] GetCurrentObject (hdc=0x130107cc, type=0x6) returned 0x18a002e [0097.106] SaveDC (hdc=0x130107cc) returned 1 [0097.106] GetTextAlign (hdc=0x130107cc) returned 0x0 [0097.106] GetTextColor (hdc=0x130107cc) returned 0x0 [0097.106] GetCurrentObject (hdc=0x130107cc, type=0x6) returned 0x18a002e [0097.106] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0097.106] SelectObject (hdc=0x130107cc, h=0x220a081a) returned 0x18a002e [0097.106] GetBkMode (hdc=0x130107cc) returned 2 [0097.106] SetBkMode (hdc=0x130107cc, mode=1) returned 2 [0097.106] DrawTextExW (in: hdc=0x130107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x264b31c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0097.106] DrawTextExW (in: hdc=0x130107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x264b31c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0097.106] RestoreDC (hdc=0x130107cc, nSavedDC=-1) returned 1 [0097.107] GdipReleaseDC (graphics=0x504fbc8, hdc=0x130107cc) returned 0x0 [0097.107] GetFocus () returned 0x201d0 [0097.107] IsAppThemed () returned 0x1 [0097.107] GetThemeAppProperties () returned 0x3 [0097.107] GetThemeAppProperties () returned 0x3 [0097.107] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0097.107] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x130107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0097.107] GdipReleaseDC (graphics=0x504fbc8, hdc=0x130107cc) returned 0x0 [0097.107] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0097.107] SelectObject (hdc=0x130107cc, h=0x185000f) returned 0x490500d1 [0097.107] DeleteDC (hdc=0x130107cc) returned 1 [0097.107] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0097.107] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0097.107] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x264b418, cPoints=0x1 | out: lpPoints=0x264b418) returned 42533703 [0097.107] WindowFromPoint (Point=0x3d8) returned 0x201d0 [0097.107] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d8) returned 0x1 [0097.108] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0097.108] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0097.108] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0097.108] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0097.108] GetSystemMetrics (nIndex=42) returned 0 [0097.108] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0097.108] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0097.108] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0097.108] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0097.108] GetCapture () returned 0x201d0 [0097.108] ReleaseCapture () returned 1 [0097.108] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0097.108] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0097.108] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d8) returned 0x1 [0097.108] IsWindowUnicode (hWnd=0x201d0) returned 1 [0097.108] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0097.108] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d8) returned 0x1 [0097.108] SetCursor (hCursor=0x10003) returned 0x10003 [0097.109] TranslateMessage (lpMsg=0x1ef250) returned 0 [0097.109] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0097.109] GetKeyState (nVirtKey=1) returned 1 [0097.109] GetKeyState (nVirtKey=2) returned 0 [0097.109] GetKeyState (nVirtKey=4) returned 0 [0097.109] GetKeyState (nVirtKey=5) returned 0 [0097.109] GetKeyState (nVirtKey=6) returned 0 [0097.109] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0097.109] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0097.109] WaitMessage () returned 1 [0100.096] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0100.096] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0388) returned 0x1 [0100.097] IsWindowUnicode (hWnd=0x201d0) returned 1 [0100.097] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0100.097] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0388) returned 0x1 [0100.097] SetCursor (hCursor=0x10003) returned 0x10003 [0100.097] TranslateMessage (lpMsg=0x1ef250) returned 0 [0100.097] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0100.097] GetKeyState (nVirtKey=1) returned 1 [0100.097] GetKeyState (nVirtKey=2) returned 0 [0100.097] GetKeyState (nVirtKey=4) returned 0 [0100.097] GetKeyState (nVirtKey=5) returned 0 [0100.097] GetKeyState (nVirtKey=6) returned 0 [0100.097] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0100.097] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0100.097] WaitMessage () returned 1 [0100.158] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0100.158] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0388) returned 0x1 [0100.158] IsWindowUnicode (hWnd=0x201d0) returned 1 [0100.158] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0100.158] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0388) returned 0x1 [0100.158] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0100.158] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dc0243) returned 0x0 [0100.159] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0100.159] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0100.159] SetCursor (hCursor=0x10003) returned 0x10003 [0100.159] TranslateMessage (lpMsg=0x1ef250) returned 0 [0100.159] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0100.159] GetKeyState (nVirtKey=1) returned -128 [0100.159] GetKeyState (nVirtKey=2) returned 0 [0100.159] GetKeyState (nVirtKey=4) returned 0 [0100.159] GetKeyState (nVirtKey=5) returned 0 [0100.159] GetKeyState (nVirtKey=6) returned 0 [0100.159] IsWindowVisible (hWnd=0x201d0) returned 1 [0100.159] IsWindowEnabled (hWnd=0x201d0) returned 1 [0100.159] SetFocus (hWnd=0x201d0) returned 0x201d0 [0100.159] GetFocus () returned 0x201d0 [0100.159] GetFocus () returned 0x201d0 [0100.159] GetFocus () returned 0x201d0 [0100.159] GetKeyState (nVirtKey=1) returned -128 [0100.159] GetKeyState (nVirtKey=2) returned 0 [0100.159] GetKeyState (nVirtKey=4) returned 0 [0100.159] GetKeyState (nVirtKey=5) returned 0 [0100.159] GetKeyState (nVirtKey=6) returned 0 [0100.159] GetCapture () returned 0x0 [0100.159] SetCapture (hWnd=0x201d0) returned 0x0 [0100.159] GetKeyState (nVirtKey=1) returned -128 [0100.159] GetKeyState (nVirtKey=2) returned 0 [0100.159] GetKeyState (nVirtKey=4) returned 0 [0100.159] GetKeyState (nVirtKey=5) returned 0 [0100.160] GetKeyState (nVirtKey=6) returned 0 [0100.160] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0100.160] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0100.160] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0100.160] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0100.160] TranslateMessage (lpMsg=0x1ef250) returned 0 [0100.160] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0100.160] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0100.160] IsWindowUnicode (hWnd=0x201d0) returned 1 [0100.160] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0100.160] TranslateMessage (lpMsg=0x1ef250) returned 0 [0100.160] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0100.160] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x264b53c, cPoints=0x1 | out: lpPoints=0x264b53c) returned 42533703 [0100.160] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0100.160] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0100.160] UpdateWindow (hWnd=0x201d0) returned 1 [0100.160] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0100.161] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0100.161] CreateCompatibleDC (hdc=0x120107ec) returned 0x140107cc [0100.161] SelectObject (hdc=0x140107cc, h=0x490500d1) returned 0x185000f [0100.161] GdipCreateFromHDC (hdc=0x140107cc, graphics=0x1eea5c) returned 0x0 [0100.161] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0100.161] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0100.161] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0100.161] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0100.161] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0100.161] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0100.161] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0100.162] LocalFree (hMem=0x416cb8) returned 0x0 [0100.162] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0100.162] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0100.162] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0100.162] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0100.162] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0100.162] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd5b0dbd) returned 0x0 [0100.162] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0100.162] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0100.162] GetCurrentObject (hdc=0x140107cc, type=0x1) returned 0x1b00017 [0100.162] GetCurrentObject (hdc=0x140107cc, type=0x2) returned 0x1900010 [0100.162] GetCurrentObject (hdc=0x140107cc, type=0x7) returned 0x490500d1 [0100.162] GetCurrentObject (hdc=0x140107cc, type=0x6) returned 0x18a002e [0100.162] SaveDC (hdc=0x140107cc) returned 1 [0100.162] GetNearestColor (hdc=0x140107cc, color=0xf5f5f5) returned 0xf5f5f5 [0100.162] GetNearestColor (hdc=0x140107cc, color=0x515151) returned 0x515151 [0100.162] GetNearestColor (hdc=0x140107cc, color=0x0) returned 0x0 [0100.162] GetNearestColor (hdc=0x140107cc, color=0x515151) returned 0x515151 [0100.162] GetNearestColor (hdc=0x140107cc, color=0x0) returned 0x0 [0100.163] GetNearestColor (hdc=0x140107cc, color=0xfafafa) returned 0xfafafa [0100.163] GetNearestColor (hdc=0x140107cc, color=0xe0e0e0) returned 0xe0e0e0 [0100.163] GetNearestColor (hdc=0x140107cc, color=0xdcdcdc) returned 0xdcdcdc [0100.163] GetNearestColor (hdc=0x140107cc, color=0x0) returned 0x0 [0100.163] RestoreDC (hdc=0x140107cc, nSavedDC=-1) returned 1 [0100.163] GdipReleaseDC (graphics=0x504fbc8, hdc=0x140107cc) returned 0x0 [0100.163] IsAppThemed () returned 0x1 [0100.163] GetThemeAppProperties () returned 0x3 [0100.163] GetThemeAppProperties () returned 0x3 [0100.163] IsAppThemed () returned 0x1 [0100.163] GetThemeAppProperties () returned 0x3 [0100.163] GetThemeAppProperties () returned 0x3 [0100.163] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x264bc40 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0100.163] IsAppThemed () returned 0x1 [0100.163] GetThemeAppProperties () returned 0x3 [0100.163] GetThemeAppProperties () returned 0x3 [0100.163] IsAppThemed () returned 0x1 [0100.163] GetThemeAppProperties () returned 0x3 [0100.163] GetThemeAppProperties () returned 0x3 [0100.164] IsAppThemed () returned 0x1 [0100.164] GetThemeAppProperties () returned 0x3 [0100.164] GetThemeAppProperties () returned 0x3 [0100.164] IsAppThemed () returned 0x1 [0100.164] GetThemeAppProperties () returned 0x3 [0100.164] GetThemeAppProperties () returned 0x3 [0100.164] IsThemePartDefined () returned 0x1 [0100.164] IsAppThemed () returned 0x1 [0100.164] GetThemeAppProperties () returned 0x3 [0100.164] GetThemeAppProperties () returned 0x3 [0100.164] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0100.164] IsAppThemed () returned 0x1 [0100.164] GetThemeAppProperties () returned 0x3 [0100.164] GetThemeAppProperties () returned 0x3 [0100.164] IsAppThemed () returned 0x1 [0100.164] GetThemeAppProperties () returned 0x3 [0100.164] GetThemeAppProperties () returned 0x3 [0100.164] IsThemePartDefined () returned 0x1 [0100.164] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0100.164] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0100.164] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0100.164] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0100.164] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0100.164] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0100.164] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0100.164] LocalFree (hMem=0x416cb8) returned 0x0 [0100.164] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0100.164] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0100.164] LocalFree (hMem=0x416cb8) returned 0x0 [0100.164] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0100.164] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0100.165] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0100.165] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0100.165] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0100.165] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0100.165] GetCurrentObject (hdc=0x140107cc, type=0x1) returned 0x1b00017 [0100.165] GetCurrentObject (hdc=0x140107cc, type=0x2) returned 0x1900010 [0100.165] GetCurrentObject (hdc=0x140107cc, type=0x7) returned 0x490500d1 [0100.165] GetCurrentObject (hdc=0x140107cc, type=0x6) returned 0x18a002e [0100.165] SaveDC (hdc=0x140107cc) returned 1 [0100.165] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa7040246 [0100.165] GetClipRgn (hdc=0x140107cc, hrgn=0xa7040246) returned 0 [0100.165] SelectClipRgn (hdc=0x140107cc, hrgn=0xc7040813) returned 2 [0100.165] DeleteObject (ho=0xa7040246) returned 1 [0100.165] DeleteObject (ho=0xc7040813) returned 1 [0100.165] OffsetViewportOrgEx (in: hdc=0x140107cc, x=0, y=0, lppt=0x264c2f0 | out: lppt=0x264c2f0) returned 1 [0100.165] DrawThemeParentBackground () returned 0x0 [0100.165] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0100.165] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0100.165] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0100.165] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0100.166] GetSystemMetrics (nIndex=42) returned 0 [0100.166] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0100.166] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0100.166] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0100.166] GetCurrentObject (hdc=0x140107cc, type=0x1) returned 0x1b00017 [0100.166] GetCurrentObject (hdc=0x140107cc, type=0x2) returned 0x1900010 [0100.166] GetCurrentObject (hdc=0x140107cc, type=0x7) returned 0x490500d1 [0100.166] GetCurrentObject (hdc=0x140107cc, type=0x6) returned 0x18a002e [0100.166] SaveDC (hdc=0x140107cc) returned 2 [0100.166] GetNearestColor (hdc=0x140107cc, color=0xf5f5f5) returned 0xf5f5f5 [0100.166] CreateSolidBrush (color=0xf5f5f5) returned 0x62100244 [0100.166] FillRect (hDC=0x140107cc, lprc=0x1ee2d0, hbr=0x62100244) returned 1 [0100.166] DeleteObject (ho=0x62100244) returned 1 [0100.166] RestoreDC (hdc=0x140107cc, nSavedDC=-1) returned 1 [0100.166] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0100.166] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0100.167] GetSystemMetrics (nIndex=42) returned 0 [0100.167] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0100.167] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0100.167] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0100.167] GetCurrentObject (hdc=0x140107cc, type=0x1) returned 0x1b00017 [0100.167] GetCurrentObject (hdc=0x140107cc, type=0x2) returned 0x1900010 [0100.167] GetCurrentObject (hdc=0x140107cc, type=0x7) returned 0x490500d1 [0100.167] GetCurrentObject (hdc=0x140107cc, type=0x6) returned 0x18a002e [0100.167] SaveDC (hdc=0x140107cc) returned 2 [0100.167] GetNearestColor (hdc=0x140107cc, color=0xf5f5f5) returned 0xf5f5f5 [0100.167] CreateSolidBrush (color=0xf5f5f5) returned 0x63100244 [0100.167] FillRect (hDC=0x140107cc, lprc=0x1ee270, hbr=0x63100244) returned 1 [0100.167] DeleteObject (ho=0x63100244) returned 1 [0100.167] RestoreDC (hdc=0x140107cc, nSavedDC=-1) returned 1 [0100.167] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0100.167] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0100.167] GetSystemMetrics (nIndex=42) returned 0 [0100.167] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0100.167] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0100.167] RestoreDC (hdc=0x140107cc, nSavedDC=-1) returned 1 [0100.167] GdipReleaseDC (graphics=0x504fbc8, hdc=0x140107cc) returned 0x0 [0100.167] IsAppThemed () returned 0x1 [0100.168] GetThemeAppProperties () returned 0x3 [0100.168] GetThemeAppProperties () returned 0x3 [0100.168] IsAppThemed () returned 0x1 [0100.168] GetThemeAppProperties () returned 0x3 [0100.168] GetThemeAppProperties () returned 0x3 [0100.168] IsThemePartDefined () returned 0x1 [0100.168] GdipCreateRegion (region=0x1ee764) returned 0x0 [0100.168] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0100.168] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0100.168] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0100.168] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0100.168] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0100.168] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0100.168] LocalFree (hMem=0x416cb8) returned 0x0 [0100.168] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0100.168] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0100.168] LocalFree (hMem=0x416cb8) returned 0x0 [0100.168] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0100.168] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0100.168] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0100.168] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0100.168] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0100.168] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0100.168] GetCurrentObject (hdc=0x140107cc, type=0x1) returned 0x1b00017 [0100.168] GetCurrentObject (hdc=0x140107cc, type=0x2) returned 0x1900010 [0100.168] GetCurrentObject (hdc=0x140107cc, type=0x7) returned 0x490500d1 [0100.168] GetCurrentObject (hdc=0x140107cc, type=0x6) returned 0x18a002e [0100.169] SaveDC (hdc=0x140107cc) returned 1 [0100.169] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc8040813 [0100.169] GetClipRgn (hdc=0x140107cc, hrgn=0xc8040813) returned 0 [0100.169] SelectClipRgn (hdc=0x140107cc, hrgn=0xa9040246) returned 2 [0100.169] DeleteObject (ho=0xc8040813) returned 1 [0100.169] DeleteObject (ho=0xa9040246) returned 1 [0100.169] OffsetViewportOrgEx (in: hdc=0x140107cc, x=0, y=0, lppt=0x264cb30 | out: lppt=0x264cb30) returned 1 [0100.169] IsAppThemed () returned 0x1 [0100.169] GetThemeAppProperties () returned 0x3 [0100.169] GetThemeAppProperties () returned 0x3 [0100.169] DrawThemeBackground () returned 0x0 [0100.169] RestoreDC (hdc=0x140107cc, nSavedDC=-1) returned 1 [0100.169] GdipReleaseDC (graphics=0x504fbc8, hdc=0x140107cc) returned 0x0 [0100.169] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0100.169] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0100.169] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0100.169] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0100.169] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0100.169] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0100.169] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0100.170] LocalFree (hMem=0x416cb8) returned 0x0 [0100.170] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0100.170] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0100.170] LocalFree (hMem=0x416cb8) returned 0x0 [0100.170] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0100.170] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0100.170] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0100.170] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0100.170] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0100.170] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0100.170] GetCurrentObject (hdc=0x140107cc, type=0x1) returned 0x1b00017 [0100.170] GetCurrentObject (hdc=0x140107cc, type=0x2) returned 0x1900010 [0100.170] GetCurrentObject (hdc=0x140107cc, type=0x7) returned 0x490500d1 [0100.170] GetCurrentObject (hdc=0x140107cc, type=0x6) returned 0x18a002e [0100.170] SaveDC (hdc=0x140107cc) returned 1 [0100.170] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaa040246 [0100.170] GetClipRgn (hdc=0x140107cc, hrgn=0xaa040246) returned 0 [0100.170] SelectClipRgn (hdc=0x140107cc, hrgn=0xc9040813) returned 2 [0100.170] DeleteObject (ho=0xaa040246) returned 1 [0100.170] DeleteObject (ho=0xc9040813) returned 1 [0100.170] OffsetViewportOrgEx (in: hdc=0x140107cc, x=0, y=0, lppt=0x264ce04 | out: lppt=0x264ce04) returned 1 [0100.170] IsAppThemed () returned 0x1 [0100.170] GetThemeAppProperties () returned 0x3 [0100.171] GetThemeAppProperties () returned 0x3 [0100.171] GetThemeBackgroundContentRect () returned 0x0 [0100.171] RestoreDC (hdc=0x140107cc, nSavedDC=-1) returned 1 [0100.171] GdipReleaseDC (graphics=0x504fbc8, hdc=0x140107cc) returned 0x0 [0100.171] IsAppThemed () returned 0x1 [0100.171] GetThemeAppProperties () returned 0x3 [0100.171] GetThemeAppProperties () returned 0x3 [0100.171] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0100.171] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0100.171] GetCurrentObject (hdc=0x140107cc, type=0x1) returned 0x1b00017 [0100.171] GetCurrentObject (hdc=0x140107cc, type=0x2) returned 0x1900010 [0100.171] GetCurrentObject (hdc=0x140107cc, type=0x7) returned 0x490500d1 [0100.171] GetCurrentObject (hdc=0x140107cc, type=0x6) returned 0x18a002e [0100.171] SaveDC (hdc=0x140107cc) returned 1 [0100.171] GetTextAlign (hdc=0x140107cc) returned 0x0 [0100.171] GetTextColor (hdc=0x140107cc) returned 0x0 [0100.171] GetCurrentObject (hdc=0x140107cc, type=0x6) returned 0x18a002e [0100.171] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0100.171] SelectObject (hdc=0x140107cc, h=0x220a081a) returned 0x18a002e [0100.171] GetBkMode (hdc=0x140107cc) returned 2 [0100.171] SetBkMode (hdc=0x140107cc, mode=1) returned 2 [0100.172] DrawTextExW (in: hdc=0x140107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x264d198 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0100.172] DrawTextExW (in: hdc=0x140107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x264d198 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0100.172] RestoreDC (hdc=0x140107cc, nSavedDC=-1) returned 1 [0100.172] GdipReleaseDC (graphics=0x504fbc8, hdc=0x140107cc) returned 0x0 [0100.172] GetFocus () returned 0x201d0 [0100.172] IsAppThemed () returned 0x1 [0100.172] GetThemeAppProperties () returned 0x3 [0100.172] GetThemeAppProperties () returned 0x3 [0100.172] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0100.172] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x140107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0100.173] GdipReleaseDC (graphics=0x504fbc8, hdc=0x140107cc) returned 0x0 [0100.173] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0100.173] SelectObject (hdc=0x140107cc, h=0x185000f) returned 0x490500d1 [0100.173] DeleteDC (hdc=0x140107cc) returned 1 [0100.173] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0100.173] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0100.173] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x264d294, cPoints=0x1 | out: lpPoints=0x264d294) returned 42533703 [0100.173] WindowFromPoint (Point=0x388) returned 0x201d0 [0100.173] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0388) returned 0x1 [0100.173] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0100.173] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0100.173] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0100.174] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0100.174] GetSystemMetrics (nIndex=42) returned 0 [0100.174] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0100.174] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0100.174] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0100.174] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0100.174] GetCapture () returned 0x201d0 [0100.174] ReleaseCapture () returned 1 [0100.174] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0100.174] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0100.174] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0388) returned 0x1 [0100.174] IsWindowUnicode (hWnd=0x201d0) returned 1 [0100.174] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0100.174] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0388) returned 0x1 [0100.174] SetCursor (hCursor=0x10003) returned 0x10003 [0100.174] TranslateMessage (lpMsg=0x1ef250) returned 0 [0100.174] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0100.174] GetKeyState (nVirtKey=1) returned 0 [0100.174] GetKeyState (nVirtKey=2) returned 0 [0100.174] GetKeyState (nVirtKey=4) returned 0 [0100.174] GetKeyState (nVirtKey=5) returned 0 [0100.174] GetKeyState (nVirtKey=6) returned 0 [0100.174] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0100.174] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0100.174] WaitMessage () returned 1 [0103.107] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0103.108] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403d1) returned 0x1 [0103.108] IsWindowUnicode (hWnd=0x201d0) returned 1 [0103.109] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0103.109] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403d1) returned 0x1 [0103.109] SetCursor (hCursor=0x10003) returned 0x10003 [0103.109] TranslateMessage (lpMsg=0x1ef250) returned 0 [0103.109] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0103.109] GetKeyState (nVirtKey=1) returned 0 [0103.109] GetKeyState (nVirtKey=2) returned 0 [0103.109] GetKeyState (nVirtKey=4) returned 0 [0103.109] GetKeyState (nVirtKey=5) returned 0 [0103.109] GetKeyState (nVirtKey=6) returned 0 [0103.110] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0103.110] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0103.110] WaitMessage () returned 1 [0103.177] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0103.177] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403d1) returned 0x1 [0103.177] IsWindowUnicode (hWnd=0x201d0) returned 1 [0103.177] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0103.177] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403d1) returned 0x1 [0103.178] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0103.178] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e3028c) returned 0x0 [0103.178] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0103.178] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0103.179] SetCursor (hCursor=0x10003) returned 0x10003 [0103.179] TranslateMessage (lpMsg=0x1ef250) returned 0 [0103.179] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0103.179] GetKeyState (nVirtKey=1) returned -127 [0103.179] GetKeyState (nVirtKey=2) returned 0 [0103.179] GetKeyState (nVirtKey=4) returned 0 [0103.179] GetKeyState (nVirtKey=5) returned 0 [0103.179] GetKeyState (nVirtKey=6) returned 0 [0103.179] IsWindowVisible (hWnd=0x201d0) returned 1 [0103.179] IsWindowEnabled (hWnd=0x201d0) returned 1 [0103.179] SetFocus (hWnd=0x201d0) returned 0x201d0 [0103.179] GetFocus () returned 0x201d0 [0103.179] GetFocus () returned 0x201d0 [0103.179] GetFocus () returned 0x201d0 [0103.179] GetKeyState (nVirtKey=1) returned -127 [0103.179] GetKeyState (nVirtKey=2) returned 0 [0103.179] GetKeyState (nVirtKey=4) returned 0 [0103.179] GetKeyState (nVirtKey=5) returned 0 [0103.180] GetKeyState (nVirtKey=6) returned 0 [0103.180] GetCapture () returned 0x0 [0103.180] SetCapture (hWnd=0x201d0) returned 0x0 [0103.180] GetKeyState (nVirtKey=1) returned -127 [0103.180] GetKeyState (nVirtKey=2) returned 0 [0103.180] GetKeyState (nVirtKey=4) returned 0 [0103.180] GetKeyState (nVirtKey=5) returned 0 [0103.180] GetKeyState (nVirtKey=6) returned 0 [0103.180] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0103.180] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0103.180] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0103.180] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0103.180] TranslateMessage (lpMsg=0x1ef250) returned 0 [0103.180] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0103.180] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0103.180] IsWindowUnicode (hWnd=0x201d0) returned 1 [0103.180] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0103.180] TranslateMessage (lpMsg=0x1ef250) returned 0 [0103.180] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0103.180] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x264d3b8, cPoints=0x1 | out: lpPoints=0x264d3b8) returned 42533703 [0103.180] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0103.181] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0103.181] UpdateWindow (hWnd=0x201d0) returned 1 [0103.181] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0103.181] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0103.181] CreateCompatibleDC (hdc=0x120107ec) returned 0x150107cc [0103.181] SelectObject (hdc=0x150107cc, h=0x490500d1) returned 0x185000f [0103.181] GdipCreateFromHDC (hdc=0x150107cc, graphics=0x1eea5c) returned 0x0 [0103.182] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0103.182] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0103.182] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0103.182] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0103.182] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0103.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0103.183] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0103.183] LocalFree (hMem=0x416cb8) returned 0x0 [0103.183] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0103.183] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0103.183] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0103.183] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0103.183] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0103.183] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd590dbd) returned 0x0 [0103.183] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0103.183] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0103.184] GetCurrentObject (hdc=0x150107cc, type=0x1) returned 0x1b00017 [0103.184] GetCurrentObject (hdc=0x150107cc, type=0x2) returned 0x1900010 [0103.184] GetCurrentObject (hdc=0x150107cc, type=0x7) returned 0x490500d1 [0103.184] GetCurrentObject (hdc=0x150107cc, type=0x6) returned 0x18a002e [0103.184] SaveDC (hdc=0x150107cc) returned 1 [0103.184] GetNearestColor (hdc=0x150107cc, color=0xf5f5f5) returned 0xf5f5f5 [0103.184] GetNearestColor (hdc=0x150107cc, color=0x515151) returned 0x515151 [0103.184] GetNearestColor (hdc=0x150107cc, color=0x0) returned 0x0 [0103.184] GetNearestColor (hdc=0x150107cc, color=0x515151) returned 0x515151 [0103.184] GetNearestColor (hdc=0x150107cc, color=0x0) returned 0x0 [0103.184] GetNearestColor (hdc=0x150107cc, color=0xfafafa) returned 0xfafafa [0103.184] GetNearestColor (hdc=0x150107cc, color=0xe0e0e0) returned 0xe0e0e0 [0103.184] GetNearestColor (hdc=0x150107cc, color=0xdcdcdc) returned 0xdcdcdc [0103.184] GetNearestColor (hdc=0x150107cc, color=0x0) returned 0x0 [0103.185] RestoreDC (hdc=0x150107cc, nSavedDC=-1) returned 1 [0103.185] GdipReleaseDC (graphics=0x504fbc8, hdc=0x150107cc) returned 0x0 [0103.185] IsAppThemed () returned 0x1 [0103.185] GetThemeAppProperties () returned 0x3 [0103.185] GetThemeAppProperties () returned 0x3 [0103.185] IsAppThemed () returned 0x1 [0103.185] GetThemeAppProperties () returned 0x3 [0103.185] GetThemeAppProperties () returned 0x3 [0103.185] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x264dabc | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0103.185] IsAppThemed () returned 0x1 [0103.185] GetThemeAppProperties () returned 0x3 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] IsAppThemed () returned 0x1 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] IsAppThemed () returned 0x1 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] IsAppThemed () returned 0x1 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] IsThemePartDefined () returned 0x1 [0103.186] IsAppThemed () returned 0x1 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0103.186] IsAppThemed () returned 0x1 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] IsAppThemed () returned 0x1 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] GetThemeAppProperties () returned 0x3 [0103.186] IsThemePartDefined () returned 0x1 [0103.186] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0103.186] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0103.186] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0103.186] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0103.186] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0103.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0103.186] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0103.186] LocalFree (hMem=0x416cb8) returned 0x0 [0103.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0103.187] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0103.187] LocalFree (hMem=0x416cb8) returned 0x0 [0103.187] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0103.187] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0103.187] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0103.187] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0103.187] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0103.187] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0103.187] GetCurrentObject (hdc=0x150107cc, type=0x1) returned 0x1b00017 [0103.187] GetCurrentObject (hdc=0x150107cc, type=0x2) returned 0x1900010 [0103.187] GetCurrentObject (hdc=0x150107cc, type=0x7) returned 0x490500d1 [0103.187] GetCurrentObject (hdc=0x150107cc, type=0x6) returned 0x18a002e [0103.187] SaveDC (hdc=0x150107cc) returned 1 [0103.187] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xca040813 [0103.187] GetClipRgn (hdc=0x150107cc, hrgn=0xca040813) returned 0 [0103.187] SelectClipRgn (hdc=0x150107cc, hrgn=0xae040246) returned 2 [0103.187] DeleteObject (ho=0xca040813) returned 1 [0103.187] DeleteObject (ho=0xae040246) returned 1 [0103.187] OffsetViewportOrgEx (in: hdc=0x150107cc, x=0, y=0, lppt=0x264e16c | out: lppt=0x264e16c) returned 1 [0103.188] DrawThemeParentBackground () returned 0x0 [0103.188] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0103.188] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0103.188] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0103.188] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0103.188] GetSystemMetrics (nIndex=42) returned 0 [0103.188] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0103.188] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0103.188] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0103.188] GetCurrentObject (hdc=0x150107cc, type=0x1) returned 0x1b00017 [0103.188] GetCurrentObject (hdc=0x150107cc, type=0x2) returned 0x1900010 [0103.188] GetCurrentObject (hdc=0x150107cc, type=0x7) returned 0x490500d1 [0103.188] GetCurrentObject (hdc=0x150107cc, type=0x6) returned 0x18a002e [0103.188] SaveDC (hdc=0x150107cc) returned 2 [0103.188] GetNearestColor (hdc=0x150107cc, color=0xf5f5f5) returned 0xf5f5f5 [0103.188] CreateSolidBrush (color=0xf5f5f5) returned 0x64100244 [0103.188] FillRect (hDC=0x150107cc, lprc=0x1ee2d0, hbr=0x64100244) returned 1 [0103.188] DeleteObject (ho=0x64100244) returned 1 [0103.189] RestoreDC (hdc=0x150107cc, nSavedDC=-1) returned 1 [0103.189] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0103.189] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0103.189] GetSystemMetrics (nIndex=42) returned 0 [0103.189] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0103.189] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0103.189] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0103.189] GetCurrentObject (hdc=0x150107cc, type=0x1) returned 0x1b00017 [0103.189] GetCurrentObject (hdc=0x150107cc, type=0x2) returned 0x1900010 [0103.189] GetCurrentObject (hdc=0x150107cc, type=0x7) returned 0x490500d1 [0103.189] GetCurrentObject (hdc=0x150107cc, type=0x6) returned 0x18a002e [0103.189] SaveDC (hdc=0x150107cc) returned 2 [0103.189] GetNearestColor (hdc=0x150107cc, color=0xf5f5f5) returned 0xf5f5f5 [0103.189] CreateSolidBrush (color=0xf5f5f5) returned 0x65100244 [0103.189] FillRect (hDC=0x150107cc, lprc=0x1ee270, hbr=0x65100244) returned 1 [0103.189] DeleteObject (ho=0x65100244) returned 1 [0103.189] RestoreDC (hdc=0x150107cc, nSavedDC=-1) returned 1 [0103.189] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0103.189] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0103.189] GetSystemMetrics (nIndex=42) returned 0 [0103.189] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0103.190] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0103.190] RestoreDC (hdc=0x150107cc, nSavedDC=-1) returned 1 [0103.190] GdipReleaseDC (graphics=0x504fbc8, hdc=0x150107cc) returned 0x0 [0103.190] IsAppThemed () returned 0x1 [0103.190] GetThemeAppProperties () returned 0x3 [0103.190] GetThemeAppProperties () returned 0x3 [0103.190] IsAppThemed () returned 0x1 [0103.190] GetThemeAppProperties () returned 0x3 [0103.190] GetThemeAppProperties () returned 0x3 [0103.190] IsThemePartDefined () returned 0x1 [0103.190] GdipCreateRegion (region=0x1ee764) returned 0x0 [0103.190] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0103.190] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0103.190] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0103.190] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0103.190] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0103.190] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0103.190] LocalFree (hMem=0x416cb8) returned 0x0 [0103.190] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0103.190] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0103.190] LocalFree (hMem=0x416cb8) returned 0x0 [0103.190] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0103.190] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0103.190] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0103.190] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0103.191] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0103.191] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0103.191] GetCurrentObject (hdc=0x150107cc, type=0x1) returned 0x1b00017 [0103.191] GetCurrentObject (hdc=0x150107cc, type=0x2) returned 0x1900010 [0103.191] GetCurrentObject (hdc=0x150107cc, type=0x7) returned 0x490500d1 [0103.191] GetCurrentObject (hdc=0x150107cc, type=0x6) returned 0x18a002e [0103.191] SaveDC (hdc=0x150107cc) returned 1 [0103.191] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xaf040246 [0103.191] GetClipRgn (hdc=0x150107cc, hrgn=0xaf040246) returned 0 [0103.191] SelectClipRgn (hdc=0x150107cc, hrgn=0xcc040813) returned 2 [0103.191] DeleteObject (ho=0xaf040246) returned 1 [0103.191] DeleteObject (ho=0xcc040813) returned 1 [0103.191] OffsetViewportOrgEx (in: hdc=0x150107cc, x=0, y=0, lppt=0x264e9ac | out: lppt=0x264e9ac) returned 1 [0103.191] IsAppThemed () returned 0x1 [0103.191] GetThemeAppProperties () returned 0x3 [0103.191] GetThemeAppProperties () returned 0x3 [0103.191] DrawThemeBackground () returned 0x0 [0103.191] RestoreDC (hdc=0x150107cc, nSavedDC=-1) returned 1 [0103.191] GdipReleaseDC (graphics=0x504fbc8, hdc=0x150107cc) returned 0x0 [0103.191] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0103.191] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0103.191] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0103.191] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0103.191] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0103.192] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0103.192] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0103.192] LocalFree (hMem=0x416cb8) returned 0x0 [0103.192] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0103.192] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0103.192] LocalFree (hMem=0x416cb8) returned 0x0 [0103.192] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0103.192] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0103.192] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0103.192] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0103.192] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0103.192] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0103.192] GetCurrentObject (hdc=0x150107cc, type=0x1) returned 0x1b00017 [0103.192] GetCurrentObject (hdc=0x150107cc, type=0x2) returned 0x1900010 [0103.192] GetCurrentObject (hdc=0x150107cc, type=0x7) returned 0x490500d1 [0103.192] GetCurrentObject (hdc=0x150107cc, type=0x6) returned 0x18a002e [0103.192] SaveDC (hdc=0x150107cc) returned 1 [0103.192] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcd040813 [0103.192] GetClipRgn (hdc=0x150107cc, hrgn=0xcd040813) returned 0 [0103.192] SelectClipRgn (hdc=0x150107cc, hrgn=0xb0040246) returned 2 [0103.192] DeleteObject (ho=0xcd040813) returned 1 [0103.192] DeleteObject (ho=0xb0040246) returned 1 [0103.193] OffsetViewportOrgEx (in: hdc=0x150107cc, x=0, y=0, lppt=0x264ec80 | out: lppt=0x264ec80) returned 1 [0103.193] IsAppThemed () returned 0x1 [0103.193] GetThemeAppProperties () returned 0x3 [0103.193] GetThemeAppProperties () returned 0x3 [0103.193] GetThemeBackgroundContentRect () returned 0x0 [0103.193] RestoreDC (hdc=0x150107cc, nSavedDC=-1) returned 1 [0103.193] GdipReleaseDC (graphics=0x504fbc8, hdc=0x150107cc) returned 0x0 [0103.193] IsAppThemed () returned 0x1 [0103.193] GetThemeAppProperties () returned 0x3 [0103.193] GetThemeAppProperties () returned 0x3 [0103.193] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0103.193] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0103.193] GetCurrentObject (hdc=0x150107cc, type=0x1) returned 0x1b00017 [0103.193] GetCurrentObject (hdc=0x150107cc, type=0x2) returned 0x1900010 [0103.193] GetCurrentObject (hdc=0x150107cc, type=0x7) returned 0x490500d1 [0103.193] GetCurrentObject (hdc=0x150107cc, type=0x6) returned 0x18a002e [0103.193] SaveDC (hdc=0x150107cc) returned 1 [0103.193] GetTextAlign (hdc=0x150107cc) returned 0x0 [0103.193] GetTextColor (hdc=0x150107cc) returned 0x0 [0103.193] GetCurrentObject (hdc=0x150107cc, type=0x6) returned 0x18a002e [0103.193] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0103.194] SelectObject (hdc=0x150107cc, h=0x220a081a) returned 0x18a002e [0103.194] GetBkMode (hdc=0x150107cc) returned 2 [0103.194] SetBkMode (hdc=0x150107cc, mode=1) returned 2 [0103.194] DrawTextExW (in: hdc=0x150107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x264f014 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0103.194] DrawTextExW (in: hdc=0x150107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x264f014 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0103.194] RestoreDC (hdc=0x150107cc, nSavedDC=-1) returned 1 [0103.194] GdipReleaseDC (graphics=0x504fbc8, hdc=0x150107cc) returned 0x0 [0103.194] GetFocus () returned 0x201d0 [0103.194] IsAppThemed () returned 0x1 [0103.194] GetThemeAppProperties () returned 0x3 [0103.194] GetThemeAppProperties () returned 0x3 [0103.194] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0103.194] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x150107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0103.194] GdipReleaseDC (graphics=0x504fbc8, hdc=0x150107cc) returned 0x0 [0103.194] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0103.195] SelectObject (hdc=0x150107cc, h=0x185000f) returned 0x490500d1 [0103.195] DeleteDC (hdc=0x150107cc) returned 1 [0103.195] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0103.195] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0103.195] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x264f110, cPoints=0x1 | out: lpPoints=0x264f110) returned 42533703 [0103.195] WindowFromPoint (Point=0x3d1) returned 0x201d0 [0103.195] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403d1) returned 0x1 [0103.195] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0103.195] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0103.195] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0103.195] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0103.195] GetSystemMetrics (nIndex=42) returned 0 [0103.195] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0103.195] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0103.195] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0103.196] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0103.196] GetCapture () returned 0x201d0 [0103.196] ReleaseCapture () returned 1 [0103.196] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0103.196] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0103.196] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403d1) returned 0x1 [0103.196] IsWindowUnicode (hWnd=0x201d0) returned 1 [0103.196] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0103.196] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403d1) returned 0x1 [0103.196] SetCursor (hCursor=0x10003) returned 0x10003 [0103.196] TranslateMessage (lpMsg=0x1ef250) returned 0 [0103.196] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0103.196] GetKeyState (nVirtKey=1) returned 1 [0103.196] GetKeyState (nVirtKey=2) returned 0 [0103.196] GetKeyState (nVirtKey=4) returned 0 [0103.196] GetKeyState (nVirtKey=5) returned 0 [0103.196] GetKeyState (nVirtKey=6) returned 0 [0103.196] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0103.196] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0103.196] WaitMessage () returned 1 [0106.117] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0106.117] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900385) returned 0x1 [0106.117] IsWindowUnicode (hWnd=0x201d0) returned 1 [0106.117] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0106.117] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900385) returned 0x1 [0106.117] SetCursor (hCursor=0x10003) returned 0x10003 [0106.118] TranslateMessage (lpMsg=0x1ef250) returned 0 [0106.118] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0106.118] GetKeyState (nVirtKey=1) returned 1 [0106.118] GetKeyState (nVirtKey=2) returned 0 [0106.118] GetKeyState (nVirtKey=4) returned 0 [0106.118] GetKeyState (nVirtKey=5) returned 0 [0106.118] GetKeyState (nVirtKey=6) returned 0 [0106.118] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0106.118] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0106.118] WaitMessage () returned 1 [0106.176] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0106.176] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900385) returned 0x1 [0106.176] IsWindowUnicode (hWnd=0x201d0) returned 1 [0106.176] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0106.176] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900385) returned 0x1 [0106.176] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0106.176] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1df0240) returned 0x0 [0106.177] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0106.177] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0106.177] SetCursor (hCursor=0x10003) returned 0x10003 [0106.177] TranslateMessage (lpMsg=0x1ef250) returned 0 [0106.177] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0106.177] GetKeyState (nVirtKey=1) returned -128 [0106.177] GetKeyState (nVirtKey=2) returned 0 [0106.177] GetKeyState (nVirtKey=4) returned 0 [0106.177] GetKeyState (nVirtKey=5) returned 0 [0106.177] GetKeyState (nVirtKey=6) returned 0 [0106.177] IsWindowVisible (hWnd=0x201d0) returned 1 [0106.177] IsWindowEnabled (hWnd=0x201d0) returned 1 [0106.177] SetFocus (hWnd=0x201d0) returned 0x201d0 [0106.177] GetFocus () returned 0x201d0 [0106.177] GetFocus () returned 0x201d0 [0106.177] GetFocus () returned 0x201d0 [0106.177] GetKeyState (nVirtKey=1) returned -128 [0106.177] GetKeyState (nVirtKey=2) returned 0 [0106.177] GetKeyState (nVirtKey=4) returned 0 [0106.177] GetKeyState (nVirtKey=5) returned 0 [0106.177] GetKeyState (nVirtKey=6) returned 0 [0106.177] GetCapture () returned 0x0 [0106.177] SetCapture (hWnd=0x201d0) returned 0x0 [0106.177] GetKeyState (nVirtKey=1) returned -128 [0106.177] GetKeyState (nVirtKey=2) returned 0 [0106.177] GetKeyState (nVirtKey=4) returned 0 [0106.177] GetKeyState (nVirtKey=5) returned 0 [0106.178] GetKeyState (nVirtKey=6) returned 0 [0106.178] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0106.178] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0106.178] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0106.178] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0106.178] TranslateMessage (lpMsg=0x1ef250) returned 0 [0106.178] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0106.178] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0106.178] IsWindowUnicode (hWnd=0x201d0) returned 1 [0106.178] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0106.178] TranslateMessage (lpMsg=0x1ef250) returned 0 [0106.178] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0106.178] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x264f234, cPoints=0x1 | out: lpPoints=0x264f234) returned 42533703 [0106.178] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0106.178] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0106.178] UpdateWindow (hWnd=0x201d0) returned 1 [0106.178] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0106.178] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0106.178] CreateCompatibleDC (hdc=0x120107ec) returned 0x160107cc [0106.178] SelectObject (hdc=0x160107cc, h=0x490500d1) returned 0x185000f [0106.178] GdipCreateFromHDC (hdc=0x160107cc, graphics=0x1eea5c) returned 0x0 [0106.179] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0106.179] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0106.179] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0106.179] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0106.179] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0106.179] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0106.179] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0106.179] LocalFree (hMem=0x416cb8) returned 0x0 [0106.179] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0106.179] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0106.179] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0106.179] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0106.179] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0106.179] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd570dbd) returned 0x0 [0106.179] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0106.179] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0106.179] GetCurrentObject (hdc=0x160107cc, type=0x1) returned 0x1b00017 [0106.179] GetCurrentObject (hdc=0x160107cc, type=0x2) returned 0x1900010 [0106.179] GetCurrentObject (hdc=0x160107cc, type=0x7) returned 0x490500d1 [0106.179] GetCurrentObject (hdc=0x160107cc, type=0x6) returned 0x18a002e [0106.180] SaveDC (hdc=0x160107cc) returned 1 [0106.180] GetNearestColor (hdc=0x160107cc, color=0xf5f5f5) returned 0xf5f5f5 [0106.180] GetNearestColor (hdc=0x160107cc, color=0x515151) returned 0x515151 [0106.180] GetNearestColor (hdc=0x160107cc, color=0x0) returned 0x0 [0106.180] GetNearestColor (hdc=0x160107cc, color=0x515151) returned 0x515151 [0106.180] GetNearestColor (hdc=0x160107cc, color=0x0) returned 0x0 [0106.180] GetNearestColor (hdc=0x160107cc, color=0xfafafa) returned 0xfafafa [0106.180] GetNearestColor (hdc=0x160107cc, color=0xe0e0e0) returned 0xe0e0e0 [0106.180] GetNearestColor (hdc=0x160107cc, color=0xdcdcdc) returned 0xdcdcdc [0106.180] GetNearestColor (hdc=0x160107cc, color=0x0) returned 0x0 [0106.180] RestoreDC (hdc=0x160107cc, nSavedDC=-1) returned 1 [0106.180] GdipReleaseDC (graphics=0x504fbc8, hdc=0x160107cc) returned 0x0 [0106.180] IsAppThemed () returned 0x1 [0106.180] GetThemeAppProperties () returned 0x3 [0106.180] GetThemeAppProperties () returned 0x3 [0106.180] IsAppThemed () returned 0x1 [0106.180] GetThemeAppProperties () returned 0x3 [0106.180] GetThemeAppProperties () returned 0x3 [0106.180] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x264f938 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0106.181] IsAppThemed () returned 0x1 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] IsAppThemed () returned 0x1 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] IsAppThemed () returned 0x1 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] IsAppThemed () returned 0x1 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] IsThemePartDefined () returned 0x1 [0106.181] IsAppThemed () returned 0x1 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0106.181] IsAppThemed () returned 0x1 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] IsAppThemed () returned 0x1 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] GetThemeAppProperties () returned 0x3 [0106.181] IsThemePartDefined () returned 0x1 [0106.181] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0106.181] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0106.181] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0106.181] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0106.181] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0106.181] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0106.181] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0106.182] LocalFree (hMem=0x416cb8) returned 0x0 [0106.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0106.182] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0106.182] LocalFree (hMem=0x416cb8) returned 0x0 [0106.182] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0106.182] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0106.182] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0106.182] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0106.182] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0106.182] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0106.182] GetCurrentObject (hdc=0x160107cc, type=0x1) returned 0x1b00017 [0106.182] GetCurrentObject (hdc=0x160107cc, type=0x2) returned 0x1900010 [0106.182] GetCurrentObject (hdc=0x160107cc, type=0x7) returned 0x490500d1 [0106.182] GetCurrentObject (hdc=0x160107cc, type=0x6) returned 0x18a002e [0106.183] SaveDC (hdc=0x160107cc) returned 1 [0106.183] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb1040246 [0106.183] GetClipRgn (hdc=0x160107cc, hrgn=0xb1040246) returned 0 [0106.183] SelectClipRgn (hdc=0x160107cc, hrgn=0xd1040813) returned 2 [0106.183] DeleteObject (ho=0xb1040246) returned 1 [0106.183] DeleteObject (ho=0xd1040813) returned 1 [0106.183] OffsetViewportOrgEx (in: hdc=0x160107cc, x=0, y=0, lppt=0x264ffe8 | out: lppt=0x264ffe8) returned 1 [0106.183] DrawThemeParentBackground () returned 0x0 [0106.184] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0106.184] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0106.184] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0106.184] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0106.184] GetSystemMetrics (nIndex=42) returned 0 [0106.184] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0106.184] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0106.184] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0106.184] GetCurrentObject (hdc=0x160107cc, type=0x1) returned 0x1b00017 [0106.184] GetCurrentObject (hdc=0x160107cc, type=0x2) returned 0x1900010 [0106.184] GetCurrentObject (hdc=0x160107cc, type=0x7) returned 0x490500d1 [0106.184] GetCurrentObject (hdc=0x160107cc, type=0x6) returned 0x18a002e [0106.184] SaveDC (hdc=0x160107cc) returned 2 [0106.184] GetNearestColor (hdc=0x160107cc, color=0xf5f5f5) returned 0xf5f5f5 [0106.184] CreateSolidBrush (color=0xf5f5f5) returned 0x66100244 [0106.185] FillRect (hDC=0x160107cc, lprc=0x1ee2d0, hbr=0x66100244) returned 1 [0106.185] DeleteObject (ho=0x66100244) returned 1 [0106.185] RestoreDC (hdc=0x160107cc, nSavedDC=-1) returned 1 [0106.185] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0106.185] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0106.185] GetSystemMetrics (nIndex=42) returned 0 [0106.185] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0106.185] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0106.185] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0106.185] GetCurrentObject (hdc=0x160107cc, type=0x1) returned 0x1b00017 [0106.185] GetCurrentObject (hdc=0x160107cc, type=0x2) returned 0x1900010 [0106.185] GetCurrentObject (hdc=0x160107cc, type=0x7) returned 0x490500d1 [0106.185] GetCurrentObject (hdc=0x160107cc, type=0x6) returned 0x18a002e [0106.185] SaveDC (hdc=0x160107cc) returned 2 [0106.185] GetNearestColor (hdc=0x160107cc, color=0xf5f5f5) returned 0xf5f5f5 [0106.185] CreateSolidBrush (color=0xf5f5f5) returned 0x67100244 [0106.186] FillRect (hDC=0x160107cc, lprc=0x1ee270, hbr=0x67100244) returned 1 [0106.186] DeleteObject (ho=0x67100244) returned 1 [0106.186] RestoreDC (hdc=0x160107cc, nSavedDC=-1) returned 1 [0106.186] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0106.186] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0106.186] GetSystemMetrics (nIndex=42) returned 0 [0106.186] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0106.186] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0106.186] RestoreDC (hdc=0x160107cc, nSavedDC=-1) returned 1 [0106.186] GdipReleaseDC (graphics=0x504fbc8, hdc=0x160107cc) returned 0x0 [0106.186] IsAppThemed () returned 0x1 [0106.186] GetThemeAppProperties () returned 0x3 [0106.186] GetThemeAppProperties () returned 0x3 [0106.186] IsAppThemed () returned 0x1 [0106.186] GetThemeAppProperties () returned 0x3 [0106.186] GetThemeAppProperties () returned 0x3 [0106.186] IsThemePartDefined () returned 0x1 [0106.187] GdipCreateRegion (region=0x1ee764) returned 0x0 [0106.187] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0106.187] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0106.187] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0106.187] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0106.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0106.187] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0106.187] LocalFree (hMem=0x416cb8) returned 0x0 [0106.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0106.187] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0106.187] LocalFree (hMem=0x416cb8) returned 0x0 [0106.187] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0106.187] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0106.187] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0106.187] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0106.187] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0106.187] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0106.188] GetCurrentObject (hdc=0x160107cc, type=0x1) returned 0x1b00017 [0106.188] GetCurrentObject (hdc=0x160107cc, type=0x2) returned 0x1900010 [0106.188] GetCurrentObject (hdc=0x160107cc, type=0x7) returned 0x490500d1 [0106.188] GetCurrentObject (hdc=0x160107cc, type=0x6) returned 0x18a002e [0106.188] SaveDC (hdc=0x160107cc) returned 1 [0106.189] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd2040813 [0106.189] GetClipRgn (hdc=0x160107cc, hrgn=0xd2040813) returned 0 [0106.189] SelectClipRgn (hdc=0x160107cc, hrgn=0xb3040246) returned 2 [0106.189] DeleteObject (ho=0xd2040813) returned 1 [0106.189] DeleteObject (ho=0xb3040246) returned 1 [0106.189] OffsetViewportOrgEx (in: hdc=0x160107cc, x=0, y=0, lppt=0x2650828 | out: lppt=0x2650828) returned 1 [0106.189] IsAppThemed () returned 0x1 [0106.189] GetThemeAppProperties () returned 0x3 [0106.189] GetThemeAppProperties () returned 0x3 [0106.189] DrawThemeBackground () returned 0x0 [0106.189] RestoreDC (hdc=0x160107cc, nSavedDC=-1) returned 1 [0106.189] GdipReleaseDC (graphics=0x504fbc8, hdc=0x160107cc) returned 0x0 [0106.189] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0106.189] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0106.189] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0106.189] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0106.189] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0106.190] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0106.190] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0106.190] LocalFree (hMem=0x416cb8) returned 0x0 [0106.190] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0106.190] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0106.190] LocalFree (hMem=0x416cb8) returned 0x0 [0106.190] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0106.190] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0106.190] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0106.190] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0106.190] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0106.190] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0106.190] GetCurrentObject (hdc=0x160107cc, type=0x1) returned 0x1b00017 [0106.190] GetCurrentObject (hdc=0x160107cc, type=0x2) returned 0x1900010 [0106.190] GetCurrentObject (hdc=0x160107cc, type=0x7) returned 0x490500d1 [0106.190] GetCurrentObject (hdc=0x160107cc, type=0x6) returned 0x18a002e [0106.190] SaveDC (hdc=0x160107cc) returned 1 [0106.191] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb4040246 [0106.191] GetClipRgn (hdc=0x160107cc, hrgn=0xb4040246) returned 0 [0106.191] SelectClipRgn (hdc=0x160107cc, hrgn=0xd3040813) returned 2 [0106.191] DeleteObject (ho=0xb4040246) returned 1 [0106.191] DeleteObject (ho=0xd3040813) returned 1 [0106.191] OffsetViewportOrgEx (in: hdc=0x160107cc, x=0, y=0, lppt=0x2650afc | out: lppt=0x2650afc) returned 1 [0106.191] IsAppThemed () returned 0x1 [0106.191] GetThemeAppProperties () returned 0x3 [0106.191] GetThemeAppProperties () returned 0x3 [0106.191] GetThemeBackgroundContentRect () returned 0x0 [0106.191] RestoreDC (hdc=0x160107cc, nSavedDC=-1) returned 1 [0106.191] GdipReleaseDC (graphics=0x504fbc8, hdc=0x160107cc) returned 0x0 [0106.191] IsAppThemed () returned 0x1 [0106.191] GetThemeAppProperties () returned 0x3 [0106.191] GetThemeAppProperties () returned 0x3 [0106.191] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0106.191] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0106.191] GetCurrentObject (hdc=0x160107cc, type=0x1) returned 0x1b00017 [0106.191] GetCurrentObject (hdc=0x160107cc, type=0x2) returned 0x1900010 [0106.191] GetCurrentObject (hdc=0x160107cc, type=0x7) returned 0x490500d1 [0106.192] GetCurrentObject (hdc=0x160107cc, type=0x6) returned 0x18a002e [0106.192] SaveDC (hdc=0x160107cc) returned 1 [0106.192] GetTextAlign (hdc=0x160107cc) returned 0x0 [0106.192] GetTextColor (hdc=0x160107cc) returned 0x0 [0106.192] GetCurrentObject (hdc=0x160107cc, type=0x6) returned 0x18a002e [0106.192] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0106.192] SelectObject (hdc=0x160107cc, h=0x220a081a) returned 0x18a002e [0106.192] GetBkMode (hdc=0x160107cc) returned 2 [0106.192] SetBkMode (hdc=0x160107cc, mode=1) returned 2 [0106.192] DrawTextExW (in: hdc=0x160107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2650e90 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0106.192] DrawTextExW (in: hdc=0x160107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2650e90 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0106.193] RestoreDC (hdc=0x160107cc, nSavedDC=-1) returned 1 [0106.193] GdipReleaseDC (graphics=0x504fbc8, hdc=0x160107cc) returned 0x0 [0106.193] GetFocus () returned 0x201d0 [0106.193] IsAppThemed () returned 0x1 [0106.193] GetThemeAppProperties () returned 0x3 [0106.193] GetThemeAppProperties () returned 0x3 [0106.193] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0106.193] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x160107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0106.193] GdipReleaseDC (graphics=0x504fbc8, hdc=0x160107cc) returned 0x0 [0106.193] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0106.193] SelectObject (hdc=0x160107cc, h=0x185000f) returned 0x490500d1 [0106.193] DeleteDC (hdc=0x160107cc) returned 1 [0106.193] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0106.193] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0106.194] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2650f8c, cPoints=0x1 | out: lpPoints=0x2650f8c) returned 42533703 [0106.194] WindowFromPoint (Point=0x385) returned 0x201d0 [0106.194] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900385) returned 0x1 [0106.194] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0106.194] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0106.194] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0106.194] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0106.194] GetSystemMetrics (nIndex=42) returned 0 [0106.194] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0106.194] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0106.194] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0106.194] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0106.194] GetCapture () returned 0x201d0 [0106.194] ReleaseCapture () returned 1 [0106.194] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0106.194] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0106.194] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900385) returned 0x1 [0106.195] IsWindowUnicode (hWnd=0x201d0) returned 1 [0106.195] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0106.195] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900385) returned 0x1 [0106.195] SetCursor (hCursor=0x10003) returned 0x10003 [0106.195] TranslateMessage (lpMsg=0x1ef250) returned 0 [0106.195] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0106.195] GetKeyState (nVirtKey=1) returned 0 [0106.195] GetKeyState (nVirtKey=2) returned 0 [0106.195] GetKeyState (nVirtKey=4) returned 0 [0106.195] GetKeyState (nVirtKey=5) returned 0 [0106.195] GetKeyState (nVirtKey=6) returned 0 [0106.195] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0106.195] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0106.195] WaitMessage () returned 1 [0109.237] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0109.237] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960398) returned 0x1 [0109.238] IsWindowUnicode (hWnd=0x201d0) returned 1 [0109.238] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0109.238] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960398) returned 0x1 [0109.238] SetCursor (hCursor=0x10003) returned 0x10003 [0109.238] TranslateMessage (lpMsg=0x1ef250) returned 0 [0109.238] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0109.238] GetKeyState (nVirtKey=1) returned 0 [0109.238] GetKeyState (nVirtKey=2) returned 0 [0109.238] GetKeyState (nVirtKey=4) returned 0 [0109.238] GetKeyState (nVirtKey=5) returned 0 [0109.238] GetKeyState (nVirtKey=6) returned 0 [0109.238] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0109.238] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0109.238] WaitMessage () returned 1 [0109.311] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0109.311] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960398) returned 0x1 [0109.311] IsWindowUnicode (hWnd=0x201d0) returned 1 [0109.311] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0109.311] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960398) returned 0x1 [0109.311] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0109.311] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e50253) returned 0x0 [0109.311] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0109.311] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0109.312] SetCursor (hCursor=0x10003) returned 0x10003 [0109.312] TranslateMessage (lpMsg=0x1ef250) returned 0 [0109.312] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0109.312] GetKeyState (nVirtKey=1) returned -127 [0109.312] GetKeyState (nVirtKey=2) returned 0 [0109.312] GetKeyState (nVirtKey=4) returned 0 [0109.312] GetKeyState (nVirtKey=5) returned 0 [0109.312] GetKeyState (nVirtKey=6) returned 0 [0109.312] IsWindowVisible (hWnd=0x201d0) returned 1 [0109.312] IsWindowEnabled (hWnd=0x201d0) returned 1 [0109.312] SetFocus (hWnd=0x201d0) returned 0x201d0 [0109.312] GetFocus () returned 0x201d0 [0109.312] GetFocus () returned 0x201d0 [0109.312] GetFocus () returned 0x201d0 [0109.312] GetKeyState (nVirtKey=1) returned -127 [0109.312] GetKeyState (nVirtKey=2) returned 0 [0109.312] GetKeyState (nVirtKey=4) returned 0 [0109.312] GetKeyState (nVirtKey=5) returned 0 [0109.312] GetKeyState (nVirtKey=6) returned 0 [0109.312] GetCapture () returned 0x0 [0109.312] SetCapture (hWnd=0x201d0) returned 0x0 [0109.312] GetKeyState (nVirtKey=1) returned -127 [0109.312] GetKeyState (nVirtKey=2) returned 0 [0109.312] GetKeyState (nVirtKey=4) returned 0 [0109.312] GetKeyState (nVirtKey=5) returned 0 [0109.312] GetKeyState (nVirtKey=6) returned 0 [0109.312] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0109.312] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0109.312] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0109.312] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0109.313] TranslateMessage (lpMsg=0x1ef250) returned 0 [0109.313] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0109.313] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0109.313] IsWindowUnicode (hWnd=0x201d0) returned 1 [0109.313] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0109.313] TranslateMessage (lpMsg=0x1ef250) returned 0 [0109.313] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0109.313] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26510b0, cPoints=0x1 | out: lpPoints=0x26510b0) returned 42533703 [0109.313] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0109.313] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0109.313] UpdateWindow (hWnd=0x201d0) returned 1 [0109.313] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0109.313] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0109.313] CreateCompatibleDC (hdc=0x120107ec) returned 0x170107cc [0109.313] SelectObject (hdc=0x170107cc, h=0x490500d1) returned 0x185000f [0109.313] GdipCreateFromHDC (hdc=0x170107cc, graphics=0x1eea5c) returned 0x0 [0109.313] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0109.313] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0109.314] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0109.314] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0109.314] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0109.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0109.314] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0109.314] LocalFree (hMem=0x416cb8) returned 0x0 [0109.314] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0109.314] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0109.314] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0109.314] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0109.314] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0109.314] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd550dbd) returned 0x0 [0109.314] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0109.314] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0109.314] GetCurrentObject (hdc=0x170107cc, type=0x1) returned 0x1b00017 [0109.314] GetCurrentObject (hdc=0x170107cc, type=0x2) returned 0x1900010 [0109.314] GetCurrentObject (hdc=0x170107cc, type=0x7) returned 0x490500d1 [0109.315] GetCurrentObject (hdc=0x170107cc, type=0x6) returned 0x18a002e [0109.315] SaveDC (hdc=0x170107cc) returned 1 [0109.315] GetNearestColor (hdc=0x170107cc, color=0xf5f5f5) returned 0xf5f5f5 [0109.315] GetNearestColor (hdc=0x170107cc, color=0x515151) returned 0x515151 [0109.315] GetNearestColor (hdc=0x170107cc, color=0x0) returned 0x0 [0109.315] GetNearestColor (hdc=0x170107cc, color=0x515151) returned 0x515151 [0109.315] GetNearestColor (hdc=0x170107cc, color=0x0) returned 0x0 [0109.315] GetNearestColor (hdc=0x170107cc, color=0xfafafa) returned 0xfafafa [0109.315] GetNearestColor (hdc=0x170107cc, color=0xe0e0e0) returned 0xe0e0e0 [0109.315] GetNearestColor (hdc=0x170107cc, color=0xdcdcdc) returned 0xdcdcdc [0109.315] GetNearestColor (hdc=0x170107cc, color=0x0) returned 0x0 [0109.315] RestoreDC (hdc=0x170107cc, nSavedDC=-1) returned 1 [0109.315] GdipReleaseDC (graphics=0x504fbc8, hdc=0x170107cc) returned 0x0 [0109.316] IsAppThemed () returned 0x1 [0109.316] GetThemeAppProperties () returned 0x3 [0109.316] GetThemeAppProperties () returned 0x3 [0109.316] IsAppThemed () returned 0x1 [0109.316] GetThemeAppProperties () returned 0x3 [0109.316] GetThemeAppProperties () returned 0x3 [0109.316] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26517b4 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0109.316] IsAppThemed () returned 0x1 [0109.316] GetThemeAppProperties () returned 0x3 [0109.316] GetThemeAppProperties () returned 0x3 [0109.316] IsAppThemed () returned 0x1 [0109.316] GetThemeAppProperties () returned 0x3 [0109.316] GetThemeAppProperties () returned 0x3 [0109.316] IsAppThemed () returned 0x1 [0109.317] GetThemeAppProperties () returned 0x3 [0109.317] GetThemeAppProperties () returned 0x3 [0109.317] IsAppThemed () returned 0x1 [0109.317] GetThemeAppProperties () returned 0x3 [0109.317] GetThemeAppProperties () returned 0x3 [0109.317] IsThemePartDefined () returned 0x1 [0109.317] IsAppThemed () returned 0x1 [0109.317] GetThemeAppProperties () returned 0x3 [0109.317] GetThemeAppProperties () returned 0x3 [0109.317] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0109.317] IsAppThemed () returned 0x1 [0109.317] GetThemeAppProperties () returned 0x3 [0109.317] GetThemeAppProperties () returned 0x3 [0109.317] IsAppThemed () returned 0x1 [0109.317] GetThemeAppProperties () returned 0x3 [0109.317] GetThemeAppProperties () returned 0x3 [0109.317] IsThemePartDefined () returned 0x1 [0109.317] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0109.317] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0109.317] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0109.317] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0109.317] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0109.317] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0109.317] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0109.317] LocalFree (hMem=0x416cb8) returned 0x0 [0109.317] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0109.317] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0109.318] LocalFree (hMem=0x416cb8) returned 0x0 [0109.318] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0109.318] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0109.318] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0109.318] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0109.318] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0109.318] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0109.318] GetCurrentObject (hdc=0x170107cc, type=0x1) returned 0x1b00017 [0109.318] GetCurrentObject (hdc=0x170107cc, type=0x2) returned 0x1900010 [0109.318] GetCurrentObject (hdc=0x170107cc, type=0x7) returned 0x490500d1 [0109.318] GetCurrentObject (hdc=0x170107cc, type=0x6) returned 0x18a002e [0109.318] SaveDC (hdc=0x170107cc) returned 1 [0109.318] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd4040813 [0109.318] GetClipRgn (hdc=0x170107cc, hrgn=0xd4040813) returned 0 [0109.318] SelectClipRgn (hdc=0x170107cc, hrgn=0xb8040246) returned 2 [0109.318] DeleteObject (ho=0xd4040813) returned 1 [0109.318] DeleteObject (ho=0xb8040246) returned 1 [0109.319] OffsetViewportOrgEx (in: hdc=0x170107cc, x=0, y=0, lppt=0x2651e64 | out: lppt=0x2651e64) returned 1 [0109.319] DrawThemeParentBackground () returned 0x0 [0109.319] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0109.319] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0109.319] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0109.319] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0109.319] GetSystemMetrics (nIndex=42) returned 0 [0109.319] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0109.319] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0109.319] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0109.319] GetCurrentObject (hdc=0x170107cc, type=0x1) returned 0x1b00017 [0109.319] GetCurrentObject (hdc=0x170107cc, type=0x2) returned 0x1900010 [0109.319] GetCurrentObject (hdc=0x170107cc, type=0x7) returned 0x490500d1 [0109.319] GetCurrentObject (hdc=0x170107cc, type=0x6) returned 0x18a002e [0109.319] SaveDC (hdc=0x170107cc) returned 2 [0109.319] GetNearestColor (hdc=0x170107cc, color=0xf5f5f5) returned 0xf5f5f5 [0109.319] CreateSolidBrush (color=0xf5f5f5) returned 0x68100244 [0109.319] FillRect (hDC=0x170107cc, lprc=0x1ee2d0, hbr=0x68100244) returned 1 [0109.320] DeleteObject (ho=0x68100244) returned 1 [0109.320] RestoreDC (hdc=0x170107cc, nSavedDC=-1) returned 1 [0109.320] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0109.320] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0109.320] GetSystemMetrics (nIndex=42) returned 0 [0109.320] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0109.320] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0109.320] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0109.320] GetCurrentObject (hdc=0x170107cc, type=0x1) returned 0x1b00017 [0109.320] GetCurrentObject (hdc=0x170107cc, type=0x2) returned 0x1900010 [0109.320] GetCurrentObject (hdc=0x170107cc, type=0x7) returned 0x490500d1 [0109.320] GetCurrentObject (hdc=0x170107cc, type=0x6) returned 0x18a002e [0109.320] SaveDC (hdc=0x170107cc) returned 2 [0109.320] GetNearestColor (hdc=0x170107cc, color=0xf5f5f5) returned 0xf5f5f5 [0109.320] CreateSolidBrush (color=0xf5f5f5) returned 0x69100244 [0109.320] FillRect (hDC=0x170107cc, lprc=0x1ee270, hbr=0x69100244) returned 1 [0109.321] DeleteObject (ho=0x69100244) returned 1 [0109.321] RestoreDC (hdc=0x170107cc, nSavedDC=-1) returned 1 [0109.321] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0109.321] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0109.321] GetSystemMetrics (nIndex=42) returned 0 [0109.321] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0109.321] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0109.321] RestoreDC (hdc=0x170107cc, nSavedDC=-1) returned 1 [0109.321] GdipReleaseDC (graphics=0x504fbc8, hdc=0x170107cc) returned 0x0 [0109.321] IsAppThemed () returned 0x1 [0109.321] GetThemeAppProperties () returned 0x3 [0109.321] GetThemeAppProperties () returned 0x3 [0109.321] IsAppThemed () returned 0x1 [0109.321] GetThemeAppProperties () returned 0x3 [0109.321] GetThemeAppProperties () returned 0x3 [0109.321] IsThemePartDefined () returned 0x1 [0109.321] GdipCreateRegion (region=0x1ee764) returned 0x0 [0109.321] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0109.321] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0109.321] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0109.321] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0109.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0109.322] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0109.322] LocalFree (hMem=0x416cb8) returned 0x0 [0109.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0109.322] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0109.322] LocalFree (hMem=0x416cb8) returned 0x0 [0109.322] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0109.322] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0109.322] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0109.322] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0109.322] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0109.322] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0109.322] GetCurrentObject (hdc=0x170107cc, type=0x1) returned 0x1b00017 [0109.322] GetCurrentObject (hdc=0x170107cc, type=0x2) returned 0x1900010 [0109.322] GetCurrentObject (hdc=0x170107cc, type=0x7) returned 0x490500d1 [0109.322] GetCurrentObject (hdc=0x170107cc, type=0x6) returned 0x18a002e [0109.322] SaveDC (hdc=0x170107cc) returned 1 [0109.322] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb9040246 [0109.322] GetClipRgn (hdc=0x170107cc, hrgn=0xb9040246) returned 0 [0109.322] SelectClipRgn (hdc=0x170107cc, hrgn=0xd6040813) returned 2 [0109.323] DeleteObject (ho=0xb9040246) returned 1 [0109.323] DeleteObject (ho=0xd6040813) returned 1 [0109.323] OffsetViewportOrgEx (in: hdc=0x170107cc, x=0, y=0, lppt=0x26526a4 | out: lppt=0x26526a4) returned 1 [0109.323] IsAppThemed () returned 0x1 [0109.323] GetThemeAppProperties () returned 0x3 [0109.323] GetThemeAppProperties () returned 0x3 [0109.323] DrawThemeBackground () returned 0x0 [0109.323] RestoreDC (hdc=0x170107cc, nSavedDC=-1) returned 1 [0109.323] GdipReleaseDC (graphics=0x504fbc8, hdc=0x170107cc) returned 0x0 [0109.323] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0109.323] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0109.323] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0109.323] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0109.323] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0109.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0109.323] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0109.323] LocalFree (hMem=0x416cb8) returned 0x0 [0109.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0109.324] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0109.324] LocalFree (hMem=0x416cb8) returned 0x0 [0109.324] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0109.324] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0109.324] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0109.324] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0109.324] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0109.324] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0109.324] GetCurrentObject (hdc=0x170107cc, type=0x1) returned 0x1b00017 [0109.324] GetCurrentObject (hdc=0x170107cc, type=0x2) returned 0x1900010 [0109.324] GetCurrentObject (hdc=0x170107cc, type=0x7) returned 0x490500d1 [0109.324] GetCurrentObject (hdc=0x170107cc, type=0x6) returned 0x18a002e [0109.324] SaveDC (hdc=0x170107cc) returned 1 [0109.324] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd7040813 [0109.324] GetClipRgn (hdc=0x170107cc, hrgn=0xd7040813) returned 0 [0109.324] SelectClipRgn (hdc=0x170107cc, hrgn=0xba040246) returned 2 [0109.324] DeleteObject (ho=0xd7040813) returned 1 [0109.324] DeleteObject (ho=0xba040246) returned 1 [0109.324] OffsetViewportOrgEx (in: hdc=0x170107cc, x=0, y=0, lppt=0x2652978 | out: lppt=0x2652978) returned 1 [0109.324] IsAppThemed () returned 0x1 [0109.324] GetThemeAppProperties () returned 0x3 [0109.324] GetThemeAppProperties () returned 0x3 [0109.324] GetThemeBackgroundContentRect () returned 0x0 [0109.324] RestoreDC (hdc=0x170107cc, nSavedDC=-1) returned 1 [0109.325] GdipReleaseDC (graphics=0x504fbc8, hdc=0x170107cc) returned 0x0 [0109.325] IsAppThemed () returned 0x1 [0109.325] GetThemeAppProperties () returned 0x3 [0109.325] GetThemeAppProperties () returned 0x3 [0109.325] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0109.325] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0109.325] GetCurrentObject (hdc=0x170107cc, type=0x1) returned 0x1b00017 [0109.325] GetCurrentObject (hdc=0x170107cc, type=0x2) returned 0x1900010 [0109.325] GetCurrentObject (hdc=0x170107cc, type=0x7) returned 0x490500d1 [0109.325] GetCurrentObject (hdc=0x170107cc, type=0x6) returned 0x18a002e [0109.325] SaveDC (hdc=0x170107cc) returned 1 [0109.325] GetTextAlign (hdc=0x170107cc) returned 0x0 [0109.325] GetTextColor (hdc=0x170107cc) returned 0x0 [0109.325] GetCurrentObject (hdc=0x170107cc, type=0x6) returned 0x18a002e [0109.325] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0109.325] SelectObject (hdc=0x170107cc, h=0x220a081a) returned 0x18a002e [0109.325] GetBkMode (hdc=0x170107cc) returned 2 [0109.325] SetBkMode (hdc=0x170107cc, mode=1) returned 2 [0109.325] DrawTextExW (in: hdc=0x170107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2652d0c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0109.325] DrawTextExW (in: hdc=0x170107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2652d0c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0109.326] RestoreDC (hdc=0x170107cc, nSavedDC=-1) returned 1 [0109.326] GdipReleaseDC (graphics=0x504fbc8, hdc=0x170107cc) returned 0x0 [0109.326] GetFocus () returned 0x201d0 [0109.326] IsAppThemed () returned 0x1 [0109.326] GetThemeAppProperties () returned 0x3 [0109.326] GetThemeAppProperties () returned 0x3 [0109.326] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0109.326] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x170107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0109.326] GdipReleaseDC (graphics=0x504fbc8, hdc=0x170107cc) returned 0x0 [0109.326] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0109.326] SelectObject (hdc=0x170107cc, h=0x185000f) returned 0x490500d1 [0109.326] DeleteDC (hdc=0x170107cc) returned 1 [0109.326] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0109.326] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0109.326] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2652e08, cPoints=0x1 | out: lpPoints=0x2652e08) returned 42533703 [0109.326] WindowFromPoint (Point=0x398) returned 0x201d0 [0109.326] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960398) returned 0x1 [0109.327] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0109.327] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0109.327] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0109.327] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.327] GetSystemMetrics (nIndex=42) returned 0 [0109.327] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0109.327] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0109.327] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0109.327] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0109.327] GetCapture () returned 0x201d0 [0109.327] ReleaseCapture () returned 1 [0109.327] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0109.327] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0109.327] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960398) returned 0x1 [0109.327] IsWindowUnicode (hWnd=0x201d0) returned 1 [0109.327] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0109.327] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960398) returned 0x1 [0109.327] SetCursor (hCursor=0x10003) returned 0x10003 [0109.327] TranslateMessage (lpMsg=0x1ef250) returned 0 [0109.327] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0109.327] GetKeyState (nVirtKey=1) returned 1 [0109.327] GetKeyState (nVirtKey=2) returned 0 [0109.327] GetKeyState (nVirtKey=4) returned 0 [0109.328] GetKeyState (nVirtKey=5) returned 0 [0109.328] GetKeyState (nVirtKey=6) returned 0 [0109.328] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0109.328] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0109.328] WaitMessage () returned 1 [0112.246] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0112.246] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0112.246] IsWindowUnicode (hWnd=0x201d0) returned 1 [0112.246] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0112.246] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0112.246] SetCursor (hCursor=0x10003) returned 0x10003 [0112.247] TranslateMessage (lpMsg=0x1ef250) returned 0 [0112.247] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0112.247] GetKeyState (nVirtKey=1) returned 1 [0112.247] GetKeyState (nVirtKey=2) returned 0 [0112.247] GetKeyState (nVirtKey=4) returned 0 [0112.247] GetKeyState (nVirtKey=5) returned 0 [0112.247] GetKeyState (nVirtKey=6) returned 0 [0112.247] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0112.247] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0112.247] WaitMessage () returned 1 [0112.311] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0112.311] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0112.311] IsWindowUnicode (hWnd=0x201d0) returned 1 [0112.311] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0112.311] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0112.311] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0112.312] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e00297) returned 0x0 [0112.312] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0112.313] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0112.313] SetCursor (hCursor=0x10003) returned 0x10003 [0112.313] TranslateMessage (lpMsg=0x1ef250) returned 0 [0112.313] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0112.313] GetKeyState (nVirtKey=1) returned -128 [0112.313] GetKeyState (nVirtKey=2) returned 0 [0112.313] GetKeyState (nVirtKey=4) returned 0 [0112.313] GetKeyState (nVirtKey=5) returned 0 [0112.313] GetKeyState (nVirtKey=6) returned 0 [0112.313] IsWindowVisible (hWnd=0x201d0) returned 1 [0112.313] IsWindowEnabled (hWnd=0x201d0) returned 1 [0112.313] SetFocus (hWnd=0x201d0) returned 0x201d0 [0112.313] GetFocus () returned 0x201d0 [0112.313] GetFocus () returned 0x201d0 [0112.313] GetFocus () returned 0x201d0 [0112.313] GetKeyState (nVirtKey=1) returned -128 [0112.313] GetKeyState (nVirtKey=2) returned 0 [0112.313] GetKeyState (nVirtKey=4) returned 0 [0112.313] GetKeyState (nVirtKey=5) returned 0 [0112.313] GetKeyState (nVirtKey=6) returned 0 [0112.313] GetCapture () returned 0x0 [0112.313] SetCapture (hWnd=0x201d0) returned 0x0 [0112.313] GetKeyState (nVirtKey=1) returned -128 [0112.313] GetKeyState (nVirtKey=2) returned 0 [0112.313] GetKeyState (nVirtKey=4) returned 0 [0112.314] GetKeyState (nVirtKey=5) returned 0 [0112.314] GetKeyState (nVirtKey=6) returned 0 [0112.314] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0112.314] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0112.314] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0112.314] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0112.314] TranslateMessage (lpMsg=0x1ef250) returned 0 [0112.314] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0112.314] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0112.314] IsWindowUnicode (hWnd=0x201d0) returned 1 [0112.314] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0112.314] TranslateMessage (lpMsg=0x1ef250) returned 0 [0112.314] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0112.314] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2652f2c, cPoints=0x1 | out: lpPoints=0x2652f2c) returned 42533703 [0112.314] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0112.314] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0112.314] UpdateWindow (hWnd=0x201d0) returned 1 [0112.314] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0112.314] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0112.314] CreateCompatibleDC (hdc=0x120107ec) returned 0x180107cc [0112.315] SelectObject (hdc=0x180107cc, h=0x490500d1) returned 0x185000f [0112.315] GdipCreateFromHDC (hdc=0x180107cc, graphics=0x1eea5c) returned 0x0 [0112.315] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0112.315] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0112.315] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0112.315] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0112.315] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0112.315] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0112.315] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0112.315] LocalFree (hMem=0x416cb8) returned 0x0 [0112.315] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0112.316] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0112.316] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0112.316] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0112.316] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0112.316] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd530dbd) returned 0x0 [0112.316] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0112.316] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0112.316] GetCurrentObject (hdc=0x180107cc, type=0x1) returned 0x1b00017 [0112.316] GetCurrentObject (hdc=0x180107cc, type=0x2) returned 0x1900010 [0112.316] GetCurrentObject (hdc=0x180107cc, type=0x7) returned 0x490500d1 [0112.316] GetCurrentObject (hdc=0x180107cc, type=0x6) returned 0x18a002e [0112.316] SaveDC (hdc=0x180107cc) returned 1 [0112.316] GetNearestColor (hdc=0x180107cc, color=0xf5f5f5) returned 0xf5f5f5 [0112.316] GetNearestColor (hdc=0x180107cc, color=0x515151) returned 0x515151 [0112.316] GetNearestColor (hdc=0x180107cc, color=0x0) returned 0x0 [0112.317] GetNearestColor (hdc=0x180107cc, color=0x515151) returned 0x515151 [0112.317] GetNearestColor (hdc=0x180107cc, color=0x0) returned 0x0 [0112.317] GetNearestColor (hdc=0x180107cc, color=0xfafafa) returned 0xfafafa [0112.317] GetNearestColor (hdc=0x180107cc, color=0xe0e0e0) returned 0xe0e0e0 [0112.317] GetNearestColor (hdc=0x180107cc, color=0xdcdcdc) returned 0xdcdcdc [0112.317] GetNearestColor (hdc=0x180107cc, color=0x0) returned 0x0 [0112.317] RestoreDC (hdc=0x180107cc, nSavedDC=-1) returned 1 [0112.317] GdipReleaseDC (graphics=0x504fbc8, hdc=0x180107cc) returned 0x0 [0112.317] IsAppThemed () returned 0x1 [0112.317] GetThemeAppProperties () returned 0x3 [0112.317] GetThemeAppProperties () returned 0x3 [0112.317] IsAppThemed () returned 0x1 [0112.317] GetThemeAppProperties () returned 0x3 [0112.317] GetThemeAppProperties () returned 0x3 [0112.317] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2653630 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0112.318] IsAppThemed () returned 0x1 [0112.318] GetThemeAppProperties () returned 0x3 [0112.318] GetThemeAppProperties () returned 0x3 [0112.318] IsAppThemed () returned 0x1 [0112.318] GetThemeAppProperties () returned 0x3 [0112.318] GetThemeAppProperties () returned 0x3 [0112.318] IsAppThemed () returned 0x1 [0112.318] GetThemeAppProperties () returned 0x3 [0112.318] GetThemeAppProperties () returned 0x3 [0112.318] IsAppThemed () returned 0x1 [0112.318] GetThemeAppProperties () returned 0x3 [0112.318] GetThemeAppProperties () returned 0x3 [0112.318] IsThemePartDefined () returned 0x1 [0112.318] IsAppThemed () returned 0x1 [0112.318] GetThemeAppProperties () returned 0x3 [0112.318] GetThemeAppProperties () returned 0x3 [0112.318] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0112.318] IsAppThemed () returned 0x1 [0112.318] GetThemeAppProperties () returned 0x3 [0112.319] GetThemeAppProperties () returned 0x3 [0112.319] IsAppThemed () returned 0x1 [0112.319] GetThemeAppProperties () returned 0x3 [0112.319] GetThemeAppProperties () returned 0x3 [0112.319] IsThemePartDefined () returned 0x1 [0112.319] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0112.319] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0112.319] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0112.319] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0112.319] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0112.319] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0112.319] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0112.319] LocalFree (hMem=0x416cb8) returned 0x0 [0112.319] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0112.319] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0112.319] LocalFree (hMem=0x416cb8) returned 0x0 [0112.319] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0112.319] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0112.319] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0112.319] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0112.320] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0112.320] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0112.320] GetCurrentObject (hdc=0x180107cc, type=0x1) returned 0x1b00017 [0112.320] GetCurrentObject (hdc=0x180107cc, type=0x2) returned 0x1900010 [0112.320] GetCurrentObject (hdc=0x180107cc, type=0x7) returned 0x490500d1 [0112.320] GetCurrentObject (hdc=0x180107cc, type=0x6) returned 0x18a002e [0112.320] SaveDC (hdc=0x180107cc) returned 1 [0112.320] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbb040246 [0112.320] GetClipRgn (hdc=0x180107cc, hrgn=0xbb040246) returned 0 [0112.320] SelectClipRgn (hdc=0x180107cc, hrgn=0xdb040813) returned 2 [0112.320] DeleteObject (ho=0xbb040246) returned 1 [0112.320] DeleteObject (ho=0xdb040813) returned 1 [0112.320] OffsetViewportOrgEx (in: hdc=0x180107cc, x=0, y=0, lppt=0x2653ce0 | out: lppt=0x2653ce0) returned 1 [0112.320] DrawThemeParentBackground () returned 0x0 [0112.320] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0112.321] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0112.321] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0112.321] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0112.321] GetSystemMetrics (nIndex=42) returned 0 [0112.321] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0112.321] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0112.321] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0112.321] GetCurrentObject (hdc=0x180107cc, type=0x1) returned 0x1b00017 [0112.321] GetCurrentObject (hdc=0x180107cc, type=0x2) returned 0x1900010 [0112.321] GetCurrentObject (hdc=0x180107cc, type=0x7) returned 0x490500d1 [0112.321] GetCurrentObject (hdc=0x180107cc, type=0x6) returned 0x18a002e [0112.321] SaveDC (hdc=0x180107cc) returned 2 [0112.321] GetNearestColor (hdc=0x180107cc, color=0xf5f5f5) returned 0xf5f5f5 [0112.321] CreateSolidBrush (color=0xf5f5f5) returned 0x6a100244 [0112.321] FillRect (hDC=0x180107cc, lprc=0x1ee2d0, hbr=0x6a100244) returned 1 [0112.321] DeleteObject (ho=0x6a100244) returned 1 [0112.321] RestoreDC (hdc=0x180107cc, nSavedDC=-1) returned 1 [0112.322] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0112.322] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0112.322] GetSystemMetrics (nIndex=42) returned 0 [0112.322] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0112.322] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0112.322] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0112.322] GetCurrentObject (hdc=0x180107cc, type=0x1) returned 0x1b00017 [0112.322] GetCurrentObject (hdc=0x180107cc, type=0x2) returned 0x1900010 [0112.322] GetCurrentObject (hdc=0x180107cc, type=0x7) returned 0x490500d1 [0112.322] GetCurrentObject (hdc=0x180107cc, type=0x6) returned 0x18a002e [0112.322] SaveDC (hdc=0x180107cc) returned 2 [0112.322] GetNearestColor (hdc=0x180107cc, color=0xf5f5f5) returned 0xf5f5f5 [0112.322] CreateSolidBrush (color=0xf5f5f5) returned 0x6b100244 [0112.322] FillRect (hDC=0x180107cc, lprc=0x1ee270, hbr=0x6b100244) returned 1 [0112.322] DeleteObject (ho=0x6b100244) returned 1 [0112.322] RestoreDC (hdc=0x180107cc, nSavedDC=-1) returned 1 [0112.323] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0112.323] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0112.323] GetSystemMetrics (nIndex=42) returned 0 [0112.323] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0112.323] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0112.323] RestoreDC (hdc=0x180107cc, nSavedDC=-1) returned 1 [0112.323] GdipReleaseDC (graphics=0x504fbc8, hdc=0x180107cc) returned 0x0 [0112.323] IsAppThemed () returned 0x1 [0112.323] GetThemeAppProperties () returned 0x3 [0112.323] GetThemeAppProperties () returned 0x3 [0112.323] IsAppThemed () returned 0x1 [0112.323] GetThemeAppProperties () returned 0x3 [0112.323] GetThemeAppProperties () returned 0x3 [0112.323] IsThemePartDefined () returned 0x1 [0112.323] GdipCreateRegion (region=0x1ee764) returned 0x0 [0112.323] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0112.323] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0112.323] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0112.323] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0112.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0112.324] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0112.324] LocalFree (hMem=0x416cb8) returned 0x0 [0112.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0112.324] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0112.324] LocalFree (hMem=0x416cb8) returned 0x0 [0112.324] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0112.324] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0112.324] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0112.324] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0112.324] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0112.324] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0112.324] GetCurrentObject (hdc=0x180107cc, type=0x1) returned 0x1b00017 [0112.324] GetCurrentObject (hdc=0x180107cc, type=0x2) returned 0x1900010 [0112.324] GetCurrentObject (hdc=0x180107cc, type=0x7) returned 0x490500d1 [0112.324] GetCurrentObject (hdc=0x180107cc, type=0x6) returned 0x18a002e [0112.324] SaveDC (hdc=0x180107cc) returned 1 [0112.324] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdc040813 [0112.324] GetClipRgn (hdc=0x180107cc, hrgn=0xdc040813) returned 0 [0112.325] SelectClipRgn (hdc=0x180107cc, hrgn=0xbd040246) returned 2 [0112.325] DeleteObject (ho=0xdc040813) returned 1 [0112.325] DeleteObject (ho=0xbd040246) returned 1 [0112.325] OffsetViewportOrgEx (in: hdc=0x180107cc, x=0, y=0, lppt=0x2654520 | out: lppt=0x2654520) returned 1 [0112.325] IsAppThemed () returned 0x1 [0112.325] GetThemeAppProperties () returned 0x3 [0112.325] GetThemeAppProperties () returned 0x3 [0112.325] DrawThemeBackground () returned 0x0 [0112.325] RestoreDC (hdc=0x180107cc, nSavedDC=-1) returned 1 [0112.325] GdipReleaseDC (graphics=0x504fbc8, hdc=0x180107cc) returned 0x0 [0112.325] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0112.325] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0112.325] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0112.325] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0112.325] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0112.325] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0112.325] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0112.325] LocalFree (hMem=0x416cb8) returned 0x0 [0112.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0112.326] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0112.326] LocalFree (hMem=0x416cb8) returned 0x0 [0112.326] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0112.326] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0112.326] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0112.326] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0112.326] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0112.326] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0112.326] GetCurrentObject (hdc=0x180107cc, type=0x1) returned 0x1b00017 [0112.326] GetCurrentObject (hdc=0x180107cc, type=0x2) returned 0x1900010 [0112.326] GetCurrentObject (hdc=0x180107cc, type=0x7) returned 0x490500d1 [0112.326] GetCurrentObject (hdc=0x180107cc, type=0x6) returned 0x18a002e [0112.326] SaveDC (hdc=0x180107cc) returned 1 [0112.327] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbe040246 [0112.327] GetClipRgn (hdc=0x180107cc, hrgn=0xbe040246) returned 0 [0112.327] SelectClipRgn (hdc=0x180107cc, hrgn=0xdd040813) returned 2 [0112.327] DeleteObject (ho=0xbe040246) returned 1 [0112.327] DeleteObject (ho=0xdd040813) returned 1 [0112.327] OffsetViewportOrgEx (in: hdc=0x180107cc, x=0, y=0, lppt=0x26547f4 | out: lppt=0x26547f4) returned 1 [0112.327] IsAppThemed () returned 0x1 [0112.327] GetThemeAppProperties () returned 0x3 [0112.327] GetThemeAppProperties () returned 0x3 [0112.327] GetThemeBackgroundContentRect () returned 0x0 [0112.327] RestoreDC (hdc=0x180107cc, nSavedDC=-1) returned 1 [0112.327] GdipReleaseDC (graphics=0x504fbc8, hdc=0x180107cc) returned 0x0 [0112.327] IsAppThemed () returned 0x1 [0112.327] GetThemeAppProperties () returned 0x3 [0112.327] GetThemeAppProperties () returned 0x3 [0112.327] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0112.327] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0112.327] GetCurrentObject (hdc=0x180107cc, type=0x1) returned 0x1b00017 [0112.327] GetCurrentObject (hdc=0x180107cc, type=0x2) returned 0x1900010 [0112.327] GetCurrentObject (hdc=0x180107cc, type=0x7) returned 0x490500d1 [0112.328] GetCurrentObject (hdc=0x180107cc, type=0x6) returned 0x18a002e [0112.328] SaveDC (hdc=0x180107cc) returned 1 [0112.328] GetTextAlign (hdc=0x180107cc) returned 0x0 [0112.328] GetTextColor (hdc=0x180107cc) returned 0x0 [0112.328] GetCurrentObject (hdc=0x180107cc, type=0x6) returned 0x18a002e [0112.328] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0112.328] SelectObject (hdc=0x180107cc, h=0x220a081a) returned 0x18a002e [0112.328] GetBkMode (hdc=0x180107cc) returned 2 [0112.328] SetBkMode (hdc=0x180107cc, mode=1) returned 2 [0112.328] DrawTextExW (in: hdc=0x180107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2654b88 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0112.328] DrawTextExW (in: hdc=0x180107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2654b88 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0112.329] RestoreDC (hdc=0x180107cc, nSavedDC=-1) returned 1 [0112.329] GdipReleaseDC (graphics=0x504fbc8, hdc=0x180107cc) returned 0x0 [0112.329] GetFocus () returned 0x201d0 [0112.329] IsAppThemed () returned 0x1 [0112.329] GetThemeAppProperties () returned 0x3 [0112.329] GetThemeAppProperties () returned 0x3 [0112.329] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0112.329] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x180107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0112.329] GdipReleaseDC (graphics=0x504fbc8, hdc=0x180107cc) returned 0x0 [0112.329] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0112.329] SelectObject (hdc=0x180107cc, h=0x185000f) returned 0x490500d1 [0112.329] DeleteDC (hdc=0x180107cc) returned 1 [0112.329] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0112.330] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0112.330] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2654c84, cPoints=0x1 | out: lpPoints=0x2654c84) returned 42533703 [0112.330] WindowFromPoint (Point=0x3dc) returned 0x201d0 [0112.330] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0112.330] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0112.330] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0112.330] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0112.330] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0112.330] GetSystemMetrics (nIndex=42) returned 0 [0112.330] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0112.330] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0112.330] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0112.330] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0112.330] GetCapture () returned 0x201d0 [0112.330] ReleaseCapture () returned 1 [0112.330] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0112.330] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0112.330] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0112.331] IsWindowUnicode (hWnd=0x201d0) returned 1 [0112.331] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0112.331] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0112.331] SetCursor (hCursor=0x10003) returned 0x10003 [0112.331] TranslateMessage (lpMsg=0x1ef250) returned 0 [0112.331] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0112.331] GetKeyState (nVirtKey=1) returned 0 [0112.331] GetKeyState (nVirtKey=2) returned 0 [0112.331] GetKeyState (nVirtKey=4) returned 0 [0112.331] GetKeyState (nVirtKey=5) returned 0 [0112.331] GetKeyState (nVirtKey=6) returned 0 [0112.331] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0112.331] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0112.331] WaitMessage () returned 1 [0115.260] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0115.260] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e0390) returned 0x1 [0115.261] IsWindowUnicode (hWnd=0x201d0) returned 1 [0115.261] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0115.261] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e0390) returned 0x1 [0115.261] SetCursor (hCursor=0x10003) returned 0x10003 [0115.261] TranslateMessage (lpMsg=0x1ef250) returned 0 [0115.261] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0115.261] GetKeyState (nVirtKey=1) returned 0 [0115.261] GetKeyState (nVirtKey=2) returned 0 [0115.261] GetKeyState (nVirtKey=4) returned 0 [0115.261] GetKeyState (nVirtKey=5) returned 0 [0115.261] GetKeyState (nVirtKey=6) returned 0 [0115.261] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0115.261] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0115.261] WaitMessage () returned 1 [0115.320] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0115.320] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e0390) returned 0x1 [0115.321] IsWindowUnicode (hWnd=0x201d0) returned 1 [0115.321] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0115.321] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e0390) returned 0x1 [0115.321] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0115.321] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dd024b) returned 0x0 [0115.321] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0115.321] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0115.321] SetCursor (hCursor=0x10003) returned 0x10003 [0115.322] TranslateMessage (lpMsg=0x1ef250) returned 0 [0115.322] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0115.322] GetKeyState (nVirtKey=1) returned -127 [0115.322] GetKeyState (nVirtKey=2) returned 0 [0115.322] GetKeyState (nVirtKey=4) returned 0 [0115.322] GetKeyState (nVirtKey=5) returned 0 [0115.322] GetKeyState (nVirtKey=6) returned 0 [0115.322] IsWindowVisible (hWnd=0x201d0) returned 1 [0115.322] IsWindowEnabled (hWnd=0x201d0) returned 1 [0115.322] SetFocus (hWnd=0x201d0) returned 0x201d0 [0115.322] GetFocus () returned 0x201d0 [0115.322] GetFocus () returned 0x201d0 [0115.322] GetFocus () returned 0x201d0 [0115.322] GetKeyState (nVirtKey=1) returned -127 [0115.322] GetKeyState (nVirtKey=2) returned 0 [0115.322] GetKeyState (nVirtKey=4) returned 0 [0115.322] GetKeyState (nVirtKey=5) returned 0 [0115.322] GetKeyState (nVirtKey=6) returned 0 [0115.322] GetCapture () returned 0x0 [0115.322] SetCapture (hWnd=0x201d0) returned 0x0 [0115.322] GetKeyState (nVirtKey=1) returned -127 [0115.322] GetKeyState (nVirtKey=2) returned 0 [0115.322] GetKeyState (nVirtKey=4) returned 0 [0115.322] GetKeyState (nVirtKey=5) returned 0 [0115.322] GetKeyState (nVirtKey=6) returned 0 [0115.322] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0115.322] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0115.322] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0115.322] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0115.322] TranslateMessage (lpMsg=0x1ef250) returned 0 [0115.323] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0115.323] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0115.323] IsWindowUnicode (hWnd=0x201d0) returned 1 [0115.323] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0115.323] TranslateMessage (lpMsg=0x1ef250) returned 0 [0115.323] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0115.323] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2654da8, cPoints=0x1 | out: lpPoints=0x2654da8) returned 42533703 [0115.323] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0115.323] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0115.323] UpdateWindow (hWnd=0x201d0) returned 1 [0115.323] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0115.323] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0115.323] CreateCompatibleDC (hdc=0x120107ec) returned 0x190107cc [0115.323] SelectObject (hdc=0x190107cc, h=0x490500d1) returned 0x185000f [0115.323] GdipCreateFromHDC (hdc=0x190107cc, graphics=0x1eea5c) returned 0x0 [0115.323] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0115.323] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0115.324] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0115.324] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0115.324] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0115.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0115.324] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0115.324] LocalFree (hMem=0x416cb8) returned 0x0 [0115.324] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0115.324] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0115.324] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0115.324] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0115.324] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0115.324] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd510dbd) returned 0x0 [0115.324] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0115.324] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0115.324] GetCurrentObject (hdc=0x190107cc, type=0x1) returned 0x1b00017 [0115.324] GetCurrentObject (hdc=0x190107cc, type=0x2) returned 0x1900010 [0115.324] GetCurrentObject (hdc=0x190107cc, type=0x7) returned 0x490500d1 [0115.324] GetCurrentObject (hdc=0x190107cc, type=0x6) returned 0x18a002e [0115.324] SaveDC (hdc=0x190107cc) returned 1 [0115.324] GetNearestColor (hdc=0x190107cc, color=0xf5f5f5) returned 0xf5f5f5 [0115.324] GetNearestColor (hdc=0x190107cc, color=0x515151) returned 0x515151 [0115.325] GetNearestColor (hdc=0x190107cc, color=0x0) returned 0x0 [0115.325] GetNearestColor (hdc=0x190107cc, color=0x515151) returned 0x515151 [0115.325] GetNearestColor (hdc=0x190107cc, color=0x0) returned 0x0 [0115.325] GetNearestColor (hdc=0x190107cc, color=0xfafafa) returned 0xfafafa [0115.325] GetNearestColor (hdc=0x190107cc, color=0xe0e0e0) returned 0xe0e0e0 [0115.325] GetNearestColor (hdc=0x190107cc, color=0xdcdcdc) returned 0xdcdcdc [0115.325] GetNearestColor (hdc=0x190107cc, color=0x0) returned 0x0 [0115.325] RestoreDC (hdc=0x190107cc, nSavedDC=-1) returned 1 [0115.325] GdipReleaseDC (graphics=0x504fbc8, hdc=0x190107cc) returned 0x0 [0115.325] IsAppThemed () returned 0x1 [0115.325] GetThemeAppProperties () returned 0x3 [0115.325] GetThemeAppProperties () returned 0x3 [0115.325] IsAppThemed () returned 0x1 [0115.325] GetThemeAppProperties () returned 0x3 [0115.325] GetThemeAppProperties () returned 0x3 [0115.325] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26554ac | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0115.325] IsAppThemed () returned 0x1 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] IsAppThemed () returned 0x1 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] IsAppThemed () returned 0x1 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] IsAppThemed () returned 0x1 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] IsThemePartDefined () returned 0x1 [0115.326] IsAppThemed () returned 0x1 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0115.326] IsAppThemed () returned 0x1 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] IsAppThemed () returned 0x1 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] GetThemeAppProperties () returned 0x3 [0115.326] IsThemePartDefined () returned 0x1 [0115.326] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0115.326] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0115.326] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0115.326] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0115.326] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0115.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0115.326] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0115.326] LocalFree (hMem=0x416cb8) returned 0x0 [0115.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0115.326] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0115.326] LocalFree (hMem=0x416cb8) returned 0x0 [0115.327] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0115.327] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0115.327] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0115.327] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0115.327] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0115.327] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0115.327] GetCurrentObject (hdc=0x190107cc, type=0x1) returned 0x1b00017 [0115.327] GetCurrentObject (hdc=0x190107cc, type=0x2) returned 0x1900010 [0115.327] GetCurrentObject (hdc=0x190107cc, type=0x7) returned 0x490500d1 [0115.327] GetCurrentObject (hdc=0x190107cc, type=0x6) returned 0x18a002e [0115.327] SaveDC (hdc=0x190107cc) returned 1 [0115.327] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xde040813 [0115.327] GetClipRgn (hdc=0x190107cc, hrgn=0xde040813) returned 0 [0115.327] SelectClipRgn (hdc=0x190107cc, hrgn=0xc2040246) returned 2 [0115.327] DeleteObject (ho=0xde040813) returned 1 [0115.327] DeleteObject (ho=0xc2040246) returned 1 [0115.327] OffsetViewportOrgEx (in: hdc=0x190107cc, x=0, y=0, lppt=0x2655b5c | out: lppt=0x2655b5c) returned 1 [0115.327] DrawThemeParentBackground () returned 0x0 [0115.327] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0115.327] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0115.327] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0115.327] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0115.328] GetSystemMetrics (nIndex=42) returned 0 [0115.328] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0115.328] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0115.328] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0115.328] GetCurrentObject (hdc=0x190107cc, type=0x1) returned 0x1b00017 [0115.328] GetCurrentObject (hdc=0x190107cc, type=0x2) returned 0x1900010 [0115.328] GetCurrentObject (hdc=0x190107cc, type=0x7) returned 0x490500d1 [0115.328] GetCurrentObject (hdc=0x190107cc, type=0x6) returned 0x18a002e [0115.328] SaveDC (hdc=0x190107cc) returned 2 [0115.328] GetNearestColor (hdc=0x190107cc, color=0xf5f5f5) returned 0xf5f5f5 [0115.328] CreateSolidBrush (color=0xf5f5f5) returned 0x6c100244 [0115.328] FillRect (hDC=0x190107cc, lprc=0x1ee2d0, hbr=0x6c100244) returned 1 [0115.328] DeleteObject (ho=0x6c100244) returned 1 [0115.328] RestoreDC (hdc=0x190107cc, nSavedDC=-1) returned 1 [0115.328] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0115.328] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0115.328] GetSystemMetrics (nIndex=42) returned 0 [0115.328] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0115.328] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0115.328] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0115.328] GetCurrentObject (hdc=0x190107cc, type=0x1) returned 0x1b00017 [0115.328] GetCurrentObject (hdc=0x190107cc, type=0x2) returned 0x1900010 [0115.329] GetCurrentObject (hdc=0x190107cc, type=0x7) returned 0x490500d1 [0115.329] GetCurrentObject (hdc=0x190107cc, type=0x6) returned 0x18a002e [0115.329] SaveDC (hdc=0x190107cc) returned 2 [0115.329] GetNearestColor (hdc=0x190107cc, color=0xf5f5f5) returned 0xf5f5f5 [0115.329] CreateSolidBrush (color=0xf5f5f5) returned 0x6d100244 [0115.329] FillRect (hDC=0x190107cc, lprc=0x1ee270, hbr=0x6d100244) returned 1 [0115.329] DeleteObject (ho=0x6d100244) returned 1 [0115.329] RestoreDC (hdc=0x190107cc, nSavedDC=-1) returned 1 [0115.329] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0115.329] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0115.329] GetSystemMetrics (nIndex=42) returned 0 [0115.329] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0115.329] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0115.329] RestoreDC (hdc=0x190107cc, nSavedDC=-1) returned 1 [0115.329] GdipReleaseDC (graphics=0x504fbc8, hdc=0x190107cc) returned 0x0 [0115.329] IsAppThemed () returned 0x1 [0115.329] GetThemeAppProperties () returned 0x3 [0115.329] GetThemeAppProperties () returned 0x3 [0115.329] IsAppThemed () returned 0x1 [0115.329] GetThemeAppProperties () returned 0x3 [0115.329] GetThemeAppProperties () returned 0x3 [0115.329] IsThemePartDefined () returned 0x1 [0115.329] GdipCreateRegion (region=0x1ee764) returned 0x0 [0115.329] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0115.329] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0115.330] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0115.330] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0115.330] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0115.330] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0115.330] LocalFree (hMem=0x416cb8) returned 0x0 [0115.330] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0115.330] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0115.330] LocalFree (hMem=0x416cb8) returned 0x0 [0115.330] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0115.330] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0115.330] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0115.330] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0115.330] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0115.330] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0115.330] GetCurrentObject (hdc=0x190107cc, type=0x1) returned 0x1b00017 [0115.330] GetCurrentObject (hdc=0x190107cc, type=0x2) returned 0x1900010 [0115.330] GetCurrentObject (hdc=0x190107cc, type=0x7) returned 0x490500d1 [0115.330] GetCurrentObject (hdc=0x190107cc, type=0x6) returned 0x18a002e [0115.330] SaveDC (hdc=0x190107cc) returned 1 [0115.330] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc3040246 [0115.330] GetClipRgn (hdc=0x190107cc, hrgn=0xc3040246) returned 0 [0115.330] SelectClipRgn (hdc=0x190107cc, hrgn=0xe0040813) returned 2 [0115.331] DeleteObject (ho=0xc3040246) returned 1 [0115.331] DeleteObject (ho=0xe0040813) returned 1 [0115.331] OffsetViewportOrgEx (in: hdc=0x190107cc, x=0, y=0, lppt=0x265639c | out: lppt=0x265639c) returned 1 [0115.331] IsAppThemed () returned 0x1 [0115.331] GetThemeAppProperties () returned 0x3 [0115.331] GetThemeAppProperties () returned 0x3 [0115.331] DrawThemeBackground () returned 0x0 [0115.331] RestoreDC (hdc=0x190107cc, nSavedDC=-1) returned 1 [0115.331] GdipReleaseDC (graphics=0x504fbc8, hdc=0x190107cc) returned 0x0 [0115.331] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0115.331] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0115.331] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0115.331] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0115.331] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0115.331] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0115.331] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0115.331] LocalFree (hMem=0x416cb8) returned 0x0 [0115.331] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0115.331] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0115.331] LocalFree (hMem=0x416cb8) returned 0x0 [0115.331] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0115.332] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0115.332] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0115.332] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0115.332] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0115.332] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0115.332] GetCurrentObject (hdc=0x190107cc, type=0x1) returned 0x1b00017 [0115.332] GetCurrentObject (hdc=0x190107cc, type=0x2) returned 0x1900010 [0115.332] GetCurrentObject (hdc=0x190107cc, type=0x7) returned 0x490500d1 [0115.332] GetCurrentObject (hdc=0x190107cc, type=0x6) returned 0x18a002e [0115.332] SaveDC (hdc=0x190107cc) returned 1 [0115.332] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe1040813 [0115.332] GetClipRgn (hdc=0x190107cc, hrgn=0xe1040813) returned 0 [0115.332] SelectClipRgn (hdc=0x190107cc, hrgn=0xc4040246) returned 2 [0115.332] DeleteObject (ho=0xe1040813) returned 1 [0115.332] DeleteObject (ho=0xc4040246) returned 1 [0115.332] OffsetViewportOrgEx (in: hdc=0x190107cc, x=0, y=0, lppt=0x2656670 | out: lppt=0x2656670) returned 1 [0115.332] IsAppThemed () returned 0x1 [0115.332] GetThemeAppProperties () returned 0x3 [0115.332] GetThemeAppProperties () returned 0x3 [0115.332] GetThemeBackgroundContentRect () returned 0x0 [0115.332] RestoreDC (hdc=0x190107cc, nSavedDC=-1) returned 1 [0115.332] GdipReleaseDC (graphics=0x504fbc8, hdc=0x190107cc) returned 0x0 [0115.332] IsAppThemed () returned 0x1 [0115.332] GetThemeAppProperties () returned 0x3 [0115.332] GetThemeAppProperties () returned 0x3 [0115.332] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0115.333] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0115.333] GetCurrentObject (hdc=0x190107cc, type=0x1) returned 0x1b00017 [0115.333] GetCurrentObject (hdc=0x190107cc, type=0x2) returned 0x1900010 [0115.333] GetCurrentObject (hdc=0x190107cc, type=0x7) returned 0x490500d1 [0115.333] GetCurrentObject (hdc=0x190107cc, type=0x6) returned 0x18a002e [0115.333] SaveDC (hdc=0x190107cc) returned 1 [0115.333] GetTextAlign (hdc=0x190107cc) returned 0x0 [0115.333] GetTextColor (hdc=0x190107cc) returned 0x0 [0115.333] GetCurrentObject (hdc=0x190107cc, type=0x6) returned 0x18a002e [0115.333] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0115.333] SelectObject (hdc=0x190107cc, h=0x220a081a) returned 0x18a002e [0115.333] GetBkMode (hdc=0x190107cc) returned 2 [0115.333] SetBkMode (hdc=0x190107cc, mode=1) returned 2 [0115.333] DrawTextExW (in: hdc=0x190107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2656a04 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0115.333] DrawTextExW (in: hdc=0x190107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2656a04 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0115.334] RestoreDC (hdc=0x190107cc, nSavedDC=-1) returned 1 [0115.334] GdipReleaseDC (graphics=0x504fbc8, hdc=0x190107cc) returned 0x0 [0115.334] GetFocus () returned 0x201d0 [0115.334] IsAppThemed () returned 0x1 [0115.334] GetThemeAppProperties () returned 0x3 [0115.334] GetThemeAppProperties () returned 0x3 [0115.334] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0115.334] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x190107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0115.334] GdipReleaseDC (graphics=0x504fbc8, hdc=0x190107cc) returned 0x0 [0115.334] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0115.334] SelectObject (hdc=0x190107cc, h=0x185000f) returned 0x490500d1 [0115.334] DeleteDC (hdc=0x190107cc) returned 1 [0115.334] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0115.334] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0115.334] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2656b00, cPoints=0x1 | out: lpPoints=0x2656b00) returned 42533703 [0115.334] WindowFromPoint (Point=0x390) returned 0x201d0 [0115.334] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e0390) returned 0x1 [0115.334] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0115.334] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0115.335] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0115.335] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0115.335] GetSystemMetrics (nIndex=42) returned 0 [0115.335] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0115.335] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0115.335] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0115.335] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0115.335] GetCapture () returned 0x201d0 [0115.335] ReleaseCapture () returned 1 [0115.335] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0115.335] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0115.335] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e0390) returned 0x1 [0115.335] IsWindowUnicode (hWnd=0x201d0) returned 1 [0115.335] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0115.335] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e0390) returned 0x1 [0115.335] SetCursor (hCursor=0x10003) returned 0x10003 [0115.335] TranslateMessage (lpMsg=0x1ef250) returned 0 [0115.335] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0115.335] GetKeyState (nVirtKey=1) returned 1 [0115.335] GetKeyState (nVirtKey=2) returned 0 [0115.335] GetKeyState (nVirtKey=4) returned 0 [0115.335] GetKeyState (nVirtKey=5) returned 0 [0115.335] GetKeyState (nVirtKey=6) returned 0 [0115.335] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0115.335] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0115.336] WaitMessage () returned 1 [0118.378] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0118.378] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603d5) returned 0x1 [0118.379] IsWindowUnicode (hWnd=0x201d0) returned 1 [0118.379] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0118.379] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603d5) returned 0x1 [0118.379] SetCursor (hCursor=0x10003) returned 0x10003 [0118.379] TranslateMessage (lpMsg=0x1ef250) returned 0 [0118.379] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0118.379] GetKeyState (nVirtKey=1) returned 1 [0118.379] GetKeyState (nVirtKey=2) returned 0 [0118.379] GetKeyState (nVirtKey=4) returned 0 [0118.379] GetKeyState (nVirtKey=5) returned 0 [0118.379] GetKeyState (nVirtKey=6) returned 0 [0118.379] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0118.379] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0118.379] WaitMessage () returned 1 [0118.436] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0118.436] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603d5) returned 0x1 [0118.437] IsWindowUnicode (hWnd=0x201d0) returned 1 [0118.437] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0118.437] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603d5) returned 0x1 [0118.437] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0118.437] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e50290) returned 0x0 [0118.437] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0118.437] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0118.437] SetCursor (hCursor=0x10003) returned 0x10003 [0118.437] TranslateMessage (lpMsg=0x1ef250) returned 0 [0118.437] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0118.437] GetKeyState (nVirtKey=1) returned -128 [0118.437] GetKeyState (nVirtKey=2) returned 0 [0118.437] GetKeyState (nVirtKey=4) returned 0 [0118.438] GetKeyState (nVirtKey=5) returned 0 [0118.438] GetKeyState (nVirtKey=6) returned 0 [0118.438] IsWindowVisible (hWnd=0x201d0) returned 1 [0118.438] IsWindowEnabled (hWnd=0x201d0) returned 1 [0118.438] SetFocus (hWnd=0x201d0) returned 0x201d0 [0118.438] GetFocus () returned 0x201d0 [0118.438] GetFocus () returned 0x201d0 [0118.438] GetFocus () returned 0x201d0 [0118.438] GetKeyState (nVirtKey=1) returned -128 [0118.438] GetKeyState (nVirtKey=2) returned 0 [0118.438] GetKeyState (nVirtKey=4) returned 0 [0118.438] GetKeyState (nVirtKey=5) returned 0 [0118.438] GetKeyState (nVirtKey=6) returned 0 [0118.438] GetCapture () returned 0x0 [0118.438] SetCapture (hWnd=0x201d0) returned 0x0 [0118.438] GetKeyState (nVirtKey=1) returned -128 [0118.438] GetKeyState (nVirtKey=2) returned 0 [0118.438] GetKeyState (nVirtKey=4) returned 0 [0118.438] GetKeyState (nVirtKey=5) returned 0 [0118.438] GetKeyState (nVirtKey=6) returned 0 [0118.438] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0118.438] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0118.438] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0118.438] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0118.438] TranslateMessage (lpMsg=0x1ef250) returned 0 [0118.438] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0118.438] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0118.438] IsWindowUnicode (hWnd=0x201d0) returned 1 [0118.438] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0118.438] TranslateMessage (lpMsg=0x1ef250) returned 0 [0118.438] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0118.438] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2656c24, cPoints=0x1 | out: lpPoints=0x2656c24) returned 42533703 [0118.438] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0118.438] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0118.438] UpdateWindow (hWnd=0x201d0) returned 1 [0118.439] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0118.439] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0118.439] CreateCompatibleDC (hdc=0x120107ec) returned 0x1c0107cc [0118.439] SelectObject (hdc=0x1c0107cc, h=0x490500d1) returned 0x185000f [0118.439] GdipCreateFromHDC (hdc=0x1c0107cc, graphics=0x1eea5c) returned 0x0 [0118.439] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0118.439] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0118.439] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0118.439] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0118.439] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0118.439] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0118.439] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0118.439] LocalFree (hMem=0x416cb8) returned 0x0 [0118.439] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0118.439] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0118.439] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0118.439] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0118.439] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0118.440] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd4f0dbd) returned 0x0 [0118.440] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0118.440] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0118.440] GetCurrentObject (hdc=0x1c0107cc, type=0x1) returned 0x1b00017 [0118.440] GetCurrentObject (hdc=0x1c0107cc, type=0x2) returned 0x1900010 [0118.440] GetCurrentObject (hdc=0x1c0107cc, type=0x7) returned 0x490500d1 [0118.440] GetCurrentObject (hdc=0x1c0107cc, type=0x6) returned 0x18a002e [0118.440] SaveDC (hdc=0x1c0107cc) returned 1 [0118.440] GetNearestColor (hdc=0x1c0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0118.440] GetNearestColor (hdc=0x1c0107cc, color=0x515151) returned 0x515151 [0118.440] GetNearestColor (hdc=0x1c0107cc, color=0x0) returned 0x0 [0118.440] GetNearestColor (hdc=0x1c0107cc, color=0x515151) returned 0x515151 [0118.440] GetNearestColor (hdc=0x1c0107cc, color=0x0) returned 0x0 [0118.440] GetNearestColor (hdc=0x1c0107cc, color=0xfafafa) returned 0xfafafa [0118.440] GetNearestColor (hdc=0x1c0107cc, color=0xe0e0e0) returned 0xe0e0e0 [0118.440] GetNearestColor (hdc=0x1c0107cc, color=0xdcdcdc) returned 0xdcdcdc [0118.440] GetNearestColor (hdc=0x1c0107cc, color=0x0) returned 0x0 [0118.440] RestoreDC (hdc=0x1c0107cc, nSavedDC=-1) returned 1 [0118.440] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1c0107cc) returned 0x0 [0118.440] IsAppThemed () returned 0x1 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] IsAppThemed () returned 0x1 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2657328 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0118.441] IsAppThemed () returned 0x1 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] IsAppThemed () returned 0x1 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] IsAppThemed () returned 0x1 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] IsAppThemed () returned 0x1 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] IsThemePartDefined () returned 0x1 [0118.441] IsAppThemed () returned 0x1 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0118.441] IsAppThemed () returned 0x1 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] IsAppThemed () returned 0x1 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] GetThemeAppProperties () returned 0x3 [0118.441] IsThemePartDefined () returned 0x1 [0118.441] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0118.441] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0118.441] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0118.441] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0118.441] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0118.442] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0118.442] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0118.442] LocalFree (hMem=0x416cb8) returned 0x0 [0118.442] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0118.442] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0118.442] LocalFree (hMem=0x416cb8) returned 0x0 [0118.442] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0118.442] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0118.442] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0118.442] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0118.442] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0118.442] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0118.442] GetCurrentObject (hdc=0x1c0107cc, type=0x1) returned 0x1b00017 [0118.442] GetCurrentObject (hdc=0x1c0107cc, type=0x2) returned 0x1900010 [0118.442] GetCurrentObject (hdc=0x1c0107cc, type=0x7) returned 0x490500d1 [0118.442] GetCurrentObject (hdc=0x1c0107cc, type=0x6) returned 0x18a002e [0118.442] SaveDC (hdc=0x1c0107cc) returned 1 [0118.442] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc5040246 [0118.442] GetClipRgn (hdc=0x1c0107cc, hrgn=0xc5040246) returned 0 [0118.442] SelectClipRgn (hdc=0x1c0107cc, hrgn=0xe5040813) returned 2 [0118.442] DeleteObject (ho=0xc5040246) returned 1 [0118.442] DeleteObject (ho=0xe5040813) returned 1 [0118.442] OffsetViewportOrgEx (in: hdc=0x1c0107cc, x=0, y=0, lppt=0x26579d8 | out: lppt=0x26579d8) returned 1 [0118.443] DrawThemeParentBackground () returned 0x0 [0118.443] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0118.443] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0118.443] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0118.443] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0118.443] GetSystemMetrics (nIndex=42) returned 0 [0118.443] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0118.443] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0118.443] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0118.443] GetCurrentObject (hdc=0x1c0107cc, type=0x1) returned 0x1b00017 [0118.443] GetCurrentObject (hdc=0x1c0107cc, type=0x2) returned 0x1900010 [0118.443] GetCurrentObject (hdc=0x1c0107cc, type=0x7) returned 0x490500d1 [0118.443] GetCurrentObject (hdc=0x1c0107cc, type=0x6) returned 0x18a002e [0118.443] SaveDC (hdc=0x1c0107cc) returned 2 [0118.443] GetNearestColor (hdc=0x1c0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0118.443] CreateSolidBrush (color=0xf5f5f5) returned 0x6e100244 [0118.443] FillRect (hDC=0x1c0107cc, lprc=0x1ee2d0, hbr=0x6e100244) returned 1 [0118.443] DeleteObject (ho=0x6e100244) returned 1 [0118.443] RestoreDC (hdc=0x1c0107cc, nSavedDC=-1) returned 1 [0118.444] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0118.444] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0118.444] GetSystemMetrics (nIndex=42) returned 0 [0118.444] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0118.444] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0118.444] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0118.444] GetCurrentObject (hdc=0x1c0107cc, type=0x1) returned 0x1b00017 [0118.444] GetCurrentObject (hdc=0x1c0107cc, type=0x2) returned 0x1900010 [0118.444] GetCurrentObject (hdc=0x1c0107cc, type=0x7) returned 0x490500d1 [0118.444] GetCurrentObject (hdc=0x1c0107cc, type=0x6) returned 0x18a002e [0118.444] SaveDC (hdc=0x1c0107cc) returned 2 [0118.444] GetNearestColor (hdc=0x1c0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0118.444] CreateSolidBrush (color=0xf5f5f5) returned 0x6f100244 [0118.444] FillRect (hDC=0x1c0107cc, lprc=0x1ee270, hbr=0x6f100244) returned 1 [0118.444] DeleteObject (ho=0x6f100244) returned 1 [0118.444] RestoreDC (hdc=0x1c0107cc, nSavedDC=-1) returned 1 [0118.444] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0118.444] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0118.445] GetSystemMetrics (nIndex=42) returned 0 [0118.445] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0118.445] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0118.445] RestoreDC (hdc=0x1c0107cc, nSavedDC=-1) returned 1 [0118.445] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1c0107cc) returned 0x0 [0118.445] IsAppThemed () returned 0x1 [0118.445] GetThemeAppProperties () returned 0x3 [0118.445] GetThemeAppProperties () returned 0x3 [0118.445] IsAppThemed () returned 0x1 [0118.445] GetThemeAppProperties () returned 0x3 [0118.445] GetThemeAppProperties () returned 0x3 [0118.445] IsThemePartDefined () returned 0x1 [0118.445] GdipCreateRegion (region=0x1ee764) returned 0x0 [0118.445] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0118.445] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0118.445] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0118.445] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0118.445] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0118.445] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0118.445] LocalFree (hMem=0x416cb8) returned 0x0 [0118.445] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0118.445] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0118.446] LocalFree (hMem=0x416cb8) returned 0x0 [0118.446] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0118.446] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0118.446] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0118.446] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0118.446] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0118.446] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0118.446] GetCurrentObject (hdc=0x1c0107cc, type=0x1) returned 0x1b00017 [0118.446] GetCurrentObject (hdc=0x1c0107cc, type=0x2) returned 0x1900010 [0118.446] GetCurrentObject (hdc=0x1c0107cc, type=0x7) returned 0x490500d1 [0118.446] GetCurrentObject (hdc=0x1c0107cc, type=0x6) returned 0x18a002e [0118.446] SaveDC (hdc=0x1c0107cc) returned 1 [0118.446] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe6040813 [0118.446] GetClipRgn (hdc=0x1c0107cc, hrgn=0xe6040813) returned 0 [0118.446] SelectClipRgn (hdc=0x1c0107cc, hrgn=0xc7040246) returned 2 [0118.446] DeleteObject (ho=0xe6040813) returned 1 [0118.446] DeleteObject (ho=0xc7040246) returned 1 [0118.446] OffsetViewportOrgEx (in: hdc=0x1c0107cc, x=0, y=0, lppt=0x2658218 | out: lppt=0x2658218) returned 1 [0118.446] IsAppThemed () returned 0x1 [0118.446] GetThemeAppProperties () returned 0x3 [0118.446] GetThemeAppProperties () returned 0x3 [0118.446] DrawThemeBackground () returned 0x0 [0118.447] RestoreDC (hdc=0x1c0107cc, nSavedDC=-1) returned 1 [0118.447] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1c0107cc) returned 0x0 [0118.447] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0118.447] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0118.447] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0118.447] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0118.447] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0118.447] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0118.447] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0118.447] LocalFree (hMem=0x416cb8) returned 0x0 [0118.447] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0118.447] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0118.447] LocalFree (hMem=0x416cb8) returned 0x0 [0118.447] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0118.447] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0118.447] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0118.447] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0118.447] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0118.447] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0118.447] GetCurrentObject (hdc=0x1c0107cc, type=0x1) returned 0x1b00017 [0118.447] GetCurrentObject (hdc=0x1c0107cc, type=0x2) returned 0x1900010 [0118.447] GetCurrentObject (hdc=0x1c0107cc, type=0x7) returned 0x490500d1 [0118.447] GetCurrentObject (hdc=0x1c0107cc, type=0x6) returned 0x18a002e [0118.448] SaveDC (hdc=0x1c0107cc) returned 1 [0118.448] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc8040246 [0118.448] GetClipRgn (hdc=0x1c0107cc, hrgn=0xc8040246) returned 0 [0118.448] SelectClipRgn (hdc=0x1c0107cc, hrgn=0xe7040813) returned 2 [0118.448] DeleteObject (ho=0xc8040246) returned 1 [0118.448] DeleteObject (ho=0xe7040813) returned 1 [0118.448] OffsetViewportOrgEx (in: hdc=0x1c0107cc, x=0, y=0, lppt=0x26584ec | out: lppt=0x26584ec) returned 1 [0118.448] IsAppThemed () returned 0x1 [0118.448] GetThemeAppProperties () returned 0x3 [0118.448] GetThemeAppProperties () returned 0x3 [0118.448] GetThemeBackgroundContentRect () returned 0x0 [0118.448] RestoreDC (hdc=0x1c0107cc, nSavedDC=-1) returned 1 [0118.448] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1c0107cc) returned 0x0 [0118.448] IsAppThemed () returned 0x1 [0118.448] GetThemeAppProperties () returned 0x3 [0118.448] GetThemeAppProperties () returned 0x3 [0118.448] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0118.448] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0118.448] GetCurrentObject (hdc=0x1c0107cc, type=0x1) returned 0x1b00017 [0118.448] GetCurrentObject (hdc=0x1c0107cc, type=0x2) returned 0x1900010 [0118.448] GetCurrentObject (hdc=0x1c0107cc, type=0x7) returned 0x490500d1 [0118.448] GetCurrentObject (hdc=0x1c0107cc, type=0x6) returned 0x18a002e [0118.448] SaveDC (hdc=0x1c0107cc) returned 1 [0118.449] GetTextAlign (hdc=0x1c0107cc) returned 0x0 [0118.449] GetTextColor (hdc=0x1c0107cc) returned 0x0 [0118.449] GetCurrentObject (hdc=0x1c0107cc, type=0x6) returned 0x18a002e [0118.449] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0118.449] SelectObject (hdc=0x1c0107cc, h=0x220a081a) returned 0x18a002e [0118.449] GetBkMode (hdc=0x1c0107cc) returned 2 [0118.449] SetBkMode (hdc=0x1c0107cc, mode=1) returned 2 [0118.449] DrawTextExW (in: hdc=0x1c0107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2658880 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0118.449] DrawTextExW (in: hdc=0x1c0107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2658880 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0118.449] RestoreDC (hdc=0x1c0107cc, nSavedDC=-1) returned 1 [0118.449] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1c0107cc) returned 0x0 [0118.449] GetFocus () returned 0x201d0 [0118.449] IsAppThemed () returned 0x1 [0118.449] GetThemeAppProperties () returned 0x3 [0118.449] GetThemeAppProperties () returned 0x3 [0118.449] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0118.449] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x1c0107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0118.449] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1c0107cc) returned 0x0 [0118.450] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0118.450] SelectObject (hdc=0x1c0107cc, h=0x185000f) returned 0x490500d1 [0118.450] DeleteDC (hdc=0x1c0107cc) returned 1 [0118.450] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0118.450] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0118.450] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x265897c, cPoints=0x1 | out: lpPoints=0x265897c) returned 42533703 [0118.450] WindowFromPoint (Point=0x3d5) returned 0x201d0 [0118.450] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603d5) returned 0x1 [0118.450] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0118.450] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0118.450] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0118.450] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.450] GetSystemMetrics (nIndex=42) returned 0 [0118.450] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0118.450] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0118.450] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0118.450] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0118.450] GetCapture () returned 0x201d0 [0118.450] ReleaseCapture () returned 1 [0118.450] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0118.450] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0118.450] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603d5) returned 0x1 [0118.451] IsWindowUnicode (hWnd=0x201d0) returned 1 [0118.451] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0118.451] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603d5) returned 0x1 [0118.451] SetCursor (hCursor=0x10003) returned 0x10003 [0118.451] TranslateMessage (lpMsg=0x1ef250) returned 0 [0118.451] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0118.451] GetKeyState (nVirtKey=1) returned 0 [0118.451] GetKeyState (nVirtKey=2) returned 0 [0118.451] GetKeyState (nVirtKey=4) returned 0 [0118.451] GetKeyState (nVirtKey=5) returned 0 [0118.451] GetKeyState (nVirtKey=6) returned 0 [0118.451] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0118.451] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0118.451] WaitMessage () returned 1 [0121.498] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0121.499] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ad) returned 0x1 [0121.499] IsWindowUnicode (hWnd=0x201d0) returned 1 [0121.499] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0121.499] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ad) returned 0x1 [0121.499] SetCursor (hCursor=0x10003) returned 0x10003 [0121.499] TranslateMessage (lpMsg=0x1ef250) returned 0 [0121.499] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0121.499] GetKeyState (nVirtKey=1) returned 0 [0121.499] GetKeyState (nVirtKey=2) returned 0 [0121.499] GetKeyState (nVirtKey=4) returned 0 [0121.499] GetKeyState (nVirtKey=5) returned 0 [0121.499] GetKeyState (nVirtKey=6) returned 0 [0121.499] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0121.499] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0121.499] WaitMessage () returned 1 [0121.557] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0121.557] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ad) returned 0x1 [0121.557] IsWindowUnicode (hWnd=0x201d0) returned 1 [0121.557] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0121.557] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ad) returned 0x1 [0121.558] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0121.558] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e00268) returned 0x0 [0121.558] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0121.558] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0121.558] SetCursor (hCursor=0x10003) returned 0x10003 [0121.558] TranslateMessage (lpMsg=0x1ef250) returned 0 [0121.558] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0121.558] GetKeyState (nVirtKey=1) returned -127 [0121.558] GetKeyState (nVirtKey=2) returned 0 [0121.558] GetKeyState (nVirtKey=4) returned 0 [0121.558] GetKeyState (nVirtKey=5) returned 0 [0121.558] GetKeyState (nVirtKey=6) returned 0 [0121.558] IsWindowVisible (hWnd=0x201d0) returned 1 [0121.558] IsWindowEnabled (hWnd=0x201d0) returned 1 [0121.558] SetFocus (hWnd=0x201d0) returned 0x201d0 [0121.558] GetFocus () returned 0x201d0 [0121.558] GetFocus () returned 0x201d0 [0121.558] GetFocus () returned 0x201d0 [0121.558] GetKeyState (nVirtKey=1) returned -127 [0121.558] GetKeyState (nVirtKey=2) returned 0 [0121.558] GetKeyState (nVirtKey=4) returned 0 [0121.558] GetKeyState (nVirtKey=5) returned 0 [0121.558] GetKeyState (nVirtKey=6) returned 0 [0121.558] GetCapture () returned 0x0 [0121.558] SetCapture (hWnd=0x201d0) returned 0x0 [0121.559] GetKeyState (nVirtKey=1) returned -127 [0121.559] GetKeyState (nVirtKey=2) returned 0 [0121.559] GetKeyState (nVirtKey=4) returned 0 [0121.559] GetKeyState (nVirtKey=5) returned 0 [0121.559] GetKeyState (nVirtKey=6) returned 0 [0121.559] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0121.559] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0121.559] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0121.559] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0121.559] TranslateMessage (lpMsg=0x1ef250) returned 0 [0121.559] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0121.559] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0121.559] IsWindowUnicode (hWnd=0x201d0) returned 1 [0121.559] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0121.559] TranslateMessage (lpMsg=0x1ef250) returned 0 [0121.559] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0121.559] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2658aa0, cPoints=0x1 | out: lpPoints=0x2658aa0) returned 42533703 [0121.559] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0121.559] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0121.559] UpdateWindow (hWnd=0x201d0) returned 1 [0121.559] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0121.559] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0121.559] CreateCompatibleDC (hdc=0x120107ec) returned 0x1d0107cc [0121.559] SelectObject (hdc=0x1d0107cc, h=0x490500d1) returned 0x185000f [0121.560] GdipCreateFromHDC (hdc=0x1d0107cc, graphics=0x1eea5c) returned 0x0 [0121.560] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0121.560] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0121.560] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0121.560] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0121.560] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0121.560] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0121.560] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0121.560] LocalFree (hMem=0x416cb8) returned 0x0 [0121.560] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0121.560] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0121.560] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0121.560] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0121.560] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0121.560] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd4d0dbd) returned 0x0 [0121.560] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0121.560] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0121.560] GetCurrentObject (hdc=0x1d0107cc, type=0x1) returned 0x1b00017 [0121.560] GetCurrentObject (hdc=0x1d0107cc, type=0x2) returned 0x1900010 [0121.560] GetCurrentObject (hdc=0x1d0107cc, type=0x7) returned 0x490500d1 [0121.560] GetCurrentObject (hdc=0x1d0107cc, type=0x6) returned 0x18a002e [0121.561] SaveDC (hdc=0x1d0107cc) returned 1 [0121.561] GetNearestColor (hdc=0x1d0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0121.561] GetNearestColor (hdc=0x1d0107cc, color=0x515151) returned 0x515151 [0121.561] GetNearestColor (hdc=0x1d0107cc, color=0x0) returned 0x0 [0121.561] GetNearestColor (hdc=0x1d0107cc, color=0x515151) returned 0x515151 [0121.561] GetNearestColor (hdc=0x1d0107cc, color=0x0) returned 0x0 [0121.561] GetNearestColor (hdc=0x1d0107cc, color=0xfafafa) returned 0xfafafa [0121.561] GetNearestColor (hdc=0x1d0107cc, color=0xe0e0e0) returned 0xe0e0e0 [0121.561] GetNearestColor (hdc=0x1d0107cc, color=0xdcdcdc) returned 0xdcdcdc [0121.561] GetNearestColor (hdc=0x1d0107cc, color=0x0) returned 0x0 [0121.561] RestoreDC (hdc=0x1d0107cc, nSavedDC=-1) returned 1 [0121.561] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1d0107cc) returned 0x0 [0121.561] IsAppThemed () returned 0x1 [0121.561] GetThemeAppProperties () returned 0x3 [0121.561] GetThemeAppProperties () returned 0x3 [0121.561] IsAppThemed () returned 0x1 [0121.561] GetThemeAppProperties () returned 0x3 [0121.561] GetThemeAppProperties () returned 0x3 [0121.561] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26591a4 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0121.562] IsAppThemed () returned 0x1 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] IsAppThemed () returned 0x1 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] IsAppThemed () returned 0x1 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] IsAppThemed () returned 0x1 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] IsThemePartDefined () returned 0x1 [0121.562] IsAppThemed () returned 0x1 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0121.562] IsAppThemed () returned 0x1 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] IsAppThemed () returned 0x1 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] GetThemeAppProperties () returned 0x3 [0121.562] IsThemePartDefined () returned 0x1 [0121.562] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0121.562] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0121.562] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0121.562] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0121.562] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0121.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0121.562] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0121.562] LocalFree (hMem=0x416cb8) returned 0x0 [0121.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0121.563] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0121.563] LocalFree (hMem=0x416cb8) returned 0x0 [0121.563] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0121.563] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0121.563] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0121.563] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0121.563] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0121.563] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0121.563] GetCurrentObject (hdc=0x1d0107cc, type=0x1) returned 0x1b00017 [0121.563] GetCurrentObject (hdc=0x1d0107cc, type=0x2) returned 0x1900010 [0121.563] GetCurrentObject (hdc=0x1d0107cc, type=0x7) returned 0x490500d1 [0121.563] GetCurrentObject (hdc=0x1d0107cc, type=0x6) returned 0x18a002e [0121.563] SaveDC (hdc=0x1d0107cc) returned 1 [0121.563] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe8040813 [0121.563] GetClipRgn (hdc=0x1d0107cc, hrgn=0xe8040813) returned 0 [0121.563] SelectClipRgn (hdc=0x1d0107cc, hrgn=0xcc040246) returned 2 [0121.563] DeleteObject (ho=0xe8040813) returned 1 [0121.563] DeleteObject (ho=0xcc040246) returned 1 [0121.563] OffsetViewportOrgEx (in: hdc=0x1d0107cc, x=0, y=0, lppt=0x2659854 | out: lppt=0x2659854) returned 1 [0121.563] DrawThemeParentBackground () returned 0x0 [0121.564] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0121.564] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0121.564] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0121.564] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0121.564] GetSystemMetrics (nIndex=42) returned 0 [0121.564] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0121.564] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0121.564] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0121.564] GetCurrentObject (hdc=0x1d0107cc, type=0x1) returned 0x1b00017 [0121.564] GetCurrentObject (hdc=0x1d0107cc, type=0x2) returned 0x1900010 [0121.564] GetCurrentObject (hdc=0x1d0107cc, type=0x7) returned 0x490500d1 [0121.564] GetCurrentObject (hdc=0x1d0107cc, type=0x6) returned 0x18a002e [0121.564] SaveDC (hdc=0x1d0107cc) returned 2 [0121.564] GetNearestColor (hdc=0x1d0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0121.564] CreateSolidBrush (color=0xf5f5f5) returned 0x70100244 [0121.564] FillRect (hDC=0x1d0107cc, lprc=0x1ee2d0, hbr=0x70100244) returned 1 [0121.564] DeleteObject (ho=0x70100244) returned 1 [0121.564] RestoreDC (hdc=0x1d0107cc, nSavedDC=-1) returned 1 [0121.564] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0121.564] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0121.564] GetSystemMetrics (nIndex=42) returned 0 [0121.564] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0121.564] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0121.565] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0121.565] GetCurrentObject (hdc=0x1d0107cc, type=0x1) returned 0x1b00017 [0121.565] GetCurrentObject (hdc=0x1d0107cc, type=0x2) returned 0x1900010 [0121.565] GetCurrentObject (hdc=0x1d0107cc, type=0x7) returned 0x490500d1 [0121.565] GetCurrentObject (hdc=0x1d0107cc, type=0x6) returned 0x18a002e [0121.565] SaveDC (hdc=0x1d0107cc) returned 2 [0121.565] GetNearestColor (hdc=0x1d0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0121.565] CreateSolidBrush (color=0xf5f5f5) returned 0x71100244 [0121.565] FillRect (hDC=0x1d0107cc, lprc=0x1ee270, hbr=0x71100244) returned 1 [0121.565] DeleteObject (ho=0x71100244) returned 1 [0121.565] RestoreDC (hdc=0x1d0107cc, nSavedDC=-1) returned 1 [0121.565] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0121.565] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0121.565] GetSystemMetrics (nIndex=42) returned 0 [0121.565] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0121.565] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0121.565] RestoreDC (hdc=0x1d0107cc, nSavedDC=-1) returned 1 [0121.565] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1d0107cc) returned 0x0 [0121.565] IsAppThemed () returned 0x1 [0121.565] GetThemeAppProperties () returned 0x3 [0121.565] GetThemeAppProperties () returned 0x3 [0121.565] IsAppThemed () returned 0x1 [0121.565] GetThemeAppProperties () returned 0x3 [0121.565] GetThemeAppProperties () returned 0x3 [0121.566] IsThemePartDefined () returned 0x1 [0121.566] GdipCreateRegion (region=0x1ee764) returned 0x0 [0121.566] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0121.566] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0121.566] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0121.566] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0121.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0121.566] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0121.566] LocalFree (hMem=0x416cb8) returned 0x0 [0121.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0121.566] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0121.566] LocalFree (hMem=0x416cb8) returned 0x0 [0121.566] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0121.566] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0121.566] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0121.566] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0121.566] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0121.566] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0121.566] GetCurrentObject (hdc=0x1d0107cc, type=0x1) returned 0x1b00017 [0121.566] GetCurrentObject (hdc=0x1d0107cc, type=0x2) returned 0x1900010 [0121.566] GetCurrentObject (hdc=0x1d0107cc, type=0x7) returned 0x490500d1 [0121.566] GetCurrentObject (hdc=0x1d0107cc, type=0x6) returned 0x18a002e [0121.566] SaveDC (hdc=0x1d0107cc) returned 1 [0121.566] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcd040246 [0121.567] GetClipRgn (hdc=0x1d0107cc, hrgn=0xcd040246) returned 0 [0121.567] SelectClipRgn (hdc=0x1d0107cc, hrgn=0xea040813) returned 2 [0121.567] DeleteObject (ho=0xcd040246) returned 1 [0121.567] DeleteObject (ho=0xea040813) returned 1 [0121.567] OffsetViewportOrgEx (in: hdc=0x1d0107cc, x=0, y=0, lppt=0x265a094 | out: lppt=0x265a094) returned 1 [0121.567] IsAppThemed () returned 0x1 [0121.567] GetThemeAppProperties () returned 0x3 [0121.567] GetThemeAppProperties () returned 0x3 [0121.567] DrawThemeBackground () returned 0x0 [0121.567] RestoreDC (hdc=0x1d0107cc, nSavedDC=-1) returned 1 [0121.567] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1d0107cc) returned 0x0 [0121.567] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0121.567] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0121.567] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0121.567] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0121.567] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0121.567] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0121.567] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0121.567] LocalFree (hMem=0x416cb8) returned 0x0 [0121.567] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0121.567] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0121.567] LocalFree (hMem=0x416cb8) returned 0x0 [0121.568] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0121.568] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0121.568] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0121.568] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0121.568] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0121.568] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0121.568] GetCurrentObject (hdc=0x1d0107cc, type=0x1) returned 0x1b00017 [0121.568] GetCurrentObject (hdc=0x1d0107cc, type=0x2) returned 0x1900010 [0121.568] GetCurrentObject (hdc=0x1d0107cc, type=0x7) returned 0x490500d1 [0121.568] GetCurrentObject (hdc=0x1d0107cc, type=0x6) returned 0x18a002e [0121.568] SaveDC (hdc=0x1d0107cc) returned 1 [0121.568] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xeb040813 [0121.568] GetClipRgn (hdc=0x1d0107cc, hrgn=0xeb040813) returned 0 [0121.568] SelectClipRgn (hdc=0x1d0107cc, hrgn=0xce040246) returned 2 [0121.568] DeleteObject (ho=0xeb040813) returned 1 [0121.568] DeleteObject (ho=0xce040246) returned 1 [0121.568] OffsetViewportOrgEx (in: hdc=0x1d0107cc, x=0, y=0, lppt=0x265a368 | out: lppt=0x265a368) returned 1 [0121.568] IsAppThemed () returned 0x1 [0121.568] GetThemeAppProperties () returned 0x3 [0121.568] GetThemeAppProperties () returned 0x3 [0121.568] GetThemeBackgroundContentRect () returned 0x0 [0121.568] RestoreDC (hdc=0x1d0107cc, nSavedDC=-1) returned 1 [0121.568] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1d0107cc) returned 0x0 [0121.569] IsAppThemed () returned 0x1 [0121.569] GetThemeAppProperties () returned 0x3 [0121.569] GetThemeAppProperties () returned 0x3 [0121.569] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0121.569] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0121.569] GetCurrentObject (hdc=0x1d0107cc, type=0x1) returned 0x1b00017 [0121.569] GetCurrentObject (hdc=0x1d0107cc, type=0x2) returned 0x1900010 [0121.569] GetCurrentObject (hdc=0x1d0107cc, type=0x7) returned 0x490500d1 [0121.569] GetCurrentObject (hdc=0x1d0107cc, type=0x6) returned 0x18a002e [0121.569] SaveDC (hdc=0x1d0107cc) returned 1 [0121.569] GetTextAlign (hdc=0x1d0107cc) returned 0x0 [0121.569] GetTextColor (hdc=0x1d0107cc) returned 0x0 [0121.569] GetCurrentObject (hdc=0x1d0107cc, type=0x6) returned 0x18a002e [0121.569] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0121.569] SelectObject (hdc=0x1d0107cc, h=0x220a081a) returned 0x18a002e [0121.569] GetBkMode (hdc=0x1d0107cc) returned 2 [0121.569] SetBkMode (hdc=0x1d0107cc, mode=1) returned 2 [0121.569] DrawTextExW (in: hdc=0x1d0107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x265a6fc | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0121.569] DrawTextExW (in: hdc=0x1d0107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x265a6fc | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0121.570] RestoreDC (hdc=0x1d0107cc, nSavedDC=-1) returned 1 [0121.570] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1d0107cc) returned 0x0 [0121.570] GetFocus () returned 0x201d0 [0121.570] IsAppThemed () returned 0x1 [0121.570] GetThemeAppProperties () returned 0x3 [0121.570] GetThemeAppProperties () returned 0x3 [0121.570] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0121.570] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x1d0107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0121.570] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1d0107cc) returned 0x0 [0121.570] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0121.570] SelectObject (hdc=0x1d0107cc, h=0x185000f) returned 0x490500d1 [0121.570] DeleteDC (hdc=0x1d0107cc) returned 1 [0121.570] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0121.570] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0121.570] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x265a7f8, cPoints=0x1 | out: lpPoints=0x265a7f8) returned 42533703 [0121.570] WindowFromPoint (Point=0x3ad) returned 0x201d0 [0121.570] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ad) returned 0x1 [0121.570] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0121.570] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0121.570] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0121.571] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0121.571] GetSystemMetrics (nIndex=42) returned 0 [0121.571] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0121.571] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0121.571] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0121.571] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0121.571] GetCapture () returned 0x201d0 [0121.571] ReleaseCapture () returned 1 [0121.571] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0121.571] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0121.571] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ad) returned 0x1 [0121.571] IsWindowUnicode (hWnd=0x201d0) returned 1 [0121.571] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0121.571] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103ad) returned 0x1 [0121.571] SetCursor (hCursor=0x10003) returned 0x10003 [0121.571] TranslateMessage (lpMsg=0x1ef250) returned 0 [0121.571] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0121.571] GetKeyState (nVirtKey=1) returned 1 [0121.571] GetKeyState (nVirtKey=2) returned 0 [0121.571] GetKeyState (nVirtKey=4) returned 0 [0121.571] GetKeyState (nVirtKey=5) returned 0 [0121.571] GetKeyState (nVirtKey=6) returned 0 [0121.571] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0121.571] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0121.571] WaitMessage () returned 1 [0124.590] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0124.591] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930383) returned 0x1 [0124.591] IsWindowUnicode (hWnd=0x201d0) returned 1 [0124.591] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0124.591] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930383) returned 0x1 [0124.591] SetCursor (hCursor=0x10003) returned 0x10003 [0124.591] TranslateMessage (lpMsg=0x1ef250) returned 0 [0124.591] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0124.591] GetKeyState (nVirtKey=1) returned 1 [0124.591] GetKeyState (nVirtKey=2) returned 0 [0124.591] GetKeyState (nVirtKey=4) returned 0 [0124.591] GetKeyState (nVirtKey=5) returned 0 [0124.591] GetKeyState (nVirtKey=6) returned 0 [0124.591] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0124.591] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0124.591] WaitMessage () returned 1 [0124.650] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0124.650] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930383) returned 0x1 [0124.650] IsWindowUnicode (hWnd=0x201d0) returned 1 [0124.650] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0124.650] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930383) returned 0x1 [0124.651] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0124.652] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e2023e) returned 0x0 [0124.652] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0124.652] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0124.652] SetCursor (hCursor=0x10003) returned 0x10003 [0124.652] TranslateMessage (lpMsg=0x1ef250) returned 0 [0124.652] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0124.652] GetKeyState (nVirtKey=1) returned -128 [0124.652] GetKeyState (nVirtKey=2) returned 0 [0124.652] GetKeyState (nVirtKey=4) returned 0 [0124.652] GetKeyState (nVirtKey=5) returned 0 [0124.652] GetKeyState (nVirtKey=6) returned 0 [0124.652] IsWindowVisible (hWnd=0x201d0) returned 1 [0124.652] IsWindowEnabled (hWnd=0x201d0) returned 1 [0124.652] SetFocus (hWnd=0x201d0) returned 0x201d0 [0124.652] GetFocus () returned 0x201d0 [0124.652] GetFocus () returned 0x201d0 [0124.652] GetFocus () returned 0x201d0 [0124.652] GetKeyState (nVirtKey=1) returned -128 [0124.652] GetKeyState (nVirtKey=2) returned 0 [0124.652] GetKeyState (nVirtKey=4) returned 0 [0124.652] GetKeyState (nVirtKey=5) returned 0 [0124.653] GetKeyState (nVirtKey=6) returned 0 [0124.653] GetCapture () returned 0x0 [0124.653] SetCapture (hWnd=0x201d0) returned 0x0 [0124.653] GetKeyState (nVirtKey=1) returned -128 [0124.653] GetKeyState (nVirtKey=2) returned 0 [0124.653] GetKeyState (nVirtKey=4) returned 0 [0124.653] GetKeyState (nVirtKey=5) returned 0 [0124.653] GetKeyState (nVirtKey=6) returned 0 [0124.653] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0124.653] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0124.653] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0124.653] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0124.653] TranslateMessage (lpMsg=0x1ef250) returned 0 [0124.653] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0124.653] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0124.653] IsWindowUnicode (hWnd=0x201d0) returned 1 [0124.653] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0124.653] TranslateMessage (lpMsg=0x1ef250) returned 0 [0124.653] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0124.653] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x265a91c, cPoints=0x1 | out: lpPoints=0x265a91c) returned 42533703 [0124.653] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0124.653] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0124.654] UpdateWindow (hWnd=0x201d0) returned 1 [0124.654] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0124.654] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0124.654] CreateCompatibleDC (hdc=0x120107ec) returned 0x1e0107cc [0124.654] SelectObject (hdc=0x1e0107cc, h=0x490500d1) returned 0x185000f [0124.654] GdipCreateFromHDC (hdc=0x1e0107cc, graphics=0x1eea5c) returned 0x0 [0124.655] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0124.655] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0124.655] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0124.655] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0124.655] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0124.655] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0124.655] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0124.655] LocalFree (hMem=0x416cb8) returned 0x0 [0124.655] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0124.655] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0124.655] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0124.655] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0124.655] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0124.655] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd4b0dbd) returned 0x0 [0124.655] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0124.656] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0124.656] GetCurrentObject (hdc=0x1e0107cc, type=0x1) returned 0x1b00017 [0124.656] GetCurrentObject (hdc=0x1e0107cc, type=0x2) returned 0x1900010 [0124.656] GetCurrentObject (hdc=0x1e0107cc, type=0x7) returned 0x490500d1 [0124.656] GetCurrentObject (hdc=0x1e0107cc, type=0x6) returned 0x18a002e [0124.656] SaveDC (hdc=0x1e0107cc) returned 1 [0124.656] GetNearestColor (hdc=0x1e0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0124.656] GetNearestColor (hdc=0x1e0107cc, color=0x515151) returned 0x515151 [0124.656] GetNearestColor (hdc=0x1e0107cc, color=0x0) returned 0x0 [0124.656] GetNearestColor (hdc=0x1e0107cc, color=0x515151) returned 0x515151 [0124.656] GetNearestColor (hdc=0x1e0107cc, color=0x0) returned 0x0 [0124.656] GetNearestColor (hdc=0x1e0107cc, color=0xfafafa) returned 0xfafafa [0124.656] GetNearestColor (hdc=0x1e0107cc, color=0xe0e0e0) returned 0xe0e0e0 [0124.657] GetNearestColor (hdc=0x1e0107cc, color=0xdcdcdc) returned 0xdcdcdc [0124.657] GetNearestColor (hdc=0x1e0107cc, color=0x0) returned 0x0 [0124.657] RestoreDC (hdc=0x1e0107cc, nSavedDC=-1) returned 1 [0124.657] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1e0107cc) returned 0x0 [0124.657] IsAppThemed () returned 0x1 [0124.657] GetThemeAppProperties () returned 0x3 [0124.657] GetThemeAppProperties () returned 0x3 [0124.657] IsAppThemed () returned 0x1 [0124.657] GetThemeAppProperties () returned 0x3 [0124.657] GetThemeAppProperties () returned 0x3 [0124.657] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x265b020 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0124.658] IsAppThemed () returned 0x1 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] IsAppThemed () returned 0x1 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] IsAppThemed () returned 0x1 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] IsAppThemed () returned 0x1 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] IsThemePartDefined () returned 0x1 [0124.658] IsAppThemed () returned 0x1 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0124.658] IsAppThemed () returned 0x1 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] IsAppThemed () returned 0x1 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] GetThemeAppProperties () returned 0x3 [0124.658] IsThemePartDefined () returned 0x1 [0124.658] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0124.658] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0124.658] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0124.658] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0124.658] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0124.658] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0124.659] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0124.659] LocalFree (hMem=0x416cb8) returned 0x0 [0124.659] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0124.659] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0124.659] LocalFree (hMem=0x416cb8) returned 0x0 [0124.659] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0124.659] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0124.659] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0124.659] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0124.659] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0124.659] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0124.659] GetCurrentObject (hdc=0x1e0107cc, type=0x1) returned 0x1b00017 [0124.659] GetCurrentObject (hdc=0x1e0107cc, type=0x2) returned 0x1900010 [0124.659] GetCurrentObject (hdc=0x1e0107cc, type=0x7) returned 0x490500d1 [0124.659] GetCurrentObject (hdc=0x1e0107cc, type=0x6) returned 0x18a002e [0124.659] SaveDC (hdc=0x1e0107cc) returned 1 [0124.659] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcf040246 [0124.660] GetClipRgn (hdc=0x1e0107cc, hrgn=0xcf040246) returned 0 [0124.660] SelectClipRgn (hdc=0x1e0107cc, hrgn=0xef040813) returned 2 [0124.660] DeleteObject (ho=0xcf040246) returned 1 [0124.660] DeleteObject (ho=0xef040813) returned 1 [0124.660] OffsetViewportOrgEx (in: hdc=0x1e0107cc, x=0, y=0, lppt=0x265b6d0 | out: lppt=0x265b6d0) returned 1 [0124.660] DrawThemeParentBackground () returned 0x0 [0124.660] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0124.660] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0124.660] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0124.660] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0124.660] GetSystemMetrics (nIndex=42) returned 0 [0124.660] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0124.660] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0124.660] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0124.660] GetCurrentObject (hdc=0x1e0107cc, type=0x1) returned 0x1b00017 [0124.661] GetCurrentObject (hdc=0x1e0107cc, type=0x2) returned 0x1900010 [0124.661] GetCurrentObject (hdc=0x1e0107cc, type=0x7) returned 0x490500d1 [0124.661] GetCurrentObject (hdc=0x1e0107cc, type=0x6) returned 0x18a002e [0124.661] SaveDC (hdc=0x1e0107cc) returned 2 [0124.661] GetNearestColor (hdc=0x1e0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0124.661] CreateSolidBrush (color=0xf5f5f5) returned 0x72100244 [0124.661] FillRect (hDC=0x1e0107cc, lprc=0x1ee2d0, hbr=0x72100244) returned 1 [0124.661] DeleteObject (ho=0x72100244) returned 1 [0124.661] RestoreDC (hdc=0x1e0107cc, nSavedDC=-1) returned 1 [0124.661] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0124.662] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0124.662] GetSystemMetrics (nIndex=42) returned 0 [0124.662] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0124.662] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0124.662] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0124.662] GetCurrentObject (hdc=0x1e0107cc, type=0x1) returned 0x1b00017 [0124.662] GetCurrentObject (hdc=0x1e0107cc, type=0x2) returned 0x1900010 [0124.662] GetCurrentObject (hdc=0x1e0107cc, type=0x7) returned 0x490500d1 [0124.662] GetCurrentObject (hdc=0x1e0107cc, type=0x6) returned 0x18a002e [0124.662] SaveDC (hdc=0x1e0107cc) returned 2 [0124.662] GetNearestColor (hdc=0x1e0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0124.662] CreateSolidBrush (color=0xf5f5f5) returned 0x73100244 [0124.662] FillRect (hDC=0x1e0107cc, lprc=0x1ee270, hbr=0x73100244) returned 1 [0124.662] DeleteObject (ho=0x73100244) returned 1 [0124.662] RestoreDC (hdc=0x1e0107cc, nSavedDC=-1) returned 1 [0124.662] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0124.662] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0124.662] GetSystemMetrics (nIndex=42) returned 0 [0124.662] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0124.663] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0124.663] RestoreDC (hdc=0x1e0107cc, nSavedDC=-1) returned 1 [0124.663] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1e0107cc) returned 0x0 [0124.663] IsAppThemed () returned 0x1 [0124.663] GetThemeAppProperties () returned 0x3 [0124.663] GetThemeAppProperties () returned 0x3 [0124.663] IsAppThemed () returned 0x1 [0124.663] GetThemeAppProperties () returned 0x3 [0124.663] GetThemeAppProperties () returned 0x3 [0124.663] IsThemePartDefined () returned 0x1 [0124.663] GdipCreateRegion (region=0x1ee764) returned 0x0 [0124.663] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0124.663] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0124.663] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0124.663] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0124.663] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0124.663] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0124.663] LocalFree (hMem=0x416cb8) returned 0x0 [0124.663] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0124.664] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0124.664] LocalFree (hMem=0x416cb8) returned 0x0 [0124.664] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0124.664] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0124.664] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0124.664] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0124.664] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0124.664] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0124.664] GetCurrentObject (hdc=0x1e0107cc, type=0x1) returned 0x1b00017 [0124.664] GetCurrentObject (hdc=0x1e0107cc, type=0x2) returned 0x1900010 [0124.664] GetCurrentObject (hdc=0x1e0107cc, type=0x7) returned 0x490500d1 [0124.664] GetCurrentObject (hdc=0x1e0107cc, type=0x6) returned 0x18a002e [0124.664] SaveDC (hdc=0x1e0107cc) returned 1 [0124.664] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf0040813 [0124.664] GetClipRgn (hdc=0x1e0107cc, hrgn=0xf0040813) returned 0 [0124.664] SelectClipRgn (hdc=0x1e0107cc, hrgn=0xd1040246) returned 2 [0124.664] DeleteObject (ho=0xf0040813) returned 1 [0124.665] DeleteObject (ho=0xd1040246) returned 1 [0124.665] OffsetViewportOrgEx (in: hdc=0x1e0107cc, x=0, y=0, lppt=0x265bf10 | out: lppt=0x265bf10) returned 1 [0124.665] IsAppThemed () returned 0x1 [0124.665] GetThemeAppProperties () returned 0x3 [0124.665] GetThemeAppProperties () returned 0x3 [0124.665] DrawThemeBackground () returned 0x0 [0124.665] RestoreDC (hdc=0x1e0107cc, nSavedDC=-1) returned 1 [0124.665] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1e0107cc) returned 0x0 [0124.665] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0124.665] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0124.665] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0124.665] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0124.665] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0124.665] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0124.665] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0124.666] LocalFree (hMem=0x416cb8) returned 0x0 [0124.666] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0124.666] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0124.666] LocalFree (hMem=0x416cb8) returned 0x0 [0124.666] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0124.666] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0124.666] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0124.666] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0124.666] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0124.666] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0124.666] GetCurrentObject (hdc=0x1e0107cc, type=0x1) returned 0x1b00017 [0124.666] GetCurrentObject (hdc=0x1e0107cc, type=0x2) returned 0x1900010 [0124.666] GetCurrentObject (hdc=0x1e0107cc, type=0x7) returned 0x490500d1 [0124.666] GetCurrentObject (hdc=0x1e0107cc, type=0x6) returned 0x18a002e [0124.666] SaveDC (hdc=0x1e0107cc) returned 1 [0124.666] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd2040246 [0124.666] GetClipRgn (hdc=0x1e0107cc, hrgn=0xd2040246) returned 0 [0124.666] SelectClipRgn (hdc=0x1e0107cc, hrgn=0xf1040813) returned 2 [0124.667] DeleteObject (ho=0xd2040246) returned 1 [0124.667] DeleteObject (ho=0xf1040813) returned 1 [0124.667] OffsetViewportOrgEx (in: hdc=0x1e0107cc, x=0, y=0, lppt=0x265c1e4 | out: lppt=0x265c1e4) returned 1 [0124.667] IsAppThemed () returned 0x1 [0124.667] GetThemeAppProperties () returned 0x3 [0124.667] GetThemeAppProperties () returned 0x3 [0124.667] GetThemeBackgroundContentRect () returned 0x0 [0124.667] RestoreDC (hdc=0x1e0107cc, nSavedDC=-1) returned 1 [0124.667] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1e0107cc) returned 0x0 [0124.667] IsAppThemed () returned 0x1 [0124.667] GetThemeAppProperties () returned 0x3 [0124.667] GetThemeAppProperties () returned 0x3 [0124.667] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0124.667] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0124.667] GetCurrentObject (hdc=0x1e0107cc, type=0x1) returned 0x1b00017 [0124.667] GetCurrentObject (hdc=0x1e0107cc, type=0x2) returned 0x1900010 [0124.667] GetCurrentObject (hdc=0x1e0107cc, type=0x7) returned 0x490500d1 [0124.667] GetCurrentObject (hdc=0x1e0107cc, type=0x6) returned 0x18a002e [0124.667] SaveDC (hdc=0x1e0107cc) returned 1 [0124.668] GetTextAlign (hdc=0x1e0107cc) returned 0x0 [0124.668] GetTextColor (hdc=0x1e0107cc) returned 0x0 [0124.668] GetCurrentObject (hdc=0x1e0107cc, type=0x6) returned 0x18a002e [0124.668] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0124.668] SelectObject (hdc=0x1e0107cc, h=0x220a081a) returned 0x18a002e [0124.668] GetBkMode (hdc=0x1e0107cc) returned 2 [0124.668] SetBkMode (hdc=0x1e0107cc, mode=1) returned 2 [0124.668] DrawTextExW (in: hdc=0x1e0107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x265c578 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0124.668] DrawTextExW (in: hdc=0x1e0107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x265c578 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0124.669] RestoreDC (hdc=0x1e0107cc, nSavedDC=-1) returned 1 [0124.669] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1e0107cc) returned 0x0 [0124.669] GetFocus () returned 0x201d0 [0124.669] IsAppThemed () returned 0x1 [0124.669] GetThemeAppProperties () returned 0x3 [0124.669] GetThemeAppProperties () returned 0x3 [0124.669] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0124.669] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x1e0107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0124.670] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1e0107cc) returned 0x0 [0124.670] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0124.670] SelectObject (hdc=0x1e0107cc, h=0x185000f) returned 0x490500d1 [0124.670] DeleteDC (hdc=0x1e0107cc) returned 1 [0124.670] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0124.670] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0124.670] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x265c674, cPoints=0x1 | out: lpPoints=0x265c674) returned 42533703 [0124.670] WindowFromPoint (Point=0x383) returned 0x201d0 [0124.670] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930383) returned 0x1 [0124.670] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0124.670] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0124.670] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0124.670] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.671] GetSystemMetrics (nIndex=42) returned 0 [0124.671] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0124.671] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0124.671] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0124.671] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0124.671] GetCapture () returned 0x201d0 [0124.671] ReleaseCapture () returned 1 [0124.671] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0124.671] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0124.671] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930383) returned 0x1 [0124.671] IsWindowUnicode (hWnd=0x201d0) returned 1 [0124.671] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0124.671] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930383) returned 0x1 [0124.671] SetCursor (hCursor=0x10003) returned 0x10003 [0124.671] TranslateMessage (lpMsg=0x1ef250) returned 0 [0124.671] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0124.671] GetKeyState (nVirtKey=1) returned 0 [0124.672] GetKeyState (nVirtKey=2) returned 0 [0124.672] GetKeyState (nVirtKey=4) returned 0 [0124.672] GetKeyState (nVirtKey=5) returned 0 [0124.672] GetKeyState (nVirtKey=6) returned 0 [0124.672] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0124.672] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0124.672] WaitMessage () returned 1 [0127.600] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0127.601] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0127.602] IsWindowUnicode (hWnd=0x201d0) returned 1 [0127.602] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0127.602] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0127.602] SetCursor (hCursor=0x10003) returned 0x10003 [0127.602] TranslateMessage (lpMsg=0x1ef250) returned 0 [0127.602] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0127.602] GetKeyState (nVirtKey=1) returned 0 [0127.602] GetKeyState (nVirtKey=2) returned 0 [0127.602] GetKeyState (nVirtKey=4) returned 0 [0127.602] GetKeyState (nVirtKey=5) returned 0 [0127.602] GetKeyState (nVirtKey=6) returned 0 [0127.602] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0127.603] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0127.603] WaitMessage () returned 1 [0127.692] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0127.692] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0127.692] IsWindowUnicode (hWnd=0x201d0) returned 1 [0127.692] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0127.692] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0127.692] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0127.693] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e30253) returned 0x0 [0127.694] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0127.694] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0127.694] SetCursor (hCursor=0x10003) returned 0x10003 [0127.694] TranslateMessage (lpMsg=0x1ef250) returned 0 [0127.694] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0127.694] GetKeyState (nVirtKey=1) returned -127 [0127.694] GetKeyState (nVirtKey=2) returned 0 [0127.694] GetKeyState (nVirtKey=4) returned 0 [0127.694] GetKeyState (nVirtKey=5) returned 0 [0127.694] GetKeyState (nVirtKey=6) returned 0 [0127.694] IsWindowVisible (hWnd=0x201d0) returned 1 [0127.694] IsWindowEnabled (hWnd=0x201d0) returned 1 [0127.694] SetFocus (hWnd=0x201d0) returned 0x201d0 [0127.694] GetFocus () returned 0x201d0 [0127.694] GetFocus () returned 0x201d0 [0127.694] GetFocus () returned 0x201d0 [0127.695] GetKeyState (nVirtKey=1) returned -127 [0127.695] GetKeyState (nVirtKey=2) returned 0 [0127.695] GetKeyState (nVirtKey=4) returned 0 [0127.695] GetKeyState (nVirtKey=5) returned 0 [0127.695] GetKeyState (nVirtKey=6) returned 0 [0127.695] GetCapture () returned 0x0 [0127.695] SetCapture (hWnd=0x201d0) returned 0x0 [0127.695] GetKeyState (nVirtKey=1) returned -127 [0127.695] GetKeyState (nVirtKey=2) returned 0 [0127.695] GetKeyState (nVirtKey=4) returned 0 [0127.695] GetKeyState (nVirtKey=5) returned 0 [0127.695] GetKeyState (nVirtKey=6) returned 0 [0127.695] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0127.695] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0127.695] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0127.695] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0127.695] TranslateMessage (lpMsg=0x1ef250) returned 0 [0127.695] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0127.695] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0127.695] IsWindowUnicode (hWnd=0x201d0) returned 1 [0127.695] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0127.695] TranslateMessage (lpMsg=0x1ef250) returned 0 [0127.695] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0127.695] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x265c798, cPoints=0x1 | out: lpPoints=0x265c798) returned 42533703 [0127.696] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0127.696] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0127.696] UpdateWindow (hWnd=0x201d0) returned 1 [0127.696] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x120107ec [0127.696] SelectPalette (hdc=0x120107ec, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0127.696] CreateCompatibleDC (hdc=0x120107ec) returned 0x1f0107cc [0127.696] SelectObject (hdc=0x1f0107cc, h=0x490500d1) returned 0x185000f [0127.697] GdipCreateFromHDC (hdc=0x1f0107cc, graphics=0x1eea5c) returned 0x0 [0127.698] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0127.698] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0127.698] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0127.698] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0127.698] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0127.698] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0127.698] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0127.698] LocalFree (hMem=0x416cb8) returned 0x0 [0127.698] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0127.698] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0127.699] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0127.699] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0127.699] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0127.699] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd490dbd) returned 0x0 [0127.699] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0127.699] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0127.699] GetCurrentObject (hdc=0x1f0107cc, type=0x1) returned 0x1b00017 [0127.699] GetCurrentObject (hdc=0x1f0107cc, type=0x2) returned 0x1900010 [0127.699] GetCurrentObject (hdc=0x1f0107cc, type=0x7) returned 0x490500d1 [0127.699] GetCurrentObject (hdc=0x1f0107cc, type=0x6) returned 0x18a002e [0127.700] SaveDC (hdc=0x1f0107cc) returned 1 [0127.700] GetNearestColor (hdc=0x1f0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0127.700] GetNearestColor (hdc=0x1f0107cc, color=0x515151) returned 0x515151 [0127.700] GetNearestColor (hdc=0x1f0107cc, color=0x0) returned 0x0 [0127.700] GetNearestColor (hdc=0x1f0107cc, color=0x515151) returned 0x515151 [0127.700] GetNearestColor (hdc=0x1f0107cc, color=0x0) returned 0x0 [0127.700] GetNearestColor (hdc=0x1f0107cc, color=0xfafafa) returned 0xfafafa [0127.700] GetNearestColor (hdc=0x1f0107cc, color=0xe0e0e0) returned 0xe0e0e0 [0127.700] GetNearestColor (hdc=0x1f0107cc, color=0xdcdcdc) returned 0xdcdcdc [0127.700] GetNearestColor (hdc=0x1f0107cc, color=0x0) returned 0x0 [0127.700] RestoreDC (hdc=0x1f0107cc, nSavedDC=-1) returned 1 [0127.700] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1f0107cc) returned 0x0 [0127.701] IsAppThemed () returned 0x1 [0127.701] GetThemeAppProperties () returned 0x3 [0127.701] GetThemeAppProperties () returned 0x3 [0127.701] IsAppThemed () returned 0x1 [0127.701] GetThemeAppProperties () returned 0x3 [0127.701] GetThemeAppProperties () returned 0x3 [0127.701] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x265ce9c | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0127.702] IsAppThemed () returned 0x1 [0127.702] GetThemeAppProperties () returned 0x3 [0127.702] GetThemeAppProperties () returned 0x3 [0127.702] IsAppThemed () returned 0x1 [0127.702] GetThemeAppProperties () returned 0x3 [0127.702] GetThemeAppProperties () returned 0x3 [0127.702] IsAppThemed () returned 0x1 [0127.702] GetThemeAppProperties () returned 0x3 [0127.702] GetThemeAppProperties () returned 0x3 [0127.702] IsAppThemed () returned 0x1 [0127.702] GetThemeAppProperties () returned 0x3 [0127.702] GetThemeAppProperties () returned 0x3 [0127.702] IsThemePartDefined () returned 0x1 [0127.703] IsAppThemed () returned 0x1 [0127.703] GetThemeAppProperties () returned 0x3 [0127.703] GetThemeAppProperties () returned 0x3 [0127.703] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0127.703] IsAppThemed () returned 0x1 [0127.703] GetThemeAppProperties () returned 0x3 [0127.703] GetThemeAppProperties () returned 0x3 [0127.703] IsAppThemed () returned 0x1 [0127.703] GetThemeAppProperties () returned 0x3 [0127.703] GetThemeAppProperties () returned 0x3 [0127.703] IsThemePartDefined () returned 0x1 [0127.703] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0127.703] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0127.703] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0127.703] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0127.703] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0127.703] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0127.703] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0127.703] LocalFree (hMem=0x416cb8) returned 0x0 [0127.703] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0127.703] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0127.703] LocalFree (hMem=0x416cb8) returned 0x0 [0127.703] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0127.703] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0127.703] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0127.704] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0127.704] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0127.704] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0127.704] GetCurrentObject (hdc=0x1f0107cc, type=0x1) returned 0x1b00017 [0127.704] GetCurrentObject (hdc=0x1f0107cc, type=0x2) returned 0x1900010 [0127.704] GetCurrentObject (hdc=0x1f0107cc, type=0x7) returned 0x490500d1 [0127.704] GetCurrentObject (hdc=0x1f0107cc, type=0x6) returned 0x18a002e [0127.704] SaveDC (hdc=0x1f0107cc) returned 1 [0127.704] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf2040813 [0127.704] GetClipRgn (hdc=0x1f0107cc, hrgn=0xf2040813) returned 0 [0127.704] SelectClipRgn (hdc=0x1f0107cc, hrgn=0xd6040246) returned 2 [0127.704] DeleteObject (ho=0xf2040813) returned 1 [0127.704] DeleteObject (ho=0xd6040246) returned 1 [0127.704] OffsetViewportOrgEx (in: hdc=0x1f0107cc, x=0, y=0, lppt=0x265d54c | out: lppt=0x265d54c) returned 1 [0127.704] DrawThemeParentBackground () returned 0x0 [0127.704] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0127.704] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0127.704] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0127.705] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0127.705] GetSystemMetrics (nIndex=42) returned 0 [0127.705] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0127.705] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0127.705] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0127.705] GetCurrentObject (hdc=0x1f0107cc, type=0x1) returned 0x1b00017 [0127.705] GetCurrentObject (hdc=0x1f0107cc, type=0x2) returned 0x1900010 [0127.705] GetCurrentObject (hdc=0x1f0107cc, type=0x7) returned 0x490500d1 [0127.705] GetCurrentObject (hdc=0x1f0107cc, type=0x6) returned 0x18a002e [0127.705] SaveDC (hdc=0x1f0107cc) returned 2 [0127.705] GetNearestColor (hdc=0x1f0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0127.705] CreateSolidBrush (color=0xf5f5f5) returned 0x74100244 [0127.705] FillRect (hDC=0x1f0107cc, lprc=0x1ee2d0, hbr=0x74100244) returned 1 [0127.705] DeleteObject (ho=0x74100244) returned 1 [0127.705] RestoreDC (hdc=0x1f0107cc, nSavedDC=-1) returned 1 [0127.705] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0127.706] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0127.706] GetSystemMetrics (nIndex=42) returned 0 [0127.706] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0127.706] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0127.706] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0127.706] GetCurrentObject (hdc=0x1f0107cc, type=0x1) returned 0x1b00017 [0127.706] GetCurrentObject (hdc=0x1f0107cc, type=0x2) returned 0x1900010 [0127.706] GetCurrentObject (hdc=0x1f0107cc, type=0x7) returned 0x490500d1 [0127.706] GetCurrentObject (hdc=0x1f0107cc, type=0x6) returned 0x18a002e [0127.706] SaveDC (hdc=0x1f0107cc) returned 2 [0127.706] GetNearestColor (hdc=0x1f0107cc, color=0xf5f5f5) returned 0xf5f5f5 [0127.706] CreateSolidBrush (color=0xf5f5f5) returned 0x75100244 [0127.706] FillRect (hDC=0x1f0107cc, lprc=0x1ee270, hbr=0x75100244) returned 1 [0127.706] DeleteObject (ho=0x75100244) returned 1 [0127.706] RestoreDC (hdc=0x1f0107cc, nSavedDC=-1) returned 1 [0127.706] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0127.706] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0127.706] GetSystemMetrics (nIndex=42) returned 0 [0127.706] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0127.706] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0127.706] RestoreDC (hdc=0x1f0107cc, nSavedDC=-1) returned 1 [0127.706] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1f0107cc) returned 0x0 [0127.706] IsAppThemed () returned 0x1 [0127.707] GetThemeAppProperties () returned 0x3 [0127.707] GetThemeAppProperties () returned 0x3 [0127.707] IsAppThemed () returned 0x1 [0127.707] GetThemeAppProperties () returned 0x3 [0127.707] GetThemeAppProperties () returned 0x3 [0127.707] IsThemePartDefined () returned 0x1 [0127.707] GdipCreateRegion (region=0x1ee764) returned 0x0 [0127.707] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0127.707] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0127.707] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0127.707] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0127.707] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0127.707] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0127.707] LocalFree (hMem=0x416cb8) returned 0x0 [0127.707] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0127.707] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0127.707] LocalFree (hMem=0x416cb8) returned 0x0 [0127.707] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0127.707] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0127.707] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0127.707] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0127.707] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0127.707] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0127.707] GetCurrentObject (hdc=0x1f0107cc, type=0x1) returned 0x1b00017 [0127.707] GetCurrentObject (hdc=0x1f0107cc, type=0x2) returned 0x1900010 [0127.707] GetCurrentObject (hdc=0x1f0107cc, type=0x7) returned 0x490500d1 [0127.708] GetCurrentObject (hdc=0x1f0107cc, type=0x6) returned 0x18a002e [0127.708] SaveDC (hdc=0x1f0107cc) returned 1 [0127.708] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd7040246 [0127.708] GetClipRgn (hdc=0x1f0107cc, hrgn=0xd7040246) returned 0 [0127.708] SelectClipRgn (hdc=0x1f0107cc, hrgn=0xf4040813) returned 2 [0127.708] DeleteObject (ho=0xd7040246) returned 1 [0127.708] DeleteObject (ho=0xf4040813) returned 1 [0127.708] OffsetViewportOrgEx (in: hdc=0x1f0107cc, x=0, y=0, lppt=0x265dd8c | out: lppt=0x265dd8c) returned 1 [0127.708] IsAppThemed () returned 0x1 [0127.708] GetThemeAppProperties () returned 0x3 [0127.708] GetThemeAppProperties () returned 0x3 [0127.708] DrawThemeBackground () returned 0x0 [0127.708] RestoreDC (hdc=0x1f0107cc, nSavedDC=-1) returned 1 [0127.708] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1f0107cc) returned 0x0 [0127.708] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0127.708] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0127.708] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0127.708] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0127.708] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0127.708] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0127.709] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0127.709] LocalFree (hMem=0x416cb8) returned 0x0 [0127.709] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0127.709] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0127.709] LocalFree (hMem=0x416cb8) returned 0x0 [0127.709] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0127.709] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0127.709] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0127.709] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0127.709] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0127.709] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0127.709] GetCurrentObject (hdc=0x1f0107cc, type=0x1) returned 0x1b00017 [0127.709] GetCurrentObject (hdc=0x1f0107cc, type=0x2) returned 0x1900010 [0127.709] GetCurrentObject (hdc=0x1f0107cc, type=0x7) returned 0x490500d1 [0127.709] GetCurrentObject (hdc=0x1f0107cc, type=0x6) returned 0x18a002e [0127.709] SaveDC (hdc=0x1f0107cc) returned 1 [0127.709] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf5040813 [0127.709] GetClipRgn (hdc=0x1f0107cc, hrgn=0xf5040813) returned 0 [0127.709] SelectClipRgn (hdc=0x1f0107cc, hrgn=0xd8040246) returned 2 [0127.709] DeleteObject (ho=0xf5040813) returned 1 [0127.709] DeleteObject (ho=0xd8040246) returned 1 [0127.709] OffsetViewportOrgEx (in: hdc=0x1f0107cc, x=0, y=0, lppt=0x265e060 | out: lppt=0x265e060) returned 1 [0127.709] IsAppThemed () returned 0x1 [0127.709] GetThemeAppProperties () returned 0x3 [0127.710] GetThemeAppProperties () returned 0x3 [0127.710] GetThemeBackgroundContentRect () returned 0x0 [0127.710] RestoreDC (hdc=0x1f0107cc, nSavedDC=-1) returned 1 [0127.710] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1f0107cc) returned 0x0 [0127.710] IsAppThemed () returned 0x1 [0127.710] GetThemeAppProperties () returned 0x3 [0127.710] GetThemeAppProperties () returned 0x3 [0127.710] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0127.710] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0127.710] GetCurrentObject (hdc=0x1f0107cc, type=0x1) returned 0x1b00017 [0127.710] GetCurrentObject (hdc=0x1f0107cc, type=0x2) returned 0x1900010 [0127.710] GetCurrentObject (hdc=0x1f0107cc, type=0x7) returned 0x490500d1 [0127.710] GetCurrentObject (hdc=0x1f0107cc, type=0x6) returned 0x18a002e [0127.710] SaveDC (hdc=0x1f0107cc) returned 1 [0127.710] GetTextAlign (hdc=0x1f0107cc) returned 0x0 [0127.710] GetTextColor (hdc=0x1f0107cc) returned 0x0 [0127.710] GetCurrentObject (hdc=0x1f0107cc, type=0x6) returned 0x18a002e [0127.710] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0127.710] SelectObject (hdc=0x1f0107cc, h=0x220a081a) returned 0x18a002e [0127.710] GetBkMode (hdc=0x1f0107cc) returned 2 [0127.711] SetBkMode (hdc=0x1f0107cc, mode=1) returned 2 [0127.711] DrawTextExW (in: hdc=0x1f0107cc, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x265e3f4 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0127.711] DrawTextExW (in: hdc=0x1f0107cc, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x265e3f4 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0127.711] RestoreDC (hdc=0x1f0107cc, nSavedDC=-1) returned 1 [0127.711] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1f0107cc) returned 0x0 [0127.711] GetFocus () returned 0x201d0 [0127.711] IsAppThemed () returned 0x1 [0127.711] GetThemeAppProperties () returned 0x3 [0127.711] GetThemeAppProperties () returned 0x3 [0127.711] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0127.711] BitBlt (hdc=0x120107ec, x=0, y=0, cx=231, cy=23, hdcSrc=0x1f0107cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0127.711] GdipReleaseDC (graphics=0x504fbc8, hdc=0x1f0107cc) returned 0x0 [0127.711] SelectPalette (hdc=0x120107ec, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0127.711] SelectObject (hdc=0x1f0107cc, h=0x185000f) returned 0x490500d1 [0127.712] DeleteDC (hdc=0x1f0107cc) returned 1 [0127.712] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0127.712] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0127.712] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x265e4f0, cPoints=0x1 | out: lpPoints=0x265e4f0) returned 42533703 [0127.712] WindowFromPoint (Point=0x398) returned 0x201d0 [0127.712] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0127.712] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0127.712] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0127.712] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0127.712] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0127.712] GetSystemMetrics (nIndex=42) returned 0 [0127.712] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0127.712] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0127.712] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0127.712] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0127.713] GetCapture () returned 0x201d0 [0127.713] ReleaseCapture () returned 1 [0127.713] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0127.713] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0127.713] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0127.713] IsWindowUnicode (hWnd=0x201d0) returned 1 [0127.713] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0127.713] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0127.713] SetCursor (hCursor=0x10003) returned 0x10003 [0127.713] TranslateMessage (lpMsg=0x1ef250) returned 0 [0127.713] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0127.713] GetKeyState (nVirtKey=1) returned 1 [0127.713] GetKeyState (nVirtKey=2) returned 0 [0127.713] GetKeyState (nVirtKey=4) returned 0 [0127.713] GetKeyState (nVirtKey=5) returned 0 [0127.713] GetKeyState (nVirtKey=6) returned 0 [0127.713] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0127.713] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0127.713] WaitMessage () returned 1 [0129.750] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.751] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.751] IsWindowUnicode (hWnd=0x201d0) returned 1 [0129.751] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.751] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.751] SetCursor (hCursor=0x10003) returned 0x10003 [0129.751] TranslateMessage (lpMsg=0x1ef250) returned 0 [0129.751] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0129.751] GetKeyState (nVirtKey=1) returned 1 [0129.751] GetKeyState (nVirtKey=2) returned 0 [0129.751] GetKeyState (nVirtKey=4) returned 0 [0129.751] GetKeyState (nVirtKey=5) returned 0 [0129.751] GetKeyState (nVirtKey=6) returned 0 [0129.751] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.751] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.751] WaitMessage () returned 1 [0129.753] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.753] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.753] IsWindowUnicode (hWnd=0x201d0) returned 1 [0129.753] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.753] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.753] SetCursor (hCursor=0x10003) returned 0x10003 [0129.753] TranslateMessage (lpMsg=0x1ef250) returned 0 [0129.753] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0129.753] GetKeyState (nVirtKey=1) returned 1 [0129.753] GetKeyState (nVirtKey=2) returned 0 [0129.753] GetKeyState (nVirtKey=4) returned 0 [0129.753] GetKeyState (nVirtKey=5) returned 0 [0129.753] GetKeyState (nVirtKey=6) returned 0 [0129.753] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.753] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.753] WaitMessage () returned 1 [0129.754] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.754] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.754] IsWindowUnicode (hWnd=0x201d0) returned 1 [0129.754] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.754] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.754] SetCursor (hCursor=0x10003) returned 0x10003 [0129.754] TranslateMessage (lpMsg=0x1ef250) returned 0 [0129.754] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0129.754] GetKeyState (nVirtKey=1) returned 1 [0129.754] GetKeyState (nVirtKey=2) returned 0 [0129.754] GetKeyState (nVirtKey=4) returned 0 [0129.754] GetKeyState (nVirtKey=5) returned 0 [0129.754] GetKeyState (nVirtKey=6) returned 0 [0129.754] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.754] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.754] WaitMessage () returned 1 [0129.755] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.755] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.755] IsWindowUnicode (hWnd=0x201d0) returned 1 [0129.755] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.755] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.755] SetCursor (hCursor=0x10003) returned 0x10003 [0129.755] TranslateMessage (lpMsg=0x1ef250) returned 0 [0129.755] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0129.755] GetKeyState (nVirtKey=1) returned 1 [0129.755] GetKeyState (nVirtKey=2) returned 0 [0129.755] GetKeyState (nVirtKey=4) returned 0 [0129.756] GetKeyState (nVirtKey=5) returned 0 [0129.756] GetKeyState (nVirtKey=6) returned 0 [0129.756] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.756] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.756] WaitMessage () returned 1 [0129.756] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.756] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.756] IsWindowUnicode (hWnd=0x201d0) returned 1 [0129.756] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.756] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.756] SetCursor (hCursor=0x10003) returned 0x10003 [0129.756] TranslateMessage (lpMsg=0x1ef250) returned 0 [0129.756] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0129.756] GetKeyState (nVirtKey=1) returned 1 [0129.756] GetKeyState (nVirtKey=2) returned 0 [0129.756] GetKeyState (nVirtKey=4) returned 0 [0129.756] GetKeyState (nVirtKey=5) returned 0 [0129.756] GetKeyState (nVirtKey=6) returned 0 [0129.756] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.756] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.757] WaitMessage () returned 1 [0129.757] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.757] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.757] IsWindowUnicode (hWnd=0x201d0) returned 1 [0129.757] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.757] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.757] SetCursor (hCursor=0x10003) returned 0x10003 [0129.757] TranslateMessage (lpMsg=0x1ef250) returned 0 [0129.757] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0129.757] GetKeyState (nVirtKey=1) returned 1 [0129.757] GetKeyState (nVirtKey=2) returned 0 [0129.757] GetKeyState (nVirtKey=4) returned 0 [0129.757] GetKeyState (nVirtKey=5) returned 0 [0129.757] GetKeyState (nVirtKey=6) returned 0 [0129.757] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.757] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.757] WaitMessage () returned 1 [0129.761] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.761] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.761] IsWindowUnicode (hWnd=0x201d0) returned 1 [0129.761] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0129.761] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2940398) returned 0x1 [0129.761] SetCursor (hCursor=0x10003) returned 0x10003 [0129.762] TranslateMessage (lpMsg=0x1ef250) returned 0 [0129.762] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0129.762] GetKeyState (nVirtKey=1) returned 1 [0129.762] GetKeyState (nVirtKey=2) returned 0 [0129.762] GetKeyState (nVirtKey=4) returned 0 [0129.762] GetKeyState (nVirtKey=5) returned 0 [0129.762] GetKeyState (nVirtKey=6) returned 0 [0129.762] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.762] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0129.762] WaitMessage () returned 1 [0130.740] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0130.740] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103e1) returned 0x1 [0130.740] IsWindowUnicode (hWnd=0x201d0) returned 1 [0130.740] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0130.740] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103e1) returned 0x1 [0130.740] SetCursor (hCursor=0x10003) returned 0x10003 [0130.740] TranslateMessage (lpMsg=0x1ef250) returned 0 [0130.740] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0130.740] GetKeyState (nVirtKey=1) returned 1 [0130.740] GetKeyState (nVirtKey=2) returned 0 [0130.740] GetKeyState (nVirtKey=4) returned 0 [0130.740] GetKeyState (nVirtKey=5) returned 0 [0130.740] GetKeyState (nVirtKey=6) returned 0 [0130.741] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0130.741] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0130.741] WaitMessage () returned 1 [0130.793] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0130.793] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103e1) returned 0x1 [0130.793] IsWindowUnicode (hWnd=0x201d0) returned 1 [0130.793] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0130.793] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103e1) returned 0x1 [0130.793] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0130.793] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e0029c) returned 0x0 [0130.793] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0130.793] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0130.793] SetCursor (hCursor=0x10003) returned 0x10003 [0130.793] TranslateMessage (lpMsg=0x1ef250) returned 0 [0130.793] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0130.794] GetKeyState (nVirtKey=1) returned -128 [0130.794] GetKeyState (nVirtKey=2) returned 0 [0130.794] GetKeyState (nVirtKey=4) returned 0 [0130.794] GetKeyState (nVirtKey=5) returned 0 [0130.794] GetKeyState (nVirtKey=6) returned 0 [0130.794] IsWindowVisible (hWnd=0x201d0) returned 1 [0130.794] IsWindowEnabled (hWnd=0x201d0) returned 1 [0130.794] SetFocus (hWnd=0x201d0) returned 0x201d0 [0130.794] GetFocus () returned 0x201d0 [0130.794] GetFocus () returned 0x201d0 [0130.794] GetFocus () returned 0x201d0 [0130.794] GetKeyState (nVirtKey=1) returned -128 [0130.794] GetKeyState (nVirtKey=2) returned 0 [0130.795] GetKeyState (nVirtKey=4) returned 0 [0130.795] GetKeyState (nVirtKey=5) returned 0 [0130.795] GetKeyState (nVirtKey=6) returned 0 [0130.795] GetCapture () returned 0x0 [0130.795] SetCapture (hWnd=0x201d0) returned 0x0 [0130.795] GetKeyState (nVirtKey=1) returned -128 [0130.795] GetKeyState (nVirtKey=2) returned 0 [0130.795] GetKeyState (nVirtKey=4) returned 0 [0130.795] GetKeyState (nVirtKey=5) returned 0 [0130.795] GetKeyState (nVirtKey=6) returned 0 [0130.795] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0130.795] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0130.795] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0130.795] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0130.795] TranslateMessage (lpMsg=0x1ef250) returned 0 [0130.795] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0130.795] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0130.795] IsWindowUnicode (hWnd=0x201d0) returned 1 [0130.795] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0130.795] TranslateMessage (lpMsg=0x1ef250) returned 0 [0130.795] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0130.795] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x265e7d4, cPoints=0x1 | out: lpPoints=0x265e7d4) returned 42533703 [0130.795] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0130.795] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0130.795] UpdateWindow (hWnd=0x201d0) returned 1 [0130.795] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0130.796] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0130.796] CreateCompatibleDC (hdc=0x160107c7) returned 0x5101084a [0130.796] SelectObject (hdc=0x5101084a, h=0x490500d1) returned 0x185000f [0130.796] GdipCreateFromHDC (hdc=0x5101084a, graphics=0x1eea5c) returned 0x0 [0130.796] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0130.796] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0130.796] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0130.796] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0130.796] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0130.796] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0130.796] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0130.796] LocalFree (hMem=0x416cb8) returned 0x0 [0130.796] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0130.796] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0130.796] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0130.796] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0130.796] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0130.796] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd470dbd) returned 0x0 [0130.796] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0130.797] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0130.797] GetCurrentObject (hdc=0x5101084a, type=0x1) returned 0x1b00017 [0130.797] GetCurrentObject (hdc=0x5101084a, type=0x2) returned 0x1900010 [0130.797] GetCurrentObject (hdc=0x5101084a, type=0x7) returned 0x490500d1 [0130.797] GetCurrentObject (hdc=0x5101084a, type=0x6) returned 0x18a002e [0130.797] SaveDC (hdc=0x5101084a) returned 1 [0130.797] GetNearestColor (hdc=0x5101084a, color=0xf5f5f5) returned 0xf5f5f5 [0130.797] GetNearestColor (hdc=0x5101084a, color=0x515151) returned 0x515151 [0130.797] GetNearestColor (hdc=0x5101084a, color=0x0) returned 0x0 [0130.797] GetNearestColor (hdc=0x5101084a, color=0x515151) returned 0x515151 [0130.797] GetNearestColor (hdc=0x5101084a, color=0x0) returned 0x0 [0130.797] GetNearestColor (hdc=0x5101084a, color=0xfafafa) returned 0xfafafa [0130.797] GetNearestColor (hdc=0x5101084a, color=0xe0e0e0) returned 0xe0e0e0 [0130.797] GetNearestColor (hdc=0x5101084a, color=0xdcdcdc) returned 0xdcdcdc [0130.797] GetNearestColor (hdc=0x5101084a, color=0x0) returned 0x0 [0130.797] RestoreDC (hdc=0x5101084a, nSavedDC=-1) returned 1 [0130.797] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5101084a) returned 0x0 [0130.797] IsAppThemed () returned 0x1 [0130.797] GetThemeAppProperties () returned 0x3 [0130.797] GetThemeAppProperties () returned 0x3 [0130.797] IsAppThemed () returned 0x1 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x265eed8 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0130.798] IsAppThemed () returned 0x1 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] IsAppThemed () returned 0x1 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] IsAppThemed () returned 0x1 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] IsAppThemed () returned 0x1 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] IsThemePartDefined () returned 0x1 [0130.798] IsAppThemed () returned 0x1 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0130.798] IsAppThemed () returned 0x1 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] IsAppThemed () returned 0x1 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] GetThemeAppProperties () returned 0x3 [0130.798] IsThemePartDefined () returned 0x1 [0130.798] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0130.798] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0130.798] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0130.799] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0130.799] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0130.799] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0130.799] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0130.799] LocalFree (hMem=0x416cb8) returned 0x0 [0130.799] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0130.799] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0130.799] LocalFree (hMem=0x416cb8) returned 0x0 [0130.799] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0130.799] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0130.799] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0130.799] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0130.799] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0130.799] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0130.799] GetCurrentObject (hdc=0x5101084a, type=0x1) returned 0x1b00017 [0130.799] GetCurrentObject (hdc=0x5101084a, type=0x2) returned 0x1900010 [0130.799] GetCurrentObject (hdc=0x5101084a, type=0x7) returned 0x490500d1 [0130.799] GetCurrentObject (hdc=0x5101084a, type=0x6) returned 0x18a002e [0130.799] SaveDC (hdc=0x5101084a) returned 1 [0130.799] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd9040246 [0130.799] GetClipRgn (hdc=0x5101084a, hrgn=0xd9040246) returned 0 [0130.799] SelectClipRgn (hdc=0x5101084a, hrgn=0xf9040813) returned 2 [0130.800] DeleteObject (ho=0xd9040246) returned 1 [0130.800] DeleteObject (ho=0xf9040813) returned 1 [0130.800] OffsetViewportOrgEx (in: hdc=0x5101084a, x=0, y=0, lppt=0x265f588 | out: lppt=0x265f588) returned 1 [0130.800] DrawThemeParentBackground () returned 0x0 [0130.800] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0130.800] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0130.800] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0130.800] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0130.800] GetSystemMetrics (nIndex=42) returned 0 [0130.800] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0130.800] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0130.800] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0130.800] GetCurrentObject (hdc=0x5101084a, type=0x1) returned 0x1b00017 [0130.800] GetCurrentObject (hdc=0x5101084a, type=0x2) returned 0x1900010 [0130.800] GetCurrentObject (hdc=0x5101084a, type=0x7) returned 0x490500d1 [0130.800] GetCurrentObject (hdc=0x5101084a, type=0x6) returned 0x18a002e [0130.800] SaveDC (hdc=0x5101084a) returned 2 [0130.800] GetNearestColor (hdc=0x5101084a, color=0xf5f5f5) returned 0xf5f5f5 [0130.800] CreateSolidBrush (color=0xf5f5f5) returned 0x76100244 [0130.800] FillRect (hDC=0x5101084a, lprc=0x1ee2d0, hbr=0x76100244) returned 1 [0130.801] DeleteObject (ho=0x76100244) returned 1 [0130.801] RestoreDC (hdc=0x5101084a, nSavedDC=-1) returned 1 [0130.801] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0130.801] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0130.801] GetSystemMetrics (nIndex=42) returned 0 [0130.801] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0130.801] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0130.801] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0130.801] GetCurrentObject (hdc=0x5101084a, type=0x1) returned 0x1b00017 [0130.801] GetCurrentObject (hdc=0x5101084a, type=0x2) returned 0x1900010 [0130.801] GetCurrentObject (hdc=0x5101084a, type=0x7) returned 0x490500d1 [0130.801] GetCurrentObject (hdc=0x5101084a, type=0x6) returned 0x18a002e [0130.801] SaveDC (hdc=0x5101084a) returned 2 [0130.801] GetNearestColor (hdc=0x5101084a, color=0xf5f5f5) returned 0xf5f5f5 [0130.801] CreateSolidBrush (color=0xf5f5f5) returned 0x77100244 [0130.801] FillRect (hDC=0x5101084a, lprc=0x1ee270, hbr=0x77100244) returned 1 [0130.801] DeleteObject (ho=0x77100244) returned 1 [0130.801] RestoreDC (hdc=0x5101084a, nSavedDC=-1) returned 1 [0130.802] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0130.802] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0130.802] GetSystemMetrics (nIndex=42) returned 0 [0130.802] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0130.802] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0130.802] RestoreDC (hdc=0x5101084a, nSavedDC=-1) returned 1 [0130.802] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5101084a) returned 0x0 [0130.802] IsAppThemed () returned 0x1 [0130.802] GetThemeAppProperties () returned 0x3 [0130.802] GetThemeAppProperties () returned 0x3 [0130.802] IsAppThemed () returned 0x1 [0130.802] GetThemeAppProperties () returned 0x3 [0130.802] GetThemeAppProperties () returned 0x3 [0130.802] IsThemePartDefined () returned 0x1 [0130.802] GdipCreateRegion (region=0x1ee764) returned 0x0 [0130.802] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0130.802] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0130.802] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0130.802] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0130.802] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0130.802] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0130.802] LocalFree (hMem=0x416cb8) returned 0x0 [0130.802] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0130.802] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0130.803] LocalFree (hMem=0x416cb8) returned 0x0 [0130.803] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0130.803] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0130.803] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0130.803] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0130.803] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0130.803] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0130.803] GetCurrentObject (hdc=0x5101084a, type=0x1) returned 0x1b00017 [0130.803] GetCurrentObject (hdc=0x5101084a, type=0x2) returned 0x1900010 [0130.803] GetCurrentObject (hdc=0x5101084a, type=0x7) returned 0x490500d1 [0130.803] GetCurrentObject (hdc=0x5101084a, type=0x6) returned 0x18a002e [0130.803] SaveDC (hdc=0x5101084a) returned 1 [0130.803] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfa040813 [0130.803] GetClipRgn (hdc=0x5101084a, hrgn=0xfa040813) returned 0 [0130.803] SelectClipRgn (hdc=0x5101084a, hrgn=0xdb040246) returned 2 [0130.803] DeleteObject (ho=0xfa040813) returned 1 [0130.803] DeleteObject (ho=0xdb040246) returned 1 [0130.803] OffsetViewportOrgEx (in: hdc=0x5101084a, x=0, y=0, lppt=0x265fdc8 | out: lppt=0x265fdc8) returned 1 [0130.803] IsAppThemed () returned 0x1 [0130.803] GetThemeAppProperties () returned 0x3 [0130.803] GetThemeAppProperties () returned 0x3 [0130.803] DrawThemeBackground () returned 0x0 [0130.804] RestoreDC (hdc=0x5101084a, nSavedDC=-1) returned 1 [0130.804] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5101084a) returned 0x0 [0130.804] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0130.804] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0130.804] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0130.804] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0130.804] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0130.804] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0130.804] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0130.804] LocalFree (hMem=0x416cb8) returned 0x0 [0130.804] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0130.804] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0130.804] LocalFree (hMem=0x416cb8) returned 0x0 [0130.804] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0130.804] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0130.804] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0130.804] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0130.804] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0130.804] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0130.804] GetCurrentObject (hdc=0x5101084a, type=0x1) returned 0x1b00017 [0130.804] GetCurrentObject (hdc=0x5101084a, type=0x2) returned 0x1900010 [0130.805] GetCurrentObject (hdc=0x5101084a, type=0x7) returned 0x490500d1 [0130.805] GetCurrentObject (hdc=0x5101084a, type=0x6) returned 0x18a002e [0130.805] SaveDC (hdc=0x5101084a) returned 1 [0130.805] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdc040246 [0130.805] GetClipRgn (hdc=0x5101084a, hrgn=0xdc040246) returned 0 [0130.805] SelectClipRgn (hdc=0x5101084a, hrgn=0xfb040813) returned 2 [0130.805] DeleteObject (ho=0xdc040246) returned 1 [0130.805] DeleteObject (ho=0xfb040813) returned 1 [0130.805] OffsetViewportOrgEx (in: hdc=0x5101084a, x=0, y=0, lppt=0x266009c | out: lppt=0x266009c) returned 1 [0130.805] IsAppThemed () returned 0x1 [0130.805] GetThemeAppProperties () returned 0x3 [0130.805] GetThemeAppProperties () returned 0x3 [0130.805] GetThemeBackgroundContentRect () returned 0x0 [0130.805] RestoreDC (hdc=0x5101084a, nSavedDC=-1) returned 1 [0130.805] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5101084a) returned 0x0 [0130.805] IsAppThemed () returned 0x1 [0130.805] GetThemeAppProperties () returned 0x3 [0130.805] GetThemeAppProperties () returned 0x3 [0130.805] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0130.805] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0130.805] GetCurrentObject (hdc=0x5101084a, type=0x1) returned 0x1b00017 [0130.805] GetCurrentObject (hdc=0x5101084a, type=0x2) returned 0x1900010 [0130.805] GetCurrentObject (hdc=0x5101084a, type=0x7) returned 0x490500d1 [0130.805] GetCurrentObject (hdc=0x5101084a, type=0x6) returned 0x18a002e [0130.806] SaveDC (hdc=0x5101084a) returned 1 [0130.806] GetTextAlign (hdc=0x5101084a) returned 0x0 [0130.806] GetTextColor (hdc=0x5101084a) returned 0x0 [0130.806] GetCurrentObject (hdc=0x5101084a, type=0x6) returned 0x18a002e [0130.806] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0130.806] SelectObject (hdc=0x5101084a, h=0x220a081a) returned 0x18a002e [0130.806] GetBkMode (hdc=0x5101084a) returned 2 [0130.806] SetBkMode (hdc=0x5101084a, mode=1) returned 2 [0130.806] DrawTextExW (in: hdc=0x5101084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2660430 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0130.806] DrawTextExW (in: hdc=0x5101084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2660430 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0130.806] RestoreDC (hdc=0x5101084a, nSavedDC=-1) returned 1 [0130.806] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5101084a) returned 0x0 [0130.806] GetFocus () returned 0x201d0 [0130.806] IsAppThemed () returned 0x1 [0130.806] GetThemeAppProperties () returned 0x3 [0130.806] GetThemeAppProperties () returned 0x3 [0130.806] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0130.807] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5101084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0130.807] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5101084a) returned 0x0 [0130.807] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0130.807] SelectObject (hdc=0x5101084a, h=0x185000f) returned 0x490500d1 [0130.807] DeleteDC (hdc=0x5101084a) returned 1 [0130.807] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0130.807] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0130.807] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x266052c, cPoints=0x1 | out: lpPoints=0x266052c) returned 42533703 [0130.807] WindowFromPoint (Point=0x3e1) returned 0x201d0 [0130.807] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103e1) returned 0x1 [0130.807] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0130.807] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0130.807] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0130.807] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.807] GetSystemMetrics (nIndex=42) returned 0 [0130.807] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0130.807] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0130.808] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0130.808] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0130.808] GetCapture () returned 0x201d0 [0130.808] ReleaseCapture () returned 1 [0130.808] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0130.808] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0130.808] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103e1) returned 0x1 [0130.808] IsWindowUnicode (hWnd=0x201d0) returned 1 [0130.808] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0130.808] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103e1) returned 0x1 [0130.808] SetCursor (hCursor=0x10003) returned 0x10003 [0130.808] TranslateMessage (lpMsg=0x1ef250) returned 0 [0130.808] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0130.808] GetKeyState (nVirtKey=1) returned 0 [0130.808] GetKeyState (nVirtKey=2) returned 0 [0130.808] GetKeyState (nVirtKey=4) returned 0 [0130.808] GetKeyState (nVirtKey=5) returned 0 [0130.808] GetKeyState (nVirtKey=6) returned 0 [0130.808] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0130.808] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0130.808] WaitMessage () returned 1 [0133.855] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0133.855] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503da) returned 0x1 [0133.855] IsWindowUnicode (hWnd=0x201d0) returned 1 [0133.855] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0133.855] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503da) returned 0x1 [0133.856] SetCursor (hCursor=0x10003) returned 0x10003 [0133.856] TranslateMessage (lpMsg=0x1ef250) returned 0 [0133.856] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0133.856] GetKeyState (nVirtKey=1) returned 0 [0133.856] GetKeyState (nVirtKey=2) returned 0 [0133.856] GetKeyState (nVirtKey=4) returned 0 [0133.856] GetKeyState (nVirtKey=5) returned 0 [0133.856] GetKeyState (nVirtKey=6) returned 0 [0133.856] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0133.856] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0133.856] WaitMessage () returned 1 [0133.914] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0133.914] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503da) returned 0x1 [0133.914] IsWindowUnicode (hWnd=0x201d0) returned 1 [0133.914] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0133.914] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503da) returned 0x1 [0133.914] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0133.915] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e40295) returned 0x0 [0133.915] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0133.915] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0133.916] SetCursor (hCursor=0x10003) returned 0x10003 [0133.916] TranslateMessage (lpMsg=0x1ef250) returned 0 [0133.916] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0133.916] GetKeyState (nVirtKey=1) returned -127 [0133.916] GetKeyState (nVirtKey=2) returned 0 [0133.916] GetKeyState (nVirtKey=4) returned 0 [0133.916] GetKeyState (nVirtKey=5) returned 0 [0133.916] GetKeyState (nVirtKey=6) returned 0 [0133.916] IsWindowVisible (hWnd=0x201d0) returned 1 [0133.916] IsWindowEnabled (hWnd=0x201d0) returned 1 [0133.916] SetFocus (hWnd=0x201d0) returned 0x201d0 [0133.916] GetFocus () returned 0x201d0 [0133.916] GetFocus () returned 0x201d0 [0133.916] GetFocus () returned 0x201d0 [0133.916] GetKeyState (nVirtKey=1) returned -127 [0133.916] GetKeyState (nVirtKey=2) returned 0 [0133.916] GetKeyState (nVirtKey=4) returned 0 [0133.916] GetKeyState (nVirtKey=5) returned 0 [0133.916] GetKeyState (nVirtKey=6) returned 0 [0133.916] GetCapture () returned 0x0 [0133.916] SetCapture (hWnd=0x201d0) returned 0x0 [0133.916] GetKeyState (nVirtKey=1) returned -127 [0133.916] GetKeyState (nVirtKey=2) returned 0 [0133.916] GetKeyState (nVirtKey=4) returned 0 [0133.916] GetKeyState (nVirtKey=5) returned 0 [0133.916] GetKeyState (nVirtKey=6) returned 0 [0133.916] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0133.916] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0133.917] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0133.917] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0133.917] TranslateMessage (lpMsg=0x1ef250) returned 0 [0133.917] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0133.917] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0133.917] IsWindowUnicode (hWnd=0x201d0) returned 1 [0133.917] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0133.917] TranslateMessage (lpMsg=0x1ef250) returned 0 [0133.917] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0133.917] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2660650, cPoints=0x1 | out: lpPoints=0x2660650) returned 42533703 [0133.917] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0133.917] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0133.917] UpdateWindow (hWnd=0x201d0) returned 1 [0133.917] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0133.918] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0133.918] CreateCompatibleDC (hdc=0x160107c7) returned 0x5201084a [0133.918] SelectObject (hdc=0x5201084a, h=0x490500d1) returned 0x185000f [0133.918] GdipCreateFromHDC (hdc=0x5201084a, graphics=0x1eea5c) returned 0x0 [0133.918] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0133.918] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0133.918] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0133.918] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0133.918] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0133.919] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0133.919] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0133.919] LocalFree (hMem=0x416cb8) returned 0x0 [0133.919] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0133.919] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0133.919] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0133.919] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0133.919] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0133.919] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd450dbd) returned 0x0 [0133.919] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0133.919] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0133.919] GetCurrentObject (hdc=0x5201084a, type=0x1) returned 0x1b00017 [0133.919] GetCurrentObject (hdc=0x5201084a, type=0x2) returned 0x1900010 [0133.919] GetCurrentObject (hdc=0x5201084a, type=0x7) returned 0x490500d1 [0133.919] GetCurrentObject (hdc=0x5201084a, type=0x6) returned 0x18a002e [0133.919] SaveDC (hdc=0x5201084a) returned 1 [0133.919] GetNearestColor (hdc=0x5201084a, color=0xf5f5f5) returned 0xf5f5f5 [0133.919] GetNearestColor (hdc=0x5201084a, color=0x515151) returned 0x515151 [0133.920] GetNearestColor (hdc=0x5201084a, color=0x0) returned 0x0 [0133.920] GetNearestColor (hdc=0x5201084a, color=0x515151) returned 0x515151 [0133.920] GetNearestColor (hdc=0x5201084a, color=0x0) returned 0x0 [0133.920] GetNearestColor (hdc=0x5201084a, color=0xfafafa) returned 0xfafafa [0133.920] GetNearestColor (hdc=0x5201084a, color=0xe0e0e0) returned 0xe0e0e0 [0133.920] GetNearestColor (hdc=0x5201084a, color=0xdcdcdc) returned 0xdcdcdc [0133.920] GetNearestColor (hdc=0x5201084a, color=0x0) returned 0x0 [0133.920] RestoreDC (hdc=0x5201084a, nSavedDC=-1) returned 1 [0133.920] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5201084a) returned 0x0 [0133.920] IsAppThemed () returned 0x1 [0133.920] GetThemeAppProperties () returned 0x3 [0133.920] GetThemeAppProperties () returned 0x3 [0133.920] IsAppThemed () returned 0x1 [0133.920] GetThemeAppProperties () returned 0x3 [0133.920] GetThemeAppProperties () returned 0x3 [0133.920] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2660d54 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0133.921] IsAppThemed () returned 0x1 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] IsAppThemed () returned 0x1 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] IsAppThemed () returned 0x1 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] IsAppThemed () returned 0x1 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] IsThemePartDefined () returned 0x1 [0133.921] IsAppThemed () returned 0x1 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0133.921] IsAppThemed () returned 0x1 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] IsAppThemed () returned 0x1 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] GetThemeAppProperties () returned 0x3 [0133.921] IsThemePartDefined () returned 0x1 [0133.921] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0133.921] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0133.921] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0133.921] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0133.921] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0133.921] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0133.921] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0133.921] LocalFree (hMem=0x416cb8) returned 0x0 [0133.921] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0133.922] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0133.922] LocalFree (hMem=0x416cb8) returned 0x0 [0133.922] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0133.922] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0133.922] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0133.922] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0133.922] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0133.922] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0133.922] GetCurrentObject (hdc=0x5201084a, type=0x1) returned 0x1b00017 [0133.922] GetCurrentObject (hdc=0x5201084a, type=0x2) returned 0x1900010 [0133.922] GetCurrentObject (hdc=0x5201084a, type=0x7) returned 0x490500d1 [0133.922] GetCurrentObject (hdc=0x5201084a, type=0x6) returned 0x18a002e [0133.922] SaveDC (hdc=0x5201084a) returned 1 [0133.922] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfc040813 [0133.922] GetClipRgn (hdc=0x5201084a, hrgn=0xfc040813) returned 0 [0133.922] SelectClipRgn (hdc=0x5201084a, hrgn=0xe0040246) returned 2 [0133.922] DeleteObject (ho=0xfc040813) returned 1 [0133.922] DeleteObject (ho=0xe0040246) returned 1 [0133.922] OffsetViewportOrgEx (in: hdc=0x5201084a, x=0, y=0, lppt=0x2661404 | out: lppt=0x2661404) returned 1 [0133.922] DrawThemeParentBackground () returned 0x0 [0133.923] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0133.923] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0133.923] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0133.923] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0133.923] GetSystemMetrics (nIndex=42) returned 0 [0133.923] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0133.923] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0133.923] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0133.923] GetCurrentObject (hdc=0x5201084a, type=0x1) returned 0x1b00017 [0133.923] GetCurrentObject (hdc=0x5201084a, type=0x2) returned 0x1900010 [0133.923] GetCurrentObject (hdc=0x5201084a, type=0x7) returned 0x490500d1 [0133.923] GetCurrentObject (hdc=0x5201084a, type=0x6) returned 0x18a002e [0133.923] SaveDC (hdc=0x5201084a) returned 2 [0133.923] GetNearestColor (hdc=0x5201084a, color=0xf5f5f5) returned 0xf5f5f5 [0133.923] CreateSolidBrush (color=0xf5f5f5) returned 0x78100244 [0133.923] FillRect (hDC=0x5201084a, lprc=0x1ee2d0, hbr=0x78100244) returned 1 [0133.924] DeleteObject (ho=0x78100244) returned 1 [0133.924] RestoreDC (hdc=0x5201084a, nSavedDC=-1) returned 1 [0133.924] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0133.924] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0133.924] GetSystemMetrics (nIndex=42) returned 0 [0133.924] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0133.924] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0133.924] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0133.924] GetCurrentObject (hdc=0x5201084a, type=0x1) returned 0x1b00017 [0133.924] GetCurrentObject (hdc=0x5201084a, type=0x2) returned 0x1900010 [0133.924] GetCurrentObject (hdc=0x5201084a, type=0x7) returned 0x490500d1 [0133.924] GetCurrentObject (hdc=0x5201084a, type=0x6) returned 0x18a002e [0133.924] SaveDC (hdc=0x5201084a) returned 2 [0133.924] GetNearestColor (hdc=0x5201084a, color=0xf5f5f5) returned 0xf5f5f5 [0133.924] CreateSolidBrush (color=0xf5f5f5) returned 0x79100244 [0133.924] FillRect (hDC=0x5201084a, lprc=0x1ee270, hbr=0x79100244) returned 1 [0133.924] DeleteObject (ho=0x79100244) returned 1 [0133.924] RestoreDC (hdc=0x5201084a, nSavedDC=-1) returned 1 [0133.924] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0133.924] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0133.925] GetSystemMetrics (nIndex=42) returned 0 [0133.925] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0133.925] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0133.925] RestoreDC (hdc=0x5201084a, nSavedDC=-1) returned 1 [0133.925] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5201084a) returned 0x0 [0133.925] IsAppThemed () returned 0x1 [0133.925] GetThemeAppProperties () returned 0x3 [0133.925] GetThemeAppProperties () returned 0x3 [0133.925] IsAppThemed () returned 0x1 [0133.925] GetThemeAppProperties () returned 0x3 [0133.925] GetThemeAppProperties () returned 0x3 [0133.925] IsThemePartDefined () returned 0x1 [0133.925] GdipCreateRegion (region=0x1ee764) returned 0x0 [0133.925] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0133.925] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0133.925] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0133.925] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0133.925] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0133.925] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0133.925] LocalFree (hMem=0x416cb8) returned 0x0 [0133.925] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0133.925] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0133.925] LocalFree (hMem=0x416cb8) returned 0x0 [0133.925] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0133.925] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0133.926] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0133.926] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0133.926] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0133.926] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0133.926] GetCurrentObject (hdc=0x5201084a, type=0x1) returned 0x1b00017 [0133.926] GetCurrentObject (hdc=0x5201084a, type=0x2) returned 0x1900010 [0133.926] GetCurrentObject (hdc=0x5201084a, type=0x7) returned 0x490500d1 [0133.926] GetCurrentObject (hdc=0x5201084a, type=0x6) returned 0x18a002e [0133.926] SaveDC (hdc=0x5201084a) returned 1 [0133.926] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe1040246 [0133.926] GetClipRgn (hdc=0x5201084a, hrgn=0xe1040246) returned 0 [0133.926] SelectClipRgn (hdc=0x5201084a, hrgn=0xfe040813) returned 2 [0133.926] DeleteObject (ho=0xe1040246) returned 1 [0133.926] DeleteObject (ho=0xfe040813) returned 1 [0133.926] OffsetViewportOrgEx (in: hdc=0x5201084a, x=0, y=0, lppt=0x2661c44 | out: lppt=0x2661c44) returned 1 [0133.926] IsAppThemed () returned 0x1 [0133.926] GetThemeAppProperties () returned 0x3 [0133.926] GetThemeAppProperties () returned 0x3 [0133.926] DrawThemeBackground () returned 0x0 [0133.927] RestoreDC (hdc=0x5201084a, nSavedDC=-1) returned 1 [0133.927] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5201084a) returned 0x0 [0133.927] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0133.927] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0133.927] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0133.927] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0133.927] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0133.927] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0133.927] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0133.927] LocalFree (hMem=0x416cb8) returned 0x0 [0133.927] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0133.927] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0133.927] LocalFree (hMem=0x416cb8) returned 0x0 [0133.927] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0133.927] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0133.927] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0133.927] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0133.927] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0133.927] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0133.927] GetCurrentObject (hdc=0x5201084a, type=0x1) returned 0x1b00017 [0133.927] GetCurrentObject (hdc=0x5201084a, type=0x2) returned 0x1900010 [0133.927] GetCurrentObject (hdc=0x5201084a, type=0x7) returned 0x490500d1 [0133.928] GetCurrentObject (hdc=0x5201084a, type=0x6) returned 0x18a002e [0133.928] SaveDC (hdc=0x5201084a) returned 1 [0133.928] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xff040813 [0133.928] GetClipRgn (hdc=0x5201084a, hrgn=0xff040813) returned 0 [0133.928] SelectClipRgn (hdc=0x5201084a, hrgn=0xe2040246) returned 2 [0133.928] DeleteObject (ho=0xff040813) returned 1 [0133.928] DeleteObject (ho=0xe2040246) returned 1 [0133.928] OffsetViewportOrgEx (in: hdc=0x5201084a, x=0, y=0, lppt=0x2661f18 | out: lppt=0x2661f18) returned 1 [0133.928] IsAppThemed () returned 0x1 [0133.928] GetThemeAppProperties () returned 0x3 [0133.928] GetThemeAppProperties () returned 0x3 [0133.928] GetThemeBackgroundContentRect () returned 0x0 [0133.928] RestoreDC (hdc=0x5201084a, nSavedDC=-1) returned 1 [0133.928] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5201084a) returned 0x0 [0133.928] IsAppThemed () returned 0x1 [0133.928] GetThemeAppProperties () returned 0x3 [0133.928] GetThemeAppProperties () returned 0x3 [0133.928] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0133.928] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0133.928] GetCurrentObject (hdc=0x5201084a, type=0x1) returned 0x1b00017 [0133.928] GetCurrentObject (hdc=0x5201084a, type=0x2) returned 0x1900010 [0133.928] GetCurrentObject (hdc=0x5201084a, type=0x7) returned 0x490500d1 [0133.928] GetCurrentObject (hdc=0x5201084a, type=0x6) returned 0x18a002e [0133.928] SaveDC (hdc=0x5201084a) returned 1 [0133.928] GetTextAlign (hdc=0x5201084a) returned 0x0 [0133.929] GetTextColor (hdc=0x5201084a) returned 0x0 [0133.929] GetCurrentObject (hdc=0x5201084a, type=0x6) returned 0x18a002e [0133.929] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0133.929] SelectObject (hdc=0x5201084a, h=0x220a081a) returned 0x18a002e [0133.929] GetBkMode (hdc=0x5201084a) returned 2 [0133.929] SetBkMode (hdc=0x5201084a, mode=1) returned 2 [0133.929] DrawTextExW (in: hdc=0x5201084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26622ac | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0133.929] DrawTextExW (in: hdc=0x5201084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26622ac | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0133.930] RestoreDC (hdc=0x5201084a, nSavedDC=-1) returned 1 [0133.930] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5201084a) returned 0x0 [0133.930] GetFocus () returned 0x201d0 [0133.930] IsAppThemed () returned 0x1 [0133.930] GetThemeAppProperties () returned 0x3 [0133.930] GetThemeAppProperties () returned 0x3 [0133.930] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0133.930] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5201084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0133.930] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5201084a) returned 0x0 [0133.930] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0133.930] SelectObject (hdc=0x5201084a, h=0x185000f) returned 0x490500d1 [0133.930] DeleteDC (hdc=0x5201084a) returned 1 [0133.931] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0133.931] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0133.931] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26623a8, cPoints=0x1 | out: lpPoints=0x26623a8) returned 42533703 [0133.931] WindowFromPoint (Point=0x3da) returned 0x201d0 [0133.931] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503da) returned 0x1 [0133.931] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0133.931] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0133.931] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0133.931] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.931] GetSystemMetrics (nIndex=42) returned 0 [0133.931] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0133.931] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0133.931] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0133.931] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0133.931] GetCapture () returned 0x201d0 [0133.931] ReleaseCapture () returned 1 [0133.931] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0133.931] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0133.931] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503da) returned 0x1 [0133.931] IsWindowUnicode (hWnd=0x201d0) returned 1 [0133.932] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0133.932] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503da) returned 0x1 [0133.932] SetCursor (hCursor=0x10003) returned 0x10003 [0133.932] TranslateMessage (lpMsg=0x1ef250) returned 0 [0133.932] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0133.932] GetKeyState (nVirtKey=1) returned 1 [0133.932] GetKeyState (nVirtKey=2) returned 0 [0133.932] GetKeyState (nVirtKey=4) returned 0 [0133.932] GetKeyState (nVirtKey=5) returned 0 [0133.932] GetKeyState (nVirtKey=6) returned 0 [0133.932] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0133.932] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0133.932] WaitMessage () returned 1 [0136.973] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0136.973] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603c6) returned 0x1 [0136.973] IsWindowUnicode (hWnd=0x201d0) returned 1 [0136.973] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0136.974] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603c6) returned 0x1 [0136.974] SetCursor (hCursor=0x10003) returned 0x10003 [0136.974] TranslateMessage (lpMsg=0x1ef250) returned 0 [0136.974] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0136.974] GetKeyState (nVirtKey=1) returned 1 [0136.974] GetKeyState (nVirtKey=2) returned 0 [0136.974] GetKeyState (nVirtKey=4) returned 0 [0136.974] GetKeyState (nVirtKey=5) returned 0 [0136.974] GetKeyState (nVirtKey=6) returned 0 [0136.974] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0136.974] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0136.974] WaitMessage () returned 1 [0137.031] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0137.032] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603c6) returned 0x1 [0137.032] IsWindowUnicode (hWnd=0x201d0) returned 1 [0137.032] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0137.032] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603c6) returned 0x1 [0137.032] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0137.032] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e50281) returned 0x0 [0137.032] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0137.032] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0137.032] SetCursor (hCursor=0x10003) returned 0x10003 [0137.033] TranslateMessage (lpMsg=0x1ef250) returned 0 [0137.033] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0137.033] GetKeyState (nVirtKey=1) returned -128 [0137.033] GetKeyState (nVirtKey=2) returned 0 [0137.033] GetKeyState (nVirtKey=4) returned 0 [0137.033] GetKeyState (nVirtKey=5) returned 0 [0137.033] GetKeyState (nVirtKey=6) returned 0 [0137.033] IsWindowVisible (hWnd=0x201d0) returned 1 [0137.033] IsWindowEnabled (hWnd=0x201d0) returned 1 [0137.033] SetFocus (hWnd=0x201d0) returned 0x201d0 [0137.033] GetFocus () returned 0x201d0 [0137.033] GetFocus () returned 0x201d0 [0137.033] GetFocus () returned 0x201d0 [0137.033] GetKeyState (nVirtKey=1) returned -128 [0137.033] GetKeyState (nVirtKey=2) returned 0 [0137.033] GetKeyState (nVirtKey=4) returned 0 [0137.033] GetKeyState (nVirtKey=5) returned 0 [0137.033] GetKeyState (nVirtKey=6) returned 0 [0137.033] GetCapture () returned 0x0 [0137.033] SetCapture (hWnd=0x201d0) returned 0x0 [0137.033] GetKeyState (nVirtKey=1) returned -128 [0137.033] GetKeyState (nVirtKey=2) returned 0 [0137.033] GetKeyState (nVirtKey=4) returned 0 [0137.033] GetKeyState (nVirtKey=5) returned 0 [0137.033] GetKeyState (nVirtKey=6) returned 0 [0137.033] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0137.033] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0137.033] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0137.033] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0137.033] TranslateMessage (lpMsg=0x1ef250) returned 0 [0137.033] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0137.033] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0137.033] IsWindowUnicode (hWnd=0x201d0) returned 1 [0137.033] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0137.034] TranslateMessage (lpMsg=0x1ef250) returned 0 [0137.034] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0137.034] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26624cc, cPoints=0x1 | out: lpPoints=0x26624cc) returned 42533703 [0137.034] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0137.034] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0137.034] UpdateWindow (hWnd=0x201d0) returned 1 [0137.034] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0137.034] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0137.034] CreateCompatibleDC (hdc=0x160107c7) returned 0x5301084a [0137.034] SelectObject (hdc=0x5301084a, h=0x490500d1) returned 0x185000f [0137.034] GdipCreateFromHDC (hdc=0x5301084a, graphics=0x1eea5c) returned 0x0 [0137.034] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0137.034] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0137.034] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0137.034] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0137.034] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0137.034] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0137.034] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0137.034] LocalFree (hMem=0x416cb8) returned 0x0 [0137.034] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0137.035] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0137.035] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0137.035] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0137.035] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0137.035] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd430dbd) returned 0x0 [0137.035] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0137.035] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0137.035] GetCurrentObject (hdc=0x5301084a, type=0x1) returned 0x1b00017 [0137.035] GetCurrentObject (hdc=0x5301084a, type=0x2) returned 0x1900010 [0137.035] GetCurrentObject (hdc=0x5301084a, type=0x7) returned 0x490500d1 [0137.035] GetCurrentObject (hdc=0x5301084a, type=0x6) returned 0x18a002e [0137.035] SaveDC (hdc=0x5301084a) returned 1 [0137.035] GetNearestColor (hdc=0x5301084a, color=0xf5f5f5) returned 0xf5f5f5 [0137.035] GetNearestColor (hdc=0x5301084a, color=0x515151) returned 0x515151 [0137.035] GetNearestColor (hdc=0x5301084a, color=0x0) returned 0x0 [0137.035] GetNearestColor (hdc=0x5301084a, color=0x515151) returned 0x515151 [0137.035] GetNearestColor (hdc=0x5301084a, color=0x0) returned 0x0 [0137.035] GetNearestColor (hdc=0x5301084a, color=0xfafafa) returned 0xfafafa [0137.035] GetNearestColor (hdc=0x5301084a, color=0xe0e0e0) returned 0xe0e0e0 [0137.036] GetNearestColor (hdc=0x5301084a, color=0xdcdcdc) returned 0xdcdcdc [0137.036] GetNearestColor (hdc=0x5301084a, color=0x0) returned 0x0 [0137.036] RestoreDC (hdc=0x5301084a, nSavedDC=-1) returned 1 [0137.036] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5301084a) returned 0x0 [0137.036] IsAppThemed () returned 0x1 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] IsAppThemed () returned 0x1 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2662bd0 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0137.036] IsAppThemed () returned 0x1 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] IsAppThemed () returned 0x1 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] IsAppThemed () returned 0x1 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] IsAppThemed () returned 0x1 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] IsThemePartDefined () returned 0x1 [0137.036] IsAppThemed () returned 0x1 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0137.036] IsAppThemed () returned 0x1 [0137.036] GetThemeAppProperties () returned 0x3 [0137.036] GetThemeAppProperties () returned 0x3 [0137.037] IsAppThemed () returned 0x1 [0137.037] GetThemeAppProperties () returned 0x3 [0137.037] GetThemeAppProperties () returned 0x3 [0137.037] IsThemePartDefined () returned 0x1 [0137.037] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0137.037] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0137.037] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0137.037] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0137.037] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0137.037] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0137.037] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0137.037] LocalFree (hMem=0x416cb8) returned 0x0 [0137.037] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0137.037] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0137.037] LocalFree (hMem=0x416cb8) returned 0x0 [0137.037] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0137.037] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0137.037] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0137.037] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0137.037] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0137.037] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0137.037] GetCurrentObject (hdc=0x5301084a, type=0x1) returned 0x1b00017 [0137.037] GetCurrentObject (hdc=0x5301084a, type=0x2) returned 0x1900010 [0137.037] GetCurrentObject (hdc=0x5301084a, type=0x7) returned 0x490500d1 [0137.038] GetCurrentObject (hdc=0x5301084a, type=0x6) returned 0x18a002e [0137.038] SaveDC (hdc=0x5301084a) returned 1 [0137.038] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe3040246 [0137.038] GetClipRgn (hdc=0x5301084a, hrgn=0xe3040246) returned 0 [0137.038] SelectClipRgn (hdc=0x5301084a, hrgn=0x3040813) returned 2 [0137.038] DeleteObject (ho=0xe3040246) returned 1 [0137.038] DeleteObject (ho=0x3040813) returned 1 [0137.038] OffsetViewportOrgEx (in: hdc=0x5301084a, x=0, y=0, lppt=0x2663280 | out: lppt=0x2663280) returned 1 [0137.038] DrawThemeParentBackground () returned 0x0 [0137.038] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0137.038] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0137.038] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0137.038] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0137.038] GetSystemMetrics (nIndex=42) returned 0 [0137.038] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0137.038] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0137.038] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0137.038] GetCurrentObject (hdc=0x5301084a, type=0x1) returned 0x1b00017 [0137.038] GetCurrentObject (hdc=0x5301084a, type=0x2) returned 0x1900010 [0137.038] GetCurrentObject (hdc=0x5301084a, type=0x7) returned 0x490500d1 [0137.038] GetCurrentObject (hdc=0x5301084a, type=0x6) returned 0x18a002e [0137.039] SaveDC (hdc=0x5301084a) returned 2 [0137.039] GetNearestColor (hdc=0x5301084a, color=0xf5f5f5) returned 0xf5f5f5 [0137.039] CreateSolidBrush (color=0xf5f5f5) returned 0x7a100244 [0137.039] FillRect (hDC=0x5301084a, lprc=0x1ee2d0, hbr=0x7a100244) returned 1 [0137.039] DeleteObject (ho=0x7a100244) returned 1 [0137.039] RestoreDC (hdc=0x5301084a, nSavedDC=-1) returned 1 [0137.039] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0137.039] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0137.039] GetSystemMetrics (nIndex=42) returned 0 [0137.039] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0137.039] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0137.039] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0137.039] GetCurrentObject (hdc=0x5301084a, type=0x1) returned 0x1b00017 [0137.039] GetCurrentObject (hdc=0x5301084a, type=0x2) returned 0x1900010 [0137.039] GetCurrentObject (hdc=0x5301084a, type=0x7) returned 0x490500d1 [0137.039] GetCurrentObject (hdc=0x5301084a, type=0x6) returned 0x18a002e [0137.039] SaveDC (hdc=0x5301084a) returned 2 [0137.039] GetNearestColor (hdc=0x5301084a, color=0xf5f5f5) returned 0xf5f5f5 [0137.039] CreateSolidBrush (color=0xf5f5f5) returned 0x7b100244 [0137.039] FillRect (hDC=0x5301084a, lprc=0x1ee270, hbr=0x7b100244) returned 1 [0137.040] DeleteObject (ho=0x7b100244) returned 1 [0137.040] RestoreDC (hdc=0x5301084a, nSavedDC=-1) returned 1 [0137.040] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0137.040] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0137.040] GetSystemMetrics (nIndex=42) returned 0 [0137.040] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0137.040] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0137.040] RestoreDC (hdc=0x5301084a, nSavedDC=-1) returned 1 [0137.040] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5301084a) returned 0x0 [0137.040] IsAppThemed () returned 0x1 [0137.040] GetThemeAppProperties () returned 0x3 [0137.040] GetThemeAppProperties () returned 0x3 [0137.040] IsAppThemed () returned 0x1 [0137.040] GetThemeAppProperties () returned 0x3 [0137.040] GetThemeAppProperties () returned 0x3 [0137.040] IsThemePartDefined () returned 0x1 [0137.040] GdipCreateRegion (region=0x1ee764) returned 0x0 [0137.040] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0137.040] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0137.040] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0137.040] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0137.040] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0137.040] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0137.040] LocalFree (hMem=0x416cb8) returned 0x0 [0137.040] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0137.041] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0137.041] LocalFree (hMem=0x416cb8) returned 0x0 [0137.041] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0137.041] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0137.041] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0137.041] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0137.041] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0137.041] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0137.041] GetCurrentObject (hdc=0x5301084a, type=0x1) returned 0x1b00017 [0137.041] GetCurrentObject (hdc=0x5301084a, type=0x2) returned 0x1900010 [0137.041] GetCurrentObject (hdc=0x5301084a, type=0x7) returned 0x490500d1 [0137.041] GetCurrentObject (hdc=0x5301084a, type=0x6) returned 0x18a002e [0137.041] SaveDC (hdc=0x5301084a) returned 1 [0137.041] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4040813 [0137.041] GetClipRgn (hdc=0x5301084a, hrgn=0x4040813) returned 0 [0137.041] SelectClipRgn (hdc=0x5301084a, hrgn=0xe5040246) returned 2 [0137.041] DeleteObject (ho=0x4040813) returned 1 [0137.041] DeleteObject (ho=0xe5040246) returned 1 [0137.041] OffsetViewportOrgEx (in: hdc=0x5301084a, x=0, y=0, lppt=0x2663ac0 | out: lppt=0x2663ac0) returned 1 [0137.041] IsAppThemed () returned 0x1 [0137.041] GetThemeAppProperties () returned 0x3 [0137.041] GetThemeAppProperties () returned 0x3 [0137.041] DrawThemeBackground () returned 0x0 [0137.042] RestoreDC (hdc=0x5301084a, nSavedDC=-1) returned 1 [0137.042] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5301084a) returned 0x0 [0137.042] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0137.042] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0137.042] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0137.042] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0137.042] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0137.042] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0137.042] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0137.042] LocalFree (hMem=0x416cb8) returned 0x0 [0137.042] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0137.042] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0137.042] LocalFree (hMem=0x416cb8) returned 0x0 [0137.042] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0137.042] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0137.042] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0137.042] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0137.042] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0137.042] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0137.042] GetCurrentObject (hdc=0x5301084a, type=0x1) returned 0x1b00017 [0137.042] GetCurrentObject (hdc=0x5301084a, type=0x2) returned 0x1900010 [0137.042] GetCurrentObject (hdc=0x5301084a, type=0x7) returned 0x490500d1 [0137.042] GetCurrentObject (hdc=0x5301084a, type=0x6) returned 0x18a002e [0137.043] SaveDC (hdc=0x5301084a) returned 1 [0137.043] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe6040246 [0137.043] GetClipRgn (hdc=0x5301084a, hrgn=0xe6040246) returned 0 [0137.043] SelectClipRgn (hdc=0x5301084a, hrgn=0x5040813) returned 2 [0137.043] DeleteObject (ho=0xe6040246) returned 1 [0137.043] DeleteObject (ho=0x5040813) returned 1 [0137.043] OffsetViewportOrgEx (in: hdc=0x5301084a, x=0, y=0, lppt=0x2663d94 | out: lppt=0x2663d94) returned 1 [0137.043] IsAppThemed () returned 0x1 [0137.043] GetThemeAppProperties () returned 0x3 [0137.043] GetThemeAppProperties () returned 0x3 [0137.043] GetThemeBackgroundContentRect () returned 0x0 [0137.043] RestoreDC (hdc=0x5301084a, nSavedDC=-1) returned 1 [0137.043] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5301084a) returned 0x0 [0137.043] IsAppThemed () returned 0x1 [0137.043] GetThemeAppProperties () returned 0x3 [0137.043] GetThemeAppProperties () returned 0x3 [0137.043] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0137.043] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0137.043] GetCurrentObject (hdc=0x5301084a, type=0x1) returned 0x1b00017 [0137.043] GetCurrentObject (hdc=0x5301084a, type=0x2) returned 0x1900010 [0137.043] GetCurrentObject (hdc=0x5301084a, type=0x7) returned 0x490500d1 [0137.043] GetCurrentObject (hdc=0x5301084a, type=0x6) returned 0x18a002e [0137.043] SaveDC (hdc=0x5301084a) returned 1 [0137.044] GetTextAlign (hdc=0x5301084a) returned 0x0 [0137.044] GetTextColor (hdc=0x5301084a) returned 0x0 [0137.044] GetCurrentObject (hdc=0x5301084a, type=0x6) returned 0x18a002e [0137.044] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0137.044] SelectObject (hdc=0x5301084a, h=0x220a081a) returned 0x18a002e [0137.044] GetBkMode (hdc=0x5301084a) returned 2 [0137.044] SetBkMode (hdc=0x5301084a, mode=1) returned 2 [0137.044] DrawTextExW (in: hdc=0x5301084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2664128 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0137.044] DrawTextExW (in: hdc=0x5301084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2664128 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0137.044] RestoreDC (hdc=0x5301084a, nSavedDC=-1) returned 1 [0137.044] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5301084a) returned 0x0 [0137.044] GetFocus () returned 0x201d0 [0137.044] IsAppThemed () returned 0x1 [0137.044] GetThemeAppProperties () returned 0x3 [0137.044] GetThemeAppProperties () returned 0x3 [0137.044] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0137.044] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5301084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0137.045] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5301084a) returned 0x0 [0137.045] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0137.045] SelectObject (hdc=0x5301084a, h=0x185000f) returned 0x490500d1 [0137.045] DeleteDC (hdc=0x5301084a) returned 1 [0137.045] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0137.045] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0137.045] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2664224, cPoints=0x1 | out: lpPoints=0x2664224) returned 42533703 [0137.045] WindowFromPoint (Point=0x3c6) returned 0x201d0 [0137.045] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603c6) returned 0x1 [0137.045] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0137.045] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0137.045] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0137.045] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.045] GetSystemMetrics (nIndex=42) returned 0 [0137.045] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0137.045] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0137.045] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0137.045] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0137.045] GetCapture () returned 0x201d0 [0137.045] ReleaseCapture () returned 1 [0137.045] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0137.046] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0137.046] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603c6) returned 0x1 [0137.046] IsWindowUnicode (hWnd=0x201d0) returned 1 [0137.046] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0137.046] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603c6) returned 0x1 [0137.046] SetCursor (hCursor=0x10003) returned 0x10003 [0137.046] TranslateMessage (lpMsg=0x1ef250) returned 0 [0137.046] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0137.046] GetKeyState (nVirtKey=1) returned 0 [0137.046] GetKeyState (nVirtKey=2) returned 0 [0137.046] GetKeyState (nVirtKey=4) returned 0 [0137.046] GetKeyState (nVirtKey=5) returned 0 [0137.046] GetKeyState (nVirtKey=6) returned 0 [0137.046] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0137.046] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0137.046] WaitMessage () returned 1 [0140.093] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0140.093] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03cf) returned 0x1 [0140.094] IsWindowUnicode (hWnd=0x201d0) returned 1 [0140.094] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0140.094] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03cf) returned 0x1 [0140.094] SetCursor (hCursor=0x10003) returned 0x10003 [0140.094] TranslateMessage (lpMsg=0x1ef250) returned 0 [0140.094] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0140.094] GetKeyState (nVirtKey=1) returned 0 [0140.094] GetKeyState (nVirtKey=2) returned 0 [0140.094] GetKeyState (nVirtKey=4) returned 0 [0140.094] GetKeyState (nVirtKey=5) returned 0 [0140.094] GetKeyState (nVirtKey=6) returned 0 [0140.094] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0140.094] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0140.094] WaitMessage () returned 1 [0140.153] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0140.153] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03cf) returned 0x1 [0140.153] IsWindowUnicode (hWnd=0x201d0) returned 1 [0140.153] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0140.153] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03cf) returned 0x1 [0140.153] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0140.153] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1de028a) returned 0x0 [0140.153] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0140.153] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0140.153] SetCursor (hCursor=0x10003) returned 0x10003 [0140.153] TranslateMessage (lpMsg=0x1ef250) returned 0 [0140.153] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0140.153] GetKeyState (nVirtKey=1) returned -127 [0140.153] GetKeyState (nVirtKey=2) returned 0 [0140.153] GetKeyState (nVirtKey=4) returned 0 [0140.153] GetKeyState (nVirtKey=5) returned 0 [0140.153] GetKeyState (nVirtKey=6) returned 0 [0140.153] IsWindowVisible (hWnd=0x201d0) returned 1 [0140.154] IsWindowEnabled (hWnd=0x201d0) returned 1 [0140.154] SetFocus (hWnd=0x201d0) returned 0x201d0 [0140.155] GetFocus () returned 0x201d0 [0140.155] GetFocus () returned 0x201d0 [0140.155] GetFocus () returned 0x201d0 [0140.155] GetKeyState (nVirtKey=1) returned -127 [0140.155] GetKeyState (nVirtKey=2) returned 0 [0140.155] GetKeyState (nVirtKey=4) returned 0 [0140.155] GetKeyState (nVirtKey=5) returned 0 [0140.155] GetKeyState (nVirtKey=6) returned 0 [0140.155] GetCapture () returned 0x0 [0140.155] SetCapture (hWnd=0x201d0) returned 0x0 [0140.155] GetKeyState (nVirtKey=1) returned -127 [0140.155] GetKeyState (nVirtKey=2) returned 0 [0140.155] GetKeyState (nVirtKey=4) returned 0 [0140.155] GetKeyState (nVirtKey=5) returned 0 [0140.155] GetKeyState (nVirtKey=6) returned 0 [0140.155] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0140.155] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0140.155] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0140.155] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0140.155] TranslateMessage (lpMsg=0x1ef250) returned 0 [0140.155] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0140.155] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0140.155] IsWindowUnicode (hWnd=0x201d0) returned 1 [0140.155] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0140.155] TranslateMessage (lpMsg=0x1ef250) returned 0 [0140.155] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0140.155] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2664348, cPoints=0x1 | out: lpPoints=0x2664348) returned 42533703 [0140.155] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0140.155] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0140.155] UpdateWindow (hWnd=0x201d0) returned 1 [0140.155] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0140.156] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0140.156] CreateCompatibleDC (hdc=0x160107c7) returned 0x5401084a [0140.156] SelectObject (hdc=0x5401084a, h=0x490500d1) returned 0x185000f [0140.156] GdipCreateFromHDC (hdc=0x5401084a, graphics=0x1eea5c) returned 0x0 [0140.156] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0140.156] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0140.156] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0140.156] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0140.156] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0140.156] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0140.156] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0140.156] LocalFree (hMem=0x416cb8) returned 0x0 [0140.156] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0140.156] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0140.156] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0140.156] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0140.156] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0140.156] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd410dbd) returned 0x0 [0140.156] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0140.157] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0140.157] GetCurrentObject (hdc=0x5401084a, type=0x1) returned 0x1b00017 [0140.157] GetCurrentObject (hdc=0x5401084a, type=0x2) returned 0x1900010 [0140.157] GetCurrentObject (hdc=0x5401084a, type=0x7) returned 0x490500d1 [0140.157] GetCurrentObject (hdc=0x5401084a, type=0x6) returned 0x18a002e [0140.157] SaveDC (hdc=0x5401084a) returned 1 [0140.157] GetNearestColor (hdc=0x5401084a, color=0xf5f5f5) returned 0xf5f5f5 [0140.157] GetNearestColor (hdc=0x5401084a, color=0x515151) returned 0x515151 [0140.157] GetNearestColor (hdc=0x5401084a, color=0x0) returned 0x0 [0140.157] GetNearestColor (hdc=0x5401084a, color=0x515151) returned 0x515151 [0140.157] GetNearestColor (hdc=0x5401084a, color=0x0) returned 0x0 [0140.157] GetNearestColor (hdc=0x5401084a, color=0xfafafa) returned 0xfafafa [0140.157] GetNearestColor (hdc=0x5401084a, color=0xe0e0e0) returned 0xe0e0e0 [0140.157] GetNearestColor (hdc=0x5401084a, color=0xdcdcdc) returned 0xdcdcdc [0140.157] GetNearestColor (hdc=0x5401084a, color=0x0) returned 0x0 [0140.157] RestoreDC (hdc=0x5401084a, nSavedDC=-1) returned 1 [0140.157] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5401084a) returned 0x0 [0140.157] IsAppThemed () returned 0x1 [0140.157] GetThemeAppProperties () returned 0x3 [0140.157] GetThemeAppProperties () returned 0x3 [0140.157] IsAppThemed () returned 0x1 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2664a4c | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0140.158] IsAppThemed () returned 0x1 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] IsAppThemed () returned 0x1 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] IsAppThemed () returned 0x1 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] IsAppThemed () returned 0x1 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] IsThemePartDefined () returned 0x1 [0140.158] IsAppThemed () returned 0x1 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0140.158] IsAppThemed () returned 0x1 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] IsAppThemed () returned 0x1 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] GetThemeAppProperties () returned 0x3 [0140.158] IsThemePartDefined () returned 0x1 [0140.158] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0140.158] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0140.158] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0140.158] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0140.158] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0140.158] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0140.158] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0140.159] LocalFree (hMem=0x416cb8) returned 0x0 [0140.159] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0140.159] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0140.159] LocalFree (hMem=0x416cb8) returned 0x0 [0140.159] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0140.159] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0140.159] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0140.159] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0140.159] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0140.159] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0140.159] GetCurrentObject (hdc=0x5401084a, type=0x1) returned 0x1b00017 [0140.159] GetCurrentObject (hdc=0x5401084a, type=0x2) returned 0x1900010 [0140.159] GetCurrentObject (hdc=0x5401084a, type=0x7) returned 0x490500d1 [0140.159] GetCurrentObject (hdc=0x5401084a, type=0x6) returned 0x18a002e [0140.159] SaveDC (hdc=0x5401084a) returned 1 [0140.159] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6040813 [0140.159] GetClipRgn (hdc=0x5401084a, hrgn=0x6040813) returned 0 [0140.159] SelectClipRgn (hdc=0x5401084a, hrgn=0xea040246) returned 2 [0140.159] DeleteObject (ho=0x6040813) returned 1 [0140.159] DeleteObject (ho=0xea040246) returned 1 [0140.159] OffsetViewportOrgEx (in: hdc=0x5401084a, x=0, y=0, lppt=0x26650fc | out: lppt=0x26650fc) returned 1 [0140.159] DrawThemeParentBackground () returned 0x0 [0140.160] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0140.160] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0140.160] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0140.160] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0140.160] GetSystemMetrics (nIndex=42) returned 0 [0140.160] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0140.160] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0140.160] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0140.160] GetCurrentObject (hdc=0x5401084a, type=0x1) returned 0x1b00017 [0140.160] GetCurrentObject (hdc=0x5401084a, type=0x2) returned 0x1900010 [0140.160] GetCurrentObject (hdc=0x5401084a, type=0x7) returned 0x490500d1 [0140.160] GetCurrentObject (hdc=0x5401084a, type=0x6) returned 0x18a002e [0140.160] SaveDC (hdc=0x5401084a) returned 2 [0140.160] GetNearestColor (hdc=0x5401084a, color=0xf5f5f5) returned 0xf5f5f5 [0140.160] CreateSolidBrush (color=0xf5f5f5) returned 0x7c100244 [0140.160] FillRect (hDC=0x5401084a, lprc=0x1ee2d0, hbr=0x7c100244) returned 1 [0140.160] DeleteObject (ho=0x7c100244) returned 1 [0140.160] RestoreDC (hdc=0x5401084a, nSavedDC=-1) returned 1 [0140.160] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0140.160] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0140.160] GetSystemMetrics (nIndex=42) returned 0 [0140.161] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0140.161] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0140.161] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0140.161] GetCurrentObject (hdc=0x5401084a, type=0x1) returned 0x1b00017 [0140.161] GetCurrentObject (hdc=0x5401084a, type=0x2) returned 0x1900010 [0140.161] GetCurrentObject (hdc=0x5401084a, type=0x7) returned 0x490500d1 [0140.161] GetCurrentObject (hdc=0x5401084a, type=0x6) returned 0x18a002e [0140.161] SaveDC (hdc=0x5401084a) returned 2 [0140.161] GetNearestColor (hdc=0x5401084a, color=0xf5f5f5) returned 0xf5f5f5 [0140.161] CreateSolidBrush (color=0xf5f5f5) returned 0x7d100244 [0140.161] FillRect (hDC=0x5401084a, lprc=0x1ee270, hbr=0x7d100244) returned 1 [0140.161] DeleteObject (ho=0x7d100244) returned 1 [0140.161] RestoreDC (hdc=0x5401084a, nSavedDC=-1) returned 1 [0140.161] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0140.161] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0140.161] GetSystemMetrics (nIndex=42) returned 0 [0140.161] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0140.161] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0140.161] RestoreDC (hdc=0x5401084a, nSavedDC=-1) returned 1 [0140.161] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5401084a) returned 0x0 [0140.161] IsAppThemed () returned 0x1 [0140.161] GetThemeAppProperties () returned 0x3 [0140.161] GetThemeAppProperties () returned 0x3 [0140.162] IsAppThemed () returned 0x1 [0140.162] GetThemeAppProperties () returned 0x3 [0140.162] GetThemeAppProperties () returned 0x3 [0140.162] IsThemePartDefined () returned 0x1 [0140.162] GdipCreateRegion (region=0x1ee764) returned 0x0 [0140.162] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0140.162] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0140.162] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0140.162] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0140.162] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0140.162] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0140.162] LocalFree (hMem=0x416cb8) returned 0x0 [0140.162] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0140.162] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0140.162] LocalFree (hMem=0x416cb8) returned 0x0 [0140.162] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0140.162] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0140.162] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0140.162] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0140.162] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0140.162] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0140.162] GetCurrentObject (hdc=0x5401084a, type=0x1) returned 0x1b00017 [0140.162] GetCurrentObject (hdc=0x5401084a, type=0x2) returned 0x1900010 [0140.162] GetCurrentObject (hdc=0x5401084a, type=0x7) returned 0x490500d1 [0140.162] GetCurrentObject (hdc=0x5401084a, type=0x6) returned 0x18a002e [0140.162] SaveDC (hdc=0x5401084a) returned 1 [0140.163] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xeb040246 [0140.163] GetClipRgn (hdc=0x5401084a, hrgn=0xeb040246) returned 0 [0140.163] SelectClipRgn (hdc=0x5401084a, hrgn=0x8040813) returned 2 [0140.163] DeleteObject (ho=0xeb040246) returned 1 [0140.163] DeleteObject (ho=0x8040813) returned 1 [0140.163] OffsetViewportOrgEx (in: hdc=0x5401084a, x=0, y=0, lppt=0x266593c | out: lppt=0x266593c) returned 1 [0140.163] IsAppThemed () returned 0x1 [0140.163] GetThemeAppProperties () returned 0x3 [0140.163] GetThemeAppProperties () returned 0x3 [0140.163] DrawThemeBackground () returned 0x0 [0140.163] RestoreDC (hdc=0x5401084a, nSavedDC=-1) returned 1 [0140.163] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5401084a) returned 0x0 [0140.163] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0140.163] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0140.163] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0140.163] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0140.163] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0140.163] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0140.163] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0140.163] LocalFree (hMem=0x416cb8) returned 0x0 [0140.163] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0140.163] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0140.164] LocalFree (hMem=0x416cb8) returned 0x0 [0140.164] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0140.164] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0140.164] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0140.164] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0140.164] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0140.164] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0140.164] GetCurrentObject (hdc=0x5401084a, type=0x1) returned 0x1b00017 [0140.164] GetCurrentObject (hdc=0x5401084a, type=0x2) returned 0x1900010 [0140.164] GetCurrentObject (hdc=0x5401084a, type=0x7) returned 0x490500d1 [0140.164] GetCurrentObject (hdc=0x5401084a, type=0x6) returned 0x18a002e [0140.164] SaveDC (hdc=0x5401084a) returned 1 [0140.164] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9040813 [0140.164] GetClipRgn (hdc=0x5401084a, hrgn=0x9040813) returned 0 [0140.164] SelectClipRgn (hdc=0x5401084a, hrgn=0xec040246) returned 2 [0140.164] DeleteObject (ho=0x9040813) returned 1 [0140.164] DeleteObject (ho=0xec040246) returned 1 [0140.164] OffsetViewportOrgEx (in: hdc=0x5401084a, x=0, y=0, lppt=0x2665c10 | out: lppt=0x2665c10) returned 1 [0140.164] IsAppThemed () returned 0x1 [0140.164] GetThemeAppProperties () returned 0x3 [0140.164] GetThemeAppProperties () returned 0x3 [0140.164] GetThemeBackgroundContentRect () returned 0x0 [0140.164] RestoreDC (hdc=0x5401084a, nSavedDC=-1) returned 1 [0140.164] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5401084a) returned 0x0 [0140.164] IsAppThemed () returned 0x1 [0140.165] GetThemeAppProperties () returned 0x3 [0140.165] GetThemeAppProperties () returned 0x3 [0140.165] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0140.165] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0140.165] GetCurrentObject (hdc=0x5401084a, type=0x1) returned 0x1b00017 [0140.165] GetCurrentObject (hdc=0x5401084a, type=0x2) returned 0x1900010 [0140.165] GetCurrentObject (hdc=0x5401084a, type=0x7) returned 0x490500d1 [0140.165] GetCurrentObject (hdc=0x5401084a, type=0x6) returned 0x18a002e [0140.165] SaveDC (hdc=0x5401084a) returned 1 [0140.165] GetTextAlign (hdc=0x5401084a) returned 0x0 [0140.165] GetTextColor (hdc=0x5401084a) returned 0x0 [0140.165] GetCurrentObject (hdc=0x5401084a, type=0x6) returned 0x18a002e [0140.165] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0140.165] SelectObject (hdc=0x5401084a, h=0x220a081a) returned 0x18a002e [0140.165] GetBkMode (hdc=0x5401084a) returned 2 [0140.165] SetBkMode (hdc=0x5401084a, mode=1) returned 2 [0140.165] DrawTextExW (in: hdc=0x5401084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2665fa4 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0140.165] DrawTextExW (in: hdc=0x5401084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2665fa4 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0140.166] RestoreDC (hdc=0x5401084a, nSavedDC=-1) returned 1 [0140.166] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5401084a) returned 0x0 [0140.166] GetFocus () returned 0x201d0 [0140.166] IsAppThemed () returned 0x1 [0140.166] GetThemeAppProperties () returned 0x3 [0140.166] GetThemeAppProperties () returned 0x3 [0140.166] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0140.166] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5401084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0140.166] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5401084a) returned 0x0 [0140.166] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0140.166] SelectObject (hdc=0x5401084a, h=0x185000f) returned 0x490500d1 [0140.166] DeleteDC (hdc=0x5401084a) returned 1 [0140.166] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0140.166] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0140.166] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26660a0, cPoints=0x1 | out: lpPoints=0x26660a0) returned 42533703 [0140.166] WindowFromPoint (Point=0x3cf) returned 0x201d0 [0140.166] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03cf) returned 0x1 [0140.166] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0140.166] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0140.166] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0140.166] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.166] GetSystemMetrics (nIndex=42) returned 0 [0140.167] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0140.167] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0140.167] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0140.167] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0140.167] GetCapture () returned 0x201d0 [0140.167] ReleaseCapture () returned 1 [0140.167] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0140.167] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0140.167] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03cf) returned 0x1 [0140.167] IsWindowUnicode (hWnd=0x201d0) returned 1 [0140.167] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0140.167] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03cf) returned 0x1 [0140.167] SetCursor (hCursor=0x10003) returned 0x10003 [0140.167] TranslateMessage (lpMsg=0x1ef250) returned 0 [0140.167] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0140.167] GetKeyState (nVirtKey=1) returned 1 [0140.167] GetKeyState (nVirtKey=2) returned 0 [0140.167] GetKeyState (nVirtKey=4) returned 0 [0140.167] GetKeyState (nVirtKey=5) returned 0 [0140.167] GetKeyState (nVirtKey=6) returned 0 [0140.168] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0140.168] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0140.168] WaitMessage () returned 1 [0143.184] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0143.185] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c7) returned 0x1 [0143.186] IsWindowUnicode (hWnd=0x201d0) returned 1 [0143.186] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0143.186] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c7) returned 0x1 [0143.186] SetCursor (hCursor=0x10003) returned 0x10003 [0143.186] TranslateMessage (lpMsg=0x1ef250) returned 0 [0143.186] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0143.186] GetKeyState (nVirtKey=1) returned 1 [0143.186] GetKeyState (nVirtKey=2) returned 0 [0143.186] GetKeyState (nVirtKey=4) returned 0 [0143.186] GetKeyState (nVirtKey=5) returned 0 [0143.186] GetKeyState (nVirtKey=6) returned 0 [0143.187] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0143.187] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0143.187] WaitMessage () returned 1 [0143.248] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0143.248] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c7) returned 0x1 [0143.248] IsWindowUnicode (hWnd=0x201d0) returned 1 [0143.248] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0143.248] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c7) returned 0x1 [0143.249] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0143.249] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e40282) returned 0x0 [0143.249] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0143.249] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0143.249] SetCursor (hCursor=0x10003) returned 0x10003 [0143.249] TranslateMessage (lpMsg=0x1ef250) returned 0 [0143.249] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0143.249] GetKeyState (nVirtKey=1) returned -128 [0143.249] GetKeyState (nVirtKey=2) returned 0 [0143.249] GetKeyState (nVirtKey=4) returned 0 [0143.249] GetKeyState (nVirtKey=5) returned 0 [0143.249] GetKeyState (nVirtKey=6) returned 0 [0143.249] IsWindowVisible (hWnd=0x201d0) returned 1 [0143.249] IsWindowEnabled (hWnd=0x201d0) returned 1 [0143.249] SetFocus (hWnd=0x201d0) returned 0x201d0 [0143.249] GetFocus () returned 0x201d0 [0143.249] GetFocus () returned 0x201d0 [0143.250] GetFocus () returned 0x201d0 [0143.250] GetKeyState (nVirtKey=1) returned -128 [0143.250] GetKeyState (nVirtKey=2) returned 0 [0143.250] GetKeyState (nVirtKey=4) returned 0 [0143.250] GetKeyState (nVirtKey=5) returned 0 [0143.250] GetKeyState (nVirtKey=6) returned 0 [0143.250] GetCapture () returned 0x0 [0143.250] SetCapture (hWnd=0x201d0) returned 0x0 [0143.250] GetKeyState (nVirtKey=1) returned -128 [0143.250] GetKeyState (nVirtKey=2) returned 0 [0143.250] GetKeyState (nVirtKey=4) returned 0 [0143.250] GetKeyState (nVirtKey=5) returned 0 [0143.250] GetKeyState (nVirtKey=6) returned 0 [0143.250] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0143.250] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0143.250] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0143.250] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0143.250] TranslateMessage (lpMsg=0x1ef250) returned 0 [0143.250] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0143.250] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0143.250] IsWindowUnicode (hWnd=0x201d0) returned 1 [0143.250] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0143.250] TranslateMessage (lpMsg=0x1ef250) returned 0 [0143.250] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0143.250] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26661c4, cPoints=0x1 | out: lpPoints=0x26661c4) returned 42533703 [0143.251] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0143.251] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0143.251] UpdateWindow (hWnd=0x201d0) returned 1 [0143.251] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0143.251] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0143.251] CreateCompatibleDC (hdc=0x160107c7) returned 0x5501084a [0143.251] SelectObject (hdc=0x5501084a, h=0x490500d1) returned 0x185000f [0143.251] GdipCreateFromHDC (hdc=0x5501084a, graphics=0x1eea5c) returned 0x0 [0143.252] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0143.252] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0143.252] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0143.252] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0143.252] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0143.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0143.253] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0143.253] LocalFree (hMem=0x416cb8) returned 0x0 [0143.253] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0143.253] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0143.253] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0143.253] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0143.253] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0143.253] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd3f0dbd) returned 0x0 [0143.253] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0143.254] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0143.254] GetCurrentObject (hdc=0x5501084a, type=0x1) returned 0x1b00017 [0143.254] GetCurrentObject (hdc=0x5501084a, type=0x2) returned 0x1900010 [0143.254] GetCurrentObject (hdc=0x5501084a, type=0x7) returned 0x490500d1 [0143.254] GetCurrentObject (hdc=0x5501084a, type=0x6) returned 0x18a002e [0143.254] SaveDC (hdc=0x5501084a) returned 1 [0143.254] GetNearestColor (hdc=0x5501084a, color=0xf5f5f5) returned 0xf5f5f5 [0143.254] GetNearestColor (hdc=0x5501084a, color=0x515151) returned 0x515151 [0143.254] GetNearestColor (hdc=0x5501084a, color=0x0) returned 0x0 [0143.254] GetNearestColor (hdc=0x5501084a, color=0x515151) returned 0x515151 [0143.254] GetNearestColor (hdc=0x5501084a, color=0x0) returned 0x0 [0143.254] GetNearestColor (hdc=0x5501084a, color=0xfafafa) returned 0xfafafa [0143.254] GetNearestColor (hdc=0x5501084a, color=0xe0e0e0) returned 0xe0e0e0 [0143.255] GetNearestColor (hdc=0x5501084a, color=0xdcdcdc) returned 0xdcdcdc [0143.255] GetNearestColor (hdc=0x5501084a, color=0x0) returned 0x0 [0143.255] RestoreDC (hdc=0x5501084a, nSavedDC=-1) returned 1 [0143.255] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5501084a) returned 0x0 [0143.255] IsAppThemed () returned 0x1 [0143.255] GetThemeAppProperties () returned 0x3 [0143.255] GetThemeAppProperties () returned 0x3 [0143.255] IsAppThemed () returned 0x1 [0143.255] GetThemeAppProperties () returned 0x3 [0143.255] GetThemeAppProperties () returned 0x3 [0143.255] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26668c8 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0143.256] IsAppThemed () returned 0x1 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] IsAppThemed () returned 0x1 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] IsAppThemed () returned 0x1 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] IsAppThemed () returned 0x1 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] IsThemePartDefined () returned 0x1 [0143.256] IsAppThemed () returned 0x1 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0143.256] IsAppThemed () returned 0x1 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] IsAppThemed () returned 0x1 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] GetThemeAppProperties () returned 0x3 [0143.256] IsThemePartDefined () returned 0x1 [0143.256] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0143.256] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0143.256] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0143.256] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0143.256] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0143.256] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0143.257] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0143.257] LocalFree (hMem=0x416cb8) returned 0x0 [0143.257] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0143.257] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0143.257] LocalFree (hMem=0x416cb8) returned 0x0 [0143.257] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0143.257] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0143.257] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0143.257] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0143.257] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0143.257] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0143.257] GetCurrentObject (hdc=0x5501084a, type=0x1) returned 0x1b00017 [0143.257] GetCurrentObject (hdc=0x5501084a, type=0x2) returned 0x1900010 [0143.257] GetCurrentObject (hdc=0x5501084a, type=0x7) returned 0x490500d1 [0143.257] GetCurrentObject (hdc=0x5501084a, type=0x6) returned 0x18a002e [0143.257] SaveDC (hdc=0x5501084a) returned 1 [0143.257] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xed040246 [0143.257] GetClipRgn (hdc=0x5501084a, hrgn=0xed040246) returned 0 [0143.257] SelectClipRgn (hdc=0x5501084a, hrgn=0xd040813) returned 2 [0143.257] DeleteObject (ho=0xed040246) returned 1 [0143.257] DeleteObject (ho=0xd040813) returned 1 [0143.257] OffsetViewportOrgEx (in: hdc=0x5501084a, x=0, y=0, lppt=0x2666f78 | out: lppt=0x2666f78) returned 1 [0143.258] DrawThemeParentBackground () returned 0x0 [0143.258] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0143.258] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0143.258] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0143.258] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0143.258] GetSystemMetrics (nIndex=42) returned 0 [0143.258] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0143.258] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0143.258] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0143.258] GetCurrentObject (hdc=0x5501084a, type=0x1) returned 0x1b00017 [0143.258] GetCurrentObject (hdc=0x5501084a, type=0x2) returned 0x1900010 [0143.258] GetCurrentObject (hdc=0x5501084a, type=0x7) returned 0x490500d1 [0143.258] GetCurrentObject (hdc=0x5501084a, type=0x6) returned 0x18a002e [0143.258] SaveDC (hdc=0x5501084a) returned 2 [0143.258] GetNearestColor (hdc=0x5501084a, color=0xf5f5f5) returned 0xf5f5f5 [0143.259] CreateSolidBrush (color=0xf5f5f5) returned 0x7e100244 [0143.259] FillRect (hDC=0x5501084a, lprc=0x1ee2d0, hbr=0x7e100244) returned 1 [0143.259] DeleteObject (ho=0x7e100244) returned 1 [0143.259] RestoreDC (hdc=0x5501084a, nSavedDC=-1) returned 1 [0143.259] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0143.259] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0143.259] GetSystemMetrics (nIndex=42) returned 0 [0143.259] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0143.259] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0143.259] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0143.259] GetCurrentObject (hdc=0x5501084a, type=0x1) returned 0x1b00017 [0143.259] GetCurrentObject (hdc=0x5501084a, type=0x2) returned 0x1900010 [0143.259] GetCurrentObject (hdc=0x5501084a, type=0x7) returned 0x490500d1 [0143.259] GetCurrentObject (hdc=0x5501084a, type=0x6) returned 0x18a002e [0143.259] SaveDC (hdc=0x5501084a) returned 2 [0143.259] GetNearestColor (hdc=0x5501084a, color=0xf5f5f5) returned 0xf5f5f5 [0143.259] CreateSolidBrush (color=0xf5f5f5) returned 0x7f100244 [0143.259] FillRect (hDC=0x5501084a, lprc=0x1ee270, hbr=0x7f100244) returned 1 [0143.259] DeleteObject (ho=0x7f100244) returned 1 [0143.260] RestoreDC (hdc=0x5501084a, nSavedDC=-1) returned 1 [0143.260] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0143.260] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0143.260] GetSystemMetrics (nIndex=42) returned 0 [0143.260] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0143.260] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0143.260] RestoreDC (hdc=0x5501084a, nSavedDC=-1) returned 1 [0143.260] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5501084a) returned 0x0 [0143.260] IsAppThemed () returned 0x1 [0143.260] GetThemeAppProperties () returned 0x3 [0143.260] GetThemeAppProperties () returned 0x3 [0143.260] IsAppThemed () returned 0x1 [0143.260] GetThemeAppProperties () returned 0x3 [0143.260] GetThemeAppProperties () returned 0x3 [0143.260] IsThemePartDefined () returned 0x1 [0143.260] GdipCreateRegion (region=0x1ee764) returned 0x0 [0143.260] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0143.260] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0143.260] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0143.260] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0143.260] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0143.260] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0143.260] LocalFree (hMem=0x416cb8) returned 0x0 [0143.260] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0143.260] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0143.261] LocalFree (hMem=0x416cb8) returned 0x0 [0143.261] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0143.261] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0143.261] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0143.261] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0143.261] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0143.261] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0143.261] GetCurrentObject (hdc=0x5501084a, type=0x1) returned 0x1b00017 [0143.261] GetCurrentObject (hdc=0x5501084a, type=0x2) returned 0x1900010 [0143.261] GetCurrentObject (hdc=0x5501084a, type=0x7) returned 0x490500d1 [0143.261] GetCurrentObject (hdc=0x5501084a, type=0x6) returned 0x18a002e [0143.261] SaveDC (hdc=0x5501084a) returned 1 [0143.261] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe040813 [0143.261] GetClipRgn (hdc=0x5501084a, hrgn=0xe040813) returned 0 [0143.261] SelectClipRgn (hdc=0x5501084a, hrgn=0xef040246) returned 2 [0143.261] DeleteObject (ho=0xe040813) returned 1 [0143.261] DeleteObject (ho=0xef040246) returned 1 [0143.261] OffsetViewportOrgEx (in: hdc=0x5501084a, x=0, y=0, lppt=0x26677b8 | out: lppt=0x26677b8) returned 1 [0143.261] IsAppThemed () returned 0x1 [0143.261] GetThemeAppProperties () returned 0x3 [0143.261] GetThemeAppProperties () returned 0x3 [0143.261] DrawThemeBackground () returned 0x0 [0143.261] RestoreDC (hdc=0x5501084a, nSavedDC=-1) returned 1 [0143.261] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5501084a) returned 0x0 [0143.262] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0143.262] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0143.262] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0143.262] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0143.262] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0143.262] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0143.262] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0143.262] LocalFree (hMem=0x416cb8) returned 0x0 [0143.262] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0143.262] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0143.262] LocalFree (hMem=0x416cb8) returned 0x0 [0143.262] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0143.262] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0143.262] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0143.262] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0143.262] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0143.262] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0143.262] GetCurrentObject (hdc=0x5501084a, type=0x1) returned 0x1b00017 [0143.262] GetCurrentObject (hdc=0x5501084a, type=0x2) returned 0x1900010 [0143.262] GetCurrentObject (hdc=0x5501084a, type=0x7) returned 0x490500d1 [0143.262] GetCurrentObject (hdc=0x5501084a, type=0x6) returned 0x18a002e [0143.262] SaveDC (hdc=0x5501084a) returned 1 [0143.262] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf0040246 [0143.262] GetClipRgn (hdc=0x5501084a, hrgn=0xf0040246) returned 0 [0143.263] SelectClipRgn (hdc=0x5501084a, hrgn=0xf040813) returned 2 [0143.263] DeleteObject (ho=0xf0040246) returned 1 [0143.263] DeleteObject (ho=0xf040813) returned 1 [0143.263] OffsetViewportOrgEx (in: hdc=0x5501084a, x=0, y=0, lppt=0x2667a8c | out: lppt=0x2667a8c) returned 1 [0143.263] IsAppThemed () returned 0x1 [0143.263] GetThemeAppProperties () returned 0x3 [0143.263] GetThemeAppProperties () returned 0x3 [0143.263] GetThemeBackgroundContentRect () returned 0x0 [0143.263] RestoreDC (hdc=0x5501084a, nSavedDC=-1) returned 1 [0143.263] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5501084a) returned 0x0 [0143.263] IsAppThemed () returned 0x1 [0143.263] GetThemeAppProperties () returned 0x3 [0143.263] GetThemeAppProperties () returned 0x3 [0143.263] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0143.263] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0143.263] GetCurrentObject (hdc=0x5501084a, type=0x1) returned 0x1b00017 [0143.263] GetCurrentObject (hdc=0x5501084a, type=0x2) returned 0x1900010 [0143.263] GetCurrentObject (hdc=0x5501084a, type=0x7) returned 0x490500d1 [0143.263] GetCurrentObject (hdc=0x5501084a, type=0x6) returned 0x18a002e [0143.263] SaveDC (hdc=0x5501084a) returned 1 [0143.263] GetTextAlign (hdc=0x5501084a) returned 0x0 [0143.263] GetTextColor (hdc=0x5501084a) returned 0x0 [0143.263] GetCurrentObject (hdc=0x5501084a, type=0x6) returned 0x18a002e [0143.264] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0143.264] SelectObject (hdc=0x5501084a, h=0x220a081a) returned 0x18a002e [0143.264] GetBkMode (hdc=0x5501084a) returned 2 [0143.264] SetBkMode (hdc=0x5501084a, mode=1) returned 2 [0143.264] DrawTextExW (in: hdc=0x5501084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2667e20 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0143.264] DrawTextExW (in: hdc=0x5501084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2667e20 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0143.264] RestoreDC (hdc=0x5501084a, nSavedDC=-1) returned 1 [0143.264] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5501084a) returned 0x0 [0143.264] GetFocus () returned 0x201d0 [0143.264] IsAppThemed () returned 0x1 [0143.264] GetThemeAppProperties () returned 0x3 [0143.264] GetThemeAppProperties () returned 0x3 [0143.264] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0143.264] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5501084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0143.265] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5501084a) returned 0x0 [0143.265] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0143.265] SelectObject (hdc=0x5501084a, h=0x185000f) returned 0x490500d1 [0143.265] DeleteDC (hdc=0x5501084a) returned 1 [0143.265] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0143.265] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0143.265] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2667f1c, cPoints=0x1 | out: lpPoints=0x2667f1c) returned 42533703 [0143.265] WindowFromPoint (Point=0x3c7) returned 0x201d0 [0143.265] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c7) returned 0x1 [0143.265] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0143.265] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0143.265] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0143.265] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.265] GetSystemMetrics (nIndex=42) returned 0 [0143.265] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0143.265] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0143.266] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0143.266] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0143.266] GetCapture () returned 0x201d0 [0143.266] ReleaseCapture () returned 1 [0143.266] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0143.266] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0143.266] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c7) returned 0x1 [0143.266] IsWindowUnicode (hWnd=0x201d0) returned 1 [0143.266] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0143.266] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c7) returned 0x1 [0143.266] SetCursor (hCursor=0x10003) returned 0x10003 [0143.266] TranslateMessage (lpMsg=0x1ef250) returned 0 [0143.266] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0143.266] GetKeyState (nVirtKey=1) returned 0 [0143.266] GetKeyState (nVirtKey=2) returned 0 [0143.266] GetKeyState (nVirtKey=4) returned 0 [0143.266] GetKeyState (nVirtKey=5) returned 0 [0143.266] GetKeyState (nVirtKey=6) returned 0 [0143.266] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0143.266] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0143.266] WaitMessage () returned 1 [0146.214] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0146.214] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103eb) returned 0x1 [0146.214] IsWindowUnicode (hWnd=0x201d0) returned 1 [0146.214] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0146.214] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103eb) returned 0x1 [0146.215] SetCursor (hCursor=0x10003) returned 0x10003 [0146.215] TranslateMessage (lpMsg=0x1ef250) returned 0 [0146.215] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0146.215] GetKeyState (nVirtKey=1) returned 0 [0146.215] GetKeyState (nVirtKey=2) returned 0 [0146.215] GetKeyState (nVirtKey=4) returned 0 [0146.215] GetKeyState (nVirtKey=5) returned 0 [0146.215] GetKeyState (nVirtKey=6) returned 0 [0146.215] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0146.215] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0146.215] WaitMessage () returned 1 [0146.269] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0146.269] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103eb) returned 0x1 [0146.269] IsWindowUnicode (hWnd=0x201d0) returned 1 [0146.269] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0146.269] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103eb) returned 0x1 [0146.269] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0146.269] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e002a6) returned 0x0 [0146.270] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0146.270] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0146.270] SetCursor (hCursor=0x10003) returned 0x10003 [0146.270] TranslateMessage (lpMsg=0x1ef250) returned 0 [0146.270] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0146.270] GetKeyState (nVirtKey=1) returned -127 [0146.270] GetKeyState (nVirtKey=2) returned 0 [0146.270] GetKeyState (nVirtKey=4) returned 0 [0146.270] GetKeyState (nVirtKey=5) returned 0 [0146.270] GetKeyState (nVirtKey=6) returned 0 [0146.270] IsWindowVisible (hWnd=0x201d0) returned 1 [0146.270] IsWindowEnabled (hWnd=0x201d0) returned 1 [0146.270] SetFocus (hWnd=0x201d0) returned 0x201d0 [0146.270] GetFocus () returned 0x201d0 [0146.270] GetFocus () returned 0x201d0 [0146.270] GetFocus () returned 0x201d0 [0146.270] GetKeyState (nVirtKey=1) returned -127 [0146.270] GetKeyState (nVirtKey=2) returned 0 [0146.270] GetKeyState (nVirtKey=4) returned 0 [0146.271] GetKeyState (nVirtKey=5) returned 0 [0146.271] GetKeyState (nVirtKey=6) returned 0 [0146.271] GetCapture () returned 0x0 [0146.271] SetCapture (hWnd=0x201d0) returned 0x0 [0146.271] GetKeyState (nVirtKey=1) returned -127 [0146.271] GetKeyState (nVirtKey=2) returned 0 [0146.271] GetKeyState (nVirtKey=4) returned 0 [0146.271] GetKeyState (nVirtKey=5) returned 0 [0146.271] GetKeyState (nVirtKey=6) returned 0 [0146.271] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0146.271] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0146.271] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0146.271] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0146.271] TranslateMessage (lpMsg=0x1ef250) returned 0 [0146.271] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0146.271] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0146.271] IsWindowUnicode (hWnd=0x201d0) returned 1 [0146.271] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0146.271] TranslateMessage (lpMsg=0x1ef250) returned 0 [0146.271] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0146.271] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2668040, cPoints=0x1 | out: lpPoints=0x2668040) returned 42533703 [0146.271] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0146.271] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0146.271] UpdateWindow (hWnd=0x201d0) returned 1 [0146.271] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0146.271] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0146.271] CreateCompatibleDC (hdc=0x160107c7) returned 0x5601084a [0146.272] SelectObject (hdc=0x5601084a, h=0x490500d1) returned 0x185000f [0146.272] GdipCreateFromHDC (hdc=0x5601084a, graphics=0x1eea5c) returned 0x0 [0146.272] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0146.272] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0146.272] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0146.272] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0146.272] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0146.272] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0146.272] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0146.272] LocalFree (hMem=0x416cb8) returned 0x0 [0146.272] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0146.272] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0146.272] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0146.272] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0146.272] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0146.272] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd3d0dbd) returned 0x0 [0146.272] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0146.272] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0146.273] GetCurrentObject (hdc=0x5601084a, type=0x1) returned 0x1b00017 [0146.273] GetCurrentObject (hdc=0x5601084a, type=0x2) returned 0x1900010 [0146.273] GetCurrentObject (hdc=0x5601084a, type=0x7) returned 0x490500d1 [0146.273] GetCurrentObject (hdc=0x5601084a, type=0x6) returned 0x18a002e [0146.273] SaveDC (hdc=0x5601084a) returned 1 [0146.273] GetNearestColor (hdc=0x5601084a, color=0xf5f5f5) returned 0xf5f5f5 [0146.273] GetNearestColor (hdc=0x5601084a, color=0x515151) returned 0x515151 [0146.273] GetNearestColor (hdc=0x5601084a, color=0x0) returned 0x0 [0146.273] GetNearestColor (hdc=0x5601084a, color=0x515151) returned 0x515151 [0146.273] GetNearestColor (hdc=0x5601084a, color=0x0) returned 0x0 [0146.273] GetNearestColor (hdc=0x5601084a, color=0xfafafa) returned 0xfafafa [0146.273] GetNearestColor (hdc=0x5601084a, color=0xe0e0e0) returned 0xe0e0e0 [0146.273] GetNearestColor (hdc=0x5601084a, color=0xdcdcdc) returned 0xdcdcdc [0146.273] GetNearestColor (hdc=0x5601084a, color=0x0) returned 0x0 [0146.273] RestoreDC (hdc=0x5601084a, nSavedDC=-1) returned 1 [0146.273] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5601084a) returned 0x0 [0146.273] IsAppThemed () returned 0x1 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] IsAppThemed () returned 0x1 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2668744 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0146.274] IsAppThemed () returned 0x1 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] IsAppThemed () returned 0x1 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] IsAppThemed () returned 0x1 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] IsAppThemed () returned 0x1 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] IsThemePartDefined () returned 0x1 [0146.274] IsAppThemed () returned 0x1 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0146.274] IsAppThemed () returned 0x1 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] IsAppThemed () returned 0x1 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] GetThemeAppProperties () returned 0x3 [0146.274] IsThemePartDefined () returned 0x1 [0146.274] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0146.274] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0146.274] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0146.275] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0146.275] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0146.275] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0146.275] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0146.275] LocalFree (hMem=0x416cb8) returned 0x0 [0146.275] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0146.275] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0146.275] LocalFree (hMem=0x416cb8) returned 0x0 [0146.275] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0146.275] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0146.275] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0146.275] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0146.275] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0146.275] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0146.275] GetCurrentObject (hdc=0x5601084a, type=0x1) returned 0x1b00017 [0146.275] GetCurrentObject (hdc=0x5601084a, type=0x2) returned 0x1900010 [0146.275] GetCurrentObject (hdc=0x5601084a, type=0x7) returned 0x490500d1 [0146.275] GetCurrentObject (hdc=0x5601084a, type=0x6) returned 0x18a002e [0146.275] SaveDC (hdc=0x5601084a) returned 1 [0146.275] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x10040813 [0146.275] GetClipRgn (hdc=0x5601084a, hrgn=0x10040813) returned 0 [0146.276] SelectClipRgn (hdc=0x5601084a, hrgn=0xf4040246) returned 2 [0146.276] DeleteObject (ho=0x10040813) returned 1 [0146.276] DeleteObject (ho=0xf4040246) returned 1 [0146.276] OffsetViewportOrgEx (in: hdc=0x5601084a, x=0, y=0, lppt=0x2668df4 | out: lppt=0x2668df4) returned 1 [0146.276] DrawThemeParentBackground () returned 0x0 [0146.276] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0146.276] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0146.276] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0146.276] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0146.276] GetSystemMetrics (nIndex=42) returned 0 [0146.276] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0146.276] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0146.276] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0146.276] GetCurrentObject (hdc=0x5601084a, type=0x1) returned 0x1b00017 [0146.276] GetCurrentObject (hdc=0x5601084a, type=0x2) returned 0x1900010 [0146.276] GetCurrentObject (hdc=0x5601084a, type=0x7) returned 0x490500d1 [0146.276] GetCurrentObject (hdc=0x5601084a, type=0x6) returned 0x18a002e [0146.276] SaveDC (hdc=0x5601084a) returned 2 [0146.276] GetNearestColor (hdc=0x5601084a, color=0xf5f5f5) returned 0xf5f5f5 [0146.276] CreateSolidBrush (color=0xf5f5f5) returned 0x80100244 [0146.276] FillRect (hDC=0x5601084a, lprc=0x1ee2d0, hbr=0x80100244) returned 1 [0146.277] DeleteObject (ho=0x80100244) returned 1 [0146.277] RestoreDC (hdc=0x5601084a, nSavedDC=-1) returned 1 [0146.277] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0146.277] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0146.277] GetSystemMetrics (nIndex=42) returned 0 [0146.277] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0146.277] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0146.277] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0146.277] GetCurrentObject (hdc=0x5601084a, type=0x1) returned 0x1b00017 [0146.277] GetCurrentObject (hdc=0x5601084a, type=0x2) returned 0x1900010 [0146.277] GetCurrentObject (hdc=0x5601084a, type=0x7) returned 0x490500d1 [0146.277] GetCurrentObject (hdc=0x5601084a, type=0x6) returned 0x18a002e [0146.277] SaveDC (hdc=0x5601084a) returned 2 [0146.277] GetNearestColor (hdc=0x5601084a, color=0xf5f5f5) returned 0xf5f5f5 [0146.277] CreateSolidBrush (color=0xf5f5f5) returned 0x81100244 [0146.277] FillRect (hDC=0x5601084a, lprc=0x1ee270, hbr=0x81100244) returned 1 [0146.277] DeleteObject (ho=0x81100244) returned 1 [0146.277] RestoreDC (hdc=0x5601084a, nSavedDC=-1) returned 1 [0146.277] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0146.277] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0146.278] GetSystemMetrics (nIndex=42) returned 0 [0146.278] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0146.278] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0146.278] RestoreDC (hdc=0x5601084a, nSavedDC=-1) returned 1 [0146.278] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5601084a) returned 0x0 [0146.278] IsAppThemed () returned 0x1 [0146.278] GetThemeAppProperties () returned 0x3 [0146.278] GetThemeAppProperties () returned 0x3 [0146.278] IsAppThemed () returned 0x1 [0146.278] GetThemeAppProperties () returned 0x3 [0146.278] GetThemeAppProperties () returned 0x3 [0146.278] IsThemePartDefined () returned 0x1 [0146.278] GdipCreateRegion (region=0x1ee764) returned 0x0 [0146.278] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0146.278] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0146.278] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0146.278] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0146.278] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0146.278] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0146.278] LocalFree (hMem=0x416cb8) returned 0x0 [0146.278] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0146.278] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0146.278] LocalFree (hMem=0x416cb8) returned 0x0 [0146.278] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0146.278] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0146.279] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0146.279] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0146.279] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0146.279] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0146.279] GetCurrentObject (hdc=0x5601084a, type=0x1) returned 0x1b00017 [0146.279] GetCurrentObject (hdc=0x5601084a, type=0x2) returned 0x1900010 [0146.279] GetCurrentObject (hdc=0x5601084a, type=0x7) returned 0x490500d1 [0146.279] GetCurrentObject (hdc=0x5601084a, type=0x6) returned 0x18a002e [0146.279] SaveDC (hdc=0x5601084a) returned 1 [0146.279] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf5040246 [0146.279] GetClipRgn (hdc=0x5601084a, hrgn=0xf5040246) returned 0 [0146.279] SelectClipRgn (hdc=0x5601084a, hrgn=0x12040813) returned 2 [0146.279] DeleteObject (ho=0xf5040246) returned 1 [0146.279] DeleteObject (ho=0x12040813) returned 1 [0146.279] OffsetViewportOrgEx (in: hdc=0x5601084a, x=0, y=0, lppt=0x2669634 | out: lppt=0x2669634) returned 1 [0146.279] IsAppThemed () returned 0x1 [0146.279] GetThemeAppProperties () returned 0x3 [0146.279] GetThemeAppProperties () returned 0x3 [0146.279] DrawThemeBackground () returned 0x0 [0146.279] RestoreDC (hdc=0x5601084a, nSavedDC=-1) returned 1 [0146.279] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5601084a) returned 0x0 [0146.279] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0146.279] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0146.280] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0146.280] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0146.280] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0146.280] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0146.280] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0146.280] LocalFree (hMem=0x416cb8) returned 0x0 [0146.280] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0146.280] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0146.280] LocalFree (hMem=0x416cb8) returned 0x0 [0146.280] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0146.280] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0146.280] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0146.280] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0146.280] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0146.280] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0146.280] GetCurrentObject (hdc=0x5601084a, type=0x1) returned 0x1b00017 [0146.280] GetCurrentObject (hdc=0x5601084a, type=0x2) returned 0x1900010 [0146.280] GetCurrentObject (hdc=0x5601084a, type=0x7) returned 0x490500d1 [0146.280] GetCurrentObject (hdc=0x5601084a, type=0x6) returned 0x18a002e [0146.280] SaveDC (hdc=0x5601084a) returned 1 [0146.280] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x13040813 [0146.280] GetClipRgn (hdc=0x5601084a, hrgn=0x13040813) returned 0 [0146.281] SelectClipRgn (hdc=0x5601084a, hrgn=0xf6040246) returned 2 [0146.281] DeleteObject (ho=0x13040813) returned 1 [0146.281] DeleteObject (ho=0xf6040246) returned 1 [0146.281] OffsetViewportOrgEx (in: hdc=0x5601084a, x=0, y=0, lppt=0x2669908 | out: lppt=0x2669908) returned 1 [0146.281] IsAppThemed () returned 0x1 [0146.281] GetThemeAppProperties () returned 0x3 [0146.281] GetThemeAppProperties () returned 0x3 [0146.281] GetThemeBackgroundContentRect () returned 0x0 [0146.281] RestoreDC (hdc=0x5601084a, nSavedDC=-1) returned 1 [0146.281] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5601084a) returned 0x0 [0146.281] IsAppThemed () returned 0x1 [0146.281] GetThemeAppProperties () returned 0x3 [0146.281] GetThemeAppProperties () returned 0x3 [0146.281] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0146.281] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0146.281] GetCurrentObject (hdc=0x5601084a, type=0x1) returned 0x1b00017 [0146.281] GetCurrentObject (hdc=0x5601084a, type=0x2) returned 0x1900010 [0146.281] GetCurrentObject (hdc=0x5601084a, type=0x7) returned 0x490500d1 [0146.281] GetCurrentObject (hdc=0x5601084a, type=0x6) returned 0x18a002e [0146.281] SaveDC (hdc=0x5601084a) returned 1 [0146.281] GetTextAlign (hdc=0x5601084a) returned 0x0 [0146.281] GetTextColor (hdc=0x5601084a) returned 0x0 [0146.281] GetCurrentObject (hdc=0x5601084a, type=0x6) returned 0x18a002e [0146.281] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0146.282] SelectObject (hdc=0x5601084a, h=0x220a081a) returned 0x18a002e [0146.282] GetBkMode (hdc=0x5601084a) returned 2 [0146.282] SetBkMode (hdc=0x5601084a, mode=1) returned 2 [0146.282] DrawTextExW (in: hdc=0x5601084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2669c9c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0146.282] DrawTextExW (in: hdc=0x5601084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2669c9c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0146.282] RestoreDC (hdc=0x5601084a, nSavedDC=-1) returned 1 [0146.282] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5601084a) returned 0x0 [0146.282] GetFocus () returned 0x201d0 [0146.282] IsAppThemed () returned 0x1 [0146.282] GetThemeAppProperties () returned 0x3 [0146.282] GetThemeAppProperties () returned 0x3 [0146.282] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0146.282] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5601084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0146.282] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5601084a) returned 0x0 [0146.282] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0146.282] SelectObject (hdc=0x5601084a, h=0x185000f) returned 0x490500d1 [0146.282] DeleteDC (hdc=0x5601084a) returned 1 [0146.283] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0146.283] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0146.283] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2669d98, cPoints=0x1 | out: lpPoints=0x2669d98) returned 42533703 [0146.283] WindowFromPoint (Point=0x3eb) returned 0x201d0 [0146.283] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103eb) returned 0x1 [0146.283] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0146.283] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0146.283] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0146.283] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.283] GetSystemMetrics (nIndex=42) returned 0 [0146.283] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0146.283] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0146.283] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0146.283] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0146.283] GetCapture () returned 0x201d0 [0146.283] ReleaseCapture () returned 1 [0146.283] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0146.283] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0146.283] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103eb) returned 0x1 [0146.283] IsWindowUnicode (hWnd=0x201d0) returned 1 [0146.283] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0146.283] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103eb) returned 0x1 [0146.284] SetCursor (hCursor=0x10003) returned 0x10003 [0146.284] TranslateMessage (lpMsg=0x1ef250) returned 0 [0146.284] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0146.284] GetKeyState (nVirtKey=1) returned 1 [0146.284] GetKeyState (nVirtKey=2) returned 0 [0146.284] GetKeyState (nVirtKey=4) returned 0 [0146.284] GetKeyState (nVirtKey=5) returned 0 [0146.284] GetKeyState (nVirtKey=6) returned 0 [0146.284] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0146.284] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0146.284] WaitMessage () returned 1 [0149.328] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0149.328] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c4) returned 0x1 [0149.329] IsWindowUnicode (hWnd=0x201d0) returned 1 [0149.329] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0149.329] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c4) returned 0x1 [0149.329] SetCursor (hCursor=0x10003) returned 0x10003 [0149.329] TranslateMessage (lpMsg=0x1ef250) returned 0 [0149.329] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0149.329] GetKeyState (nVirtKey=1) returned 1 [0149.329] GetKeyState (nVirtKey=2) returned 0 [0149.329] GetKeyState (nVirtKey=4) returned 0 [0149.329] GetKeyState (nVirtKey=5) returned 0 [0149.329] GetKeyState (nVirtKey=6) returned 0 [0149.329] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0149.329] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0149.329] WaitMessage () returned 1 [0149.394] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0149.394] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c4) returned 0x1 [0149.394] IsWindowUnicode (hWnd=0x201d0) returned 1 [0149.394] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0149.394] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c4) returned 0x1 [0149.395] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0149.395] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e4027f) returned 0x0 [0149.395] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0149.395] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0149.395] SetCursor (hCursor=0x10003) returned 0x10003 [0149.395] TranslateMessage (lpMsg=0x1ef250) returned 0 [0149.395] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0149.395] GetKeyState (nVirtKey=1) returned -128 [0149.395] GetKeyState (nVirtKey=2) returned 0 [0149.395] GetKeyState (nVirtKey=4) returned 0 [0149.395] GetKeyState (nVirtKey=5) returned 0 [0149.395] GetKeyState (nVirtKey=6) returned 0 [0149.395] IsWindowVisible (hWnd=0x201d0) returned 1 [0149.395] IsWindowEnabled (hWnd=0x201d0) returned 1 [0149.395] SetFocus (hWnd=0x201d0) returned 0x201d0 [0149.395] GetFocus () returned 0x201d0 [0149.395] GetFocus () returned 0x201d0 [0149.395] GetFocus () returned 0x201d0 [0149.395] GetKeyState (nVirtKey=1) returned -128 [0149.395] GetKeyState (nVirtKey=2) returned 0 [0149.396] GetKeyState (nVirtKey=4) returned 0 [0149.396] GetKeyState (nVirtKey=5) returned 0 [0149.396] GetKeyState (nVirtKey=6) returned 0 [0149.396] GetCapture () returned 0x0 [0149.396] SetCapture (hWnd=0x201d0) returned 0x0 [0149.396] GetKeyState (nVirtKey=1) returned -128 [0149.396] GetKeyState (nVirtKey=2) returned 0 [0149.396] GetKeyState (nVirtKey=4) returned 0 [0149.396] GetKeyState (nVirtKey=5) returned 0 [0149.396] GetKeyState (nVirtKey=6) returned 0 [0149.396] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0149.396] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0149.396] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0149.396] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0149.396] TranslateMessage (lpMsg=0x1ef250) returned 0 [0149.396] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0149.396] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0149.396] IsWindowUnicode (hWnd=0x201d0) returned 1 [0149.396] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0149.396] TranslateMessage (lpMsg=0x1ef250) returned 0 [0149.396] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0149.396] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2669ebc, cPoints=0x1 | out: lpPoints=0x2669ebc) returned 42533703 [0149.396] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0149.396] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0149.396] UpdateWindow (hWnd=0x201d0) returned 1 [0149.396] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0149.396] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0149.397] CreateCompatibleDC (hdc=0x160107c7) returned 0x5701084a [0149.397] SelectObject (hdc=0x5701084a, h=0x490500d1) returned 0x185000f [0149.397] GdipCreateFromHDC (hdc=0x5701084a, graphics=0x1eea5c) returned 0x0 [0149.397] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0149.397] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0149.397] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0149.397] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0149.397] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0149.397] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0149.397] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0149.397] LocalFree (hMem=0x416cb8) returned 0x0 [0149.397] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0149.397] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0149.397] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0149.397] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0149.397] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0149.397] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd3b0dbd) returned 0x0 [0149.397] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0149.398] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0149.398] GetCurrentObject (hdc=0x5701084a, type=0x1) returned 0x1b00017 [0149.398] GetCurrentObject (hdc=0x5701084a, type=0x2) returned 0x1900010 [0149.398] GetCurrentObject (hdc=0x5701084a, type=0x7) returned 0x490500d1 [0149.398] GetCurrentObject (hdc=0x5701084a, type=0x6) returned 0x18a002e [0149.398] SaveDC (hdc=0x5701084a) returned 1 [0149.398] GetNearestColor (hdc=0x5701084a, color=0xf5f5f5) returned 0xf5f5f5 [0149.398] GetNearestColor (hdc=0x5701084a, color=0x515151) returned 0x515151 [0149.398] GetNearestColor (hdc=0x5701084a, color=0x0) returned 0x0 [0149.398] GetNearestColor (hdc=0x5701084a, color=0x515151) returned 0x515151 [0149.398] GetNearestColor (hdc=0x5701084a, color=0x0) returned 0x0 [0149.398] GetNearestColor (hdc=0x5701084a, color=0xfafafa) returned 0xfafafa [0149.398] GetNearestColor (hdc=0x5701084a, color=0xe0e0e0) returned 0xe0e0e0 [0149.398] GetNearestColor (hdc=0x5701084a, color=0xdcdcdc) returned 0xdcdcdc [0149.398] GetNearestColor (hdc=0x5701084a, color=0x0) returned 0x0 [0149.398] RestoreDC (hdc=0x5701084a, nSavedDC=-1) returned 1 [0149.398] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5701084a) returned 0x0 [0149.398] IsAppThemed () returned 0x1 [0149.398] GetThemeAppProperties () returned 0x3 [0149.398] GetThemeAppProperties () returned 0x3 [0149.399] IsAppThemed () returned 0x1 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x266a5c0 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0149.399] IsAppThemed () returned 0x1 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] IsAppThemed () returned 0x1 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] IsAppThemed () returned 0x1 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] IsAppThemed () returned 0x1 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] IsThemePartDefined () returned 0x1 [0149.399] IsAppThemed () returned 0x1 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] GetThemeAppProperties () returned 0x3 [0149.399] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0149.399] IsAppThemed () returned 0x1 [0149.399] GetThemeAppProperties () returned 0x3 [0149.400] GetThemeAppProperties () returned 0x3 [0149.400] IsAppThemed () returned 0x1 [0149.400] GetThemeAppProperties () returned 0x3 [0149.400] GetThemeAppProperties () returned 0x3 [0149.400] IsThemePartDefined () returned 0x1 [0149.400] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0149.400] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0149.400] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0149.400] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0149.400] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0149.400] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0149.400] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0149.400] LocalFree (hMem=0x416cb8) returned 0x0 [0149.400] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0149.400] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0149.400] LocalFree (hMem=0x416cb8) returned 0x0 [0149.400] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0149.400] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0149.400] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0149.400] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0149.400] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0149.400] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0149.400] GetCurrentObject (hdc=0x5701084a, type=0x1) returned 0x1b00017 [0149.400] GetCurrentObject (hdc=0x5701084a, type=0x2) returned 0x1900010 [0149.400] GetCurrentObject (hdc=0x5701084a, type=0x7) returned 0x490500d1 [0149.400] GetCurrentObject (hdc=0x5701084a, type=0x6) returned 0x18a002e [0149.401] SaveDC (hdc=0x5701084a) returned 1 [0149.401] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf7040246 [0149.401] GetClipRgn (hdc=0x5701084a, hrgn=0xf7040246) returned 0 [0149.401] SelectClipRgn (hdc=0x5701084a, hrgn=0x17040813) returned 2 [0149.401] DeleteObject (ho=0xf7040246) returned 1 [0149.401] DeleteObject (ho=0x17040813) returned 1 [0149.401] OffsetViewportOrgEx (in: hdc=0x5701084a, x=0, y=0, lppt=0x266ac70 | out: lppt=0x266ac70) returned 1 [0149.401] DrawThemeParentBackground () returned 0x0 [0149.401] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0149.401] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0149.401] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0149.401] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0149.401] GetSystemMetrics (nIndex=42) returned 0 [0149.401] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0149.401] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0149.401] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0149.401] GetCurrentObject (hdc=0x5701084a, type=0x1) returned 0x1b00017 [0149.401] GetCurrentObject (hdc=0x5701084a, type=0x2) returned 0x1900010 [0149.401] GetCurrentObject (hdc=0x5701084a, type=0x7) returned 0x490500d1 [0149.401] GetCurrentObject (hdc=0x5701084a, type=0x6) returned 0x18a002e [0149.401] SaveDC (hdc=0x5701084a) returned 2 [0149.402] GetNearestColor (hdc=0x5701084a, color=0xf5f5f5) returned 0xf5f5f5 [0149.402] CreateSolidBrush (color=0xf5f5f5) returned 0x82100244 [0149.402] FillRect (hDC=0x5701084a, lprc=0x1ee2d0, hbr=0x82100244) returned 1 [0149.402] DeleteObject (ho=0x82100244) returned 1 [0149.402] RestoreDC (hdc=0x5701084a, nSavedDC=-1) returned 1 [0149.402] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0149.402] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0149.402] GetSystemMetrics (nIndex=42) returned 0 [0149.402] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0149.402] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0149.402] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0149.402] GetCurrentObject (hdc=0x5701084a, type=0x1) returned 0x1b00017 [0149.402] GetCurrentObject (hdc=0x5701084a, type=0x2) returned 0x1900010 [0149.402] GetCurrentObject (hdc=0x5701084a, type=0x7) returned 0x490500d1 [0149.402] GetCurrentObject (hdc=0x5701084a, type=0x6) returned 0x18a002e [0149.402] SaveDC (hdc=0x5701084a) returned 2 [0149.402] GetNearestColor (hdc=0x5701084a, color=0xf5f5f5) returned 0xf5f5f5 [0149.402] CreateSolidBrush (color=0xf5f5f5) returned 0x83100244 [0149.402] FillRect (hDC=0x5701084a, lprc=0x1ee270, hbr=0x83100244) returned 1 [0149.402] DeleteObject (ho=0x83100244) returned 1 [0149.403] RestoreDC (hdc=0x5701084a, nSavedDC=-1) returned 1 [0149.403] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0149.403] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0149.403] GetSystemMetrics (nIndex=42) returned 0 [0149.403] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0149.403] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0149.403] RestoreDC (hdc=0x5701084a, nSavedDC=-1) returned 1 [0149.403] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5701084a) returned 0x0 [0149.403] IsAppThemed () returned 0x1 [0149.403] GetThemeAppProperties () returned 0x3 [0149.403] GetThemeAppProperties () returned 0x3 [0149.403] IsAppThemed () returned 0x1 [0149.403] GetThemeAppProperties () returned 0x3 [0149.403] GetThemeAppProperties () returned 0x3 [0149.403] IsThemePartDefined () returned 0x1 [0149.403] GdipCreateRegion (region=0x1ee764) returned 0x0 [0149.403] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0149.403] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0149.403] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0149.403] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0149.403] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0149.403] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0149.403] LocalFree (hMem=0x416cb8) returned 0x0 [0149.403] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0149.403] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0149.404] LocalFree (hMem=0x416cb8) returned 0x0 [0149.404] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0149.404] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0149.404] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0149.404] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0149.404] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0149.404] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0149.404] GetCurrentObject (hdc=0x5701084a, type=0x1) returned 0x1b00017 [0149.404] GetCurrentObject (hdc=0x5701084a, type=0x2) returned 0x1900010 [0149.404] GetCurrentObject (hdc=0x5701084a, type=0x7) returned 0x490500d1 [0149.404] GetCurrentObject (hdc=0x5701084a, type=0x6) returned 0x18a002e [0149.404] SaveDC (hdc=0x5701084a) returned 1 [0149.404] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x18040813 [0149.404] GetClipRgn (hdc=0x5701084a, hrgn=0x18040813) returned 0 [0149.404] SelectClipRgn (hdc=0x5701084a, hrgn=0xf9040246) returned 2 [0149.404] DeleteObject (ho=0x18040813) returned 1 [0149.404] DeleteObject (ho=0xf9040246) returned 1 [0149.404] OffsetViewportOrgEx (in: hdc=0x5701084a, x=0, y=0, lppt=0x266b4b0 | out: lppt=0x266b4b0) returned 1 [0149.404] IsAppThemed () returned 0x1 [0149.404] GetThemeAppProperties () returned 0x3 [0149.404] GetThemeAppProperties () returned 0x3 [0149.404] DrawThemeBackground () returned 0x0 [0149.404] RestoreDC (hdc=0x5701084a, nSavedDC=-1) returned 1 [0149.405] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5701084a) returned 0x0 [0149.405] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0149.405] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0149.405] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0149.405] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0149.405] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0149.405] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0149.405] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0149.405] LocalFree (hMem=0x416cb8) returned 0x0 [0149.405] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0149.405] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0149.405] LocalFree (hMem=0x416cb8) returned 0x0 [0149.405] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0149.405] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0149.405] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0149.405] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0149.405] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0149.405] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0149.405] GetCurrentObject (hdc=0x5701084a, type=0x1) returned 0x1b00017 [0149.405] GetCurrentObject (hdc=0x5701084a, type=0x2) returned 0x1900010 [0149.405] GetCurrentObject (hdc=0x5701084a, type=0x7) returned 0x490500d1 [0149.405] GetCurrentObject (hdc=0x5701084a, type=0x6) returned 0x18a002e [0149.406] SaveDC (hdc=0x5701084a) returned 1 [0149.406] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfa040246 [0149.406] GetClipRgn (hdc=0x5701084a, hrgn=0xfa040246) returned 0 [0149.406] SelectClipRgn (hdc=0x5701084a, hrgn=0x19040813) returned 2 [0149.406] DeleteObject (ho=0xfa040246) returned 1 [0149.406] DeleteObject (ho=0x19040813) returned 1 [0149.406] OffsetViewportOrgEx (in: hdc=0x5701084a, x=0, y=0, lppt=0x266b784 | out: lppt=0x266b784) returned 1 [0149.406] IsAppThemed () returned 0x1 [0149.406] GetThemeAppProperties () returned 0x3 [0149.406] GetThemeAppProperties () returned 0x3 [0149.406] GetThemeBackgroundContentRect () returned 0x0 [0149.406] RestoreDC (hdc=0x5701084a, nSavedDC=-1) returned 1 [0149.406] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5701084a) returned 0x0 [0149.406] IsAppThemed () returned 0x1 [0149.406] GetThemeAppProperties () returned 0x3 [0149.406] GetThemeAppProperties () returned 0x3 [0149.406] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0149.406] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0149.406] GetCurrentObject (hdc=0x5701084a, type=0x1) returned 0x1b00017 [0149.406] GetCurrentObject (hdc=0x5701084a, type=0x2) returned 0x1900010 [0149.406] GetCurrentObject (hdc=0x5701084a, type=0x7) returned 0x490500d1 [0149.406] GetCurrentObject (hdc=0x5701084a, type=0x6) returned 0x18a002e [0149.406] SaveDC (hdc=0x5701084a) returned 1 [0149.406] GetTextAlign (hdc=0x5701084a) returned 0x0 [0149.407] GetTextColor (hdc=0x5701084a) returned 0x0 [0149.407] GetCurrentObject (hdc=0x5701084a, type=0x6) returned 0x18a002e [0149.407] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0149.407] SelectObject (hdc=0x5701084a, h=0x220a081a) returned 0x18a002e [0149.407] GetBkMode (hdc=0x5701084a) returned 2 [0149.407] SetBkMode (hdc=0x5701084a, mode=1) returned 2 [0149.407] DrawTextExW (in: hdc=0x5701084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x266bb18 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0149.407] DrawTextExW (in: hdc=0x5701084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x266bb18 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0149.407] RestoreDC (hdc=0x5701084a, nSavedDC=-1) returned 1 [0149.407] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5701084a) returned 0x0 [0149.407] GetFocus () returned 0x201d0 [0149.407] IsAppThemed () returned 0x1 [0149.407] GetThemeAppProperties () returned 0x3 [0149.407] GetThemeAppProperties () returned 0x3 [0149.407] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0149.407] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5701084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0149.407] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5701084a) returned 0x0 [0149.408] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0149.408] SelectObject (hdc=0x5701084a, h=0x185000f) returned 0x490500d1 [0149.408] DeleteDC (hdc=0x5701084a) returned 1 [0149.408] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0149.408] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0149.408] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x266bc14, cPoints=0x1 | out: lpPoints=0x266bc14) returned 42533703 [0149.408] WindowFromPoint (Point=0x3c4) returned 0x201d0 [0149.408] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c4) returned 0x1 [0149.408] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0149.408] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0149.408] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0149.408] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.408] GetSystemMetrics (nIndex=42) returned 0 [0149.408] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0149.408] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0149.408] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0149.408] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0149.408] GetCapture () returned 0x201d0 [0149.408] ReleaseCapture () returned 1 [0149.408] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0149.408] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0149.409] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c4) returned 0x1 [0149.409] IsWindowUnicode (hWnd=0x201d0) returned 1 [0149.409] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0149.409] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29503c4) returned 0x1 [0149.409] SetCursor (hCursor=0x10003) returned 0x10003 [0149.409] TranslateMessage (lpMsg=0x1ef250) returned 0 [0149.409] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0149.409] GetKeyState (nVirtKey=1) returned 0 [0149.409] GetKeyState (nVirtKey=2) returned 0 [0149.409] GetKeyState (nVirtKey=4) returned 0 [0149.409] GetKeyState (nVirtKey=5) returned 0 [0149.409] GetKeyState (nVirtKey=6) returned 0 [0149.409] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0149.409] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0149.409] WaitMessage () returned 1 [0152.340] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0152.340] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d9) returned 0x1 [0152.341] IsWindowUnicode (hWnd=0x201d0) returned 1 [0152.341] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0152.341] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d9) returned 0x1 [0152.341] SetCursor (hCursor=0x10003) returned 0x10003 [0152.341] TranslateMessage (lpMsg=0x1ef250) returned 0 [0152.341] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0152.341] GetKeyState (nVirtKey=1) returned 0 [0152.341] GetKeyState (nVirtKey=2) returned 0 [0152.341] GetKeyState (nVirtKey=4) returned 0 [0152.341] GetKeyState (nVirtKey=5) returned 0 [0152.341] GetKeyState (nVirtKey=6) returned 0 [0152.341] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0152.341] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0152.341] WaitMessage () returned 1 [0152.399] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0152.399] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d9) returned 0x1 [0152.399] IsWindowUnicode (hWnd=0x201d0) returned 1 [0152.399] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0152.399] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d9) returned 0x1 [0152.399] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0152.399] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e20294) returned 0x0 [0152.399] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0152.399] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0152.399] SetCursor (hCursor=0x10003) returned 0x10003 [0152.400] TranslateMessage (lpMsg=0x1ef250) returned 0 [0152.400] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0152.400] GetKeyState (nVirtKey=1) returned -127 [0152.400] GetKeyState (nVirtKey=2) returned 0 [0152.400] GetKeyState (nVirtKey=4) returned 0 [0152.400] GetKeyState (nVirtKey=5) returned 0 [0152.400] GetKeyState (nVirtKey=6) returned 0 [0152.400] IsWindowVisible (hWnd=0x201d0) returned 1 [0152.400] IsWindowEnabled (hWnd=0x201d0) returned 1 [0152.400] SetFocus (hWnd=0x201d0) returned 0x201d0 [0152.400] GetFocus () returned 0x201d0 [0152.400] GetFocus () returned 0x201d0 [0152.400] GetFocus () returned 0x201d0 [0152.400] GetKeyState (nVirtKey=1) returned -127 [0152.400] GetKeyState (nVirtKey=2) returned 0 [0152.400] GetKeyState (nVirtKey=4) returned 0 [0152.400] GetKeyState (nVirtKey=5) returned 0 [0152.401] GetKeyState (nVirtKey=6) returned 0 [0152.401] GetCapture () returned 0x0 [0152.401] SetCapture (hWnd=0x201d0) returned 0x0 [0152.401] GetKeyState (nVirtKey=1) returned -127 [0152.401] GetKeyState (nVirtKey=2) returned 0 [0152.401] GetKeyState (nVirtKey=4) returned 0 [0152.401] GetKeyState (nVirtKey=5) returned 0 [0152.401] GetKeyState (nVirtKey=6) returned 0 [0152.401] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0152.401] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0152.401] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0152.401] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0152.401] TranslateMessage (lpMsg=0x1ef250) returned 0 [0152.401] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0152.401] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0152.401] IsWindowUnicode (hWnd=0x201d0) returned 1 [0152.401] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0152.401] TranslateMessage (lpMsg=0x1ef250) returned 0 [0152.401] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0152.401] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x266bd38, cPoints=0x1 | out: lpPoints=0x266bd38) returned 42533703 [0152.401] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0152.401] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0152.401] UpdateWindow (hWnd=0x201d0) returned 1 [0152.401] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0152.401] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0152.401] CreateCompatibleDC (hdc=0x160107c7) returned 0x5801084a [0152.401] SelectObject (hdc=0x5801084a, h=0x490500d1) returned 0x185000f [0152.402] GdipCreateFromHDC (hdc=0x5801084a, graphics=0x1eea5c) returned 0x0 [0152.402] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0152.402] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0152.402] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0152.402] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0152.402] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0152.402] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0152.402] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0152.402] LocalFree (hMem=0x416cb8) returned 0x0 [0152.402] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0152.402] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0152.402] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0152.402] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0152.402] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0152.402] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd390dbd) returned 0x0 [0152.402] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0152.403] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0152.403] GetCurrentObject (hdc=0x5801084a, type=0x1) returned 0x1b00017 [0152.403] GetCurrentObject (hdc=0x5801084a, type=0x2) returned 0x1900010 [0152.403] GetCurrentObject (hdc=0x5801084a, type=0x7) returned 0x490500d1 [0152.403] GetCurrentObject (hdc=0x5801084a, type=0x6) returned 0x18a002e [0152.403] SaveDC (hdc=0x5801084a) returned 1 [0152.403] GetNearestColor (hdc=0x5801084a, color=0xf5f5f5) returned 0xf5f5f5 [0152.403] GetNearestColor (hdc=0x5801084a, color=0x515151) returned 0x515151 [0152.403] GetNearestColor (hdc=0x5801084a, color=0x0) returned 0x0 [0152.403] GetNearestColor (hdc=0x5801084a, color=0x515151) returned 0x515151 [0152.403] GetNearestColor (hdc=0x5801084a, color=0x0) returned 0x0 [0152.403] GetNearestColor (hdc=0x5801084a, color=0xfafafa) returned 0xfafafa [0152.403] GetNearestColor (hdc=0x5801084a, color=0xe0e0e0) returned 0xe0e0e0 [0152.403] GetNearestColor (hdc=0x5801084a, color=0xdcdcdc) returned 0xdcdcdc [0152.403] GetNearestColor (hdc=0x5801084a, color=0x0) returned 0x0 [0152.403] RestoreDC (hdc=0x5801084a, nSavedDC=-1) returned 1 [0152.403] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5801084a) returned 0x0 [0152.404] IsAppThemed () returned 0x1 [0152.404] GetThemeAppProperties () returned 0x3 [0152.404] GetThemeAppProperties () returned 0x3 [0152.404] IsAppThemed () returned 0x1 [0152.404] GetThemeAppProperties () returned 0x3 [0152.404] GetThemeAppProperties () returned 0x3 [0152.404] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x266c43c | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0152.404] IsAppThemed () returned 0x1 [0152.404] GetThemeAppProperties () returned 0x3 [0152.404] GetThemeAppProperties () returned 0x3 [0152.404] IsAppThemed () returned 0x1 [0152.404] GetThemeAppProperties () returned 0x3 [0152.404] GetThemeAppProperties () returned 0x3 [0152.404] IsAppThemed () returned 0x1 [0152.404] GetThemeAppProperties () returned 0x3 [0152.404] GetThemeAppProperties () returned 0x3 [0152.404] IsAppThemed () returned 0x1 [0152.404] GetThemeAppProperties () returned 0x3 [0152.405] GetThemeAppProperties () returned 0x3 [0152.405] IsThemePartDefined () returned 0x1 [0152.405] IsAppThemed () returned 0x1 [0152.405] GetThemeAppProperties () returned 0x3 [0152.405] GetThemeAppProperties () returned 0x3 [0152.405] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0152.405] IsAppThemed () returned 0x1 [0152.405] GetThemeAppProperties () returned 0x3 [0152.405] GetThemeAppProperties () returned 0x3 [0152.405] IsAppThemed () returned 0x1 [0152.405] GetThemeAppProperties () returned 0x3 [0152.405] GetThemeAppProperties () returned 0x3 [0152.405] IsThemePartDefined () returned 0x1 [0152.405] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0152.405] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0152.405] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0152.405] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0152.405] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0152.405] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0152.405] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0152.405] LocalFree (hMem=0x416cb8) returned 0x0 [0152.405] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0152.405] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0152.405] LocalFree (hMem=0x416cb8) returned 0x0 [0152.405] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0152.405] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0152.405] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0152.405] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0152.406] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0152.406] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0152.406] GetCurrentObject (hdc=0x5801084a, type=0x1) returned 0x1b00017 [0152.406] GetCurrentObject (hdc=0x5801084a, type=0x2) returned 0x1900010 [0152.406] GetCurrentObject (hdc=0x5801084a, type=0x7) returned 0x490500d1 [0152.406] GetCurrentObject (hdc=0x5801084a, type=0x6) returned 0x18a002e [0152.406] SaveDC (hdc=0x5801084a) returned 1 [0152.406] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1a040813 [0152.406] GetClipRgn (hdc=0x5801084a, hrgn=0x1a040813) returned 0 [0152.406] SelectClipRgn (hdc=0x5801084a, hrgn=0xfe040246) returned 2 [0152.406] DeleteObject (ho=0x1a040813) returned 1 [0152.406] DeleteObject (ho=0xfe040246) returned 1 [0152.406] OffsetViewportOrgEx (in: hdc=0x5801084a, x=0, y=0, lppt=0x266caec | out: lppt=0x266caec) returned 1 [0152.406] DrawThemeParentBackground () returned 0x0 [0152.406] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0152.406] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0152.406] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0152.406] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0152.406] GetSystemMetrics (nIndex=42) returned 0 [0152.406] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0152.406] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0152.406] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0152.406] GetCurrentObject (hdc=0x5801084a, type=0x1) returned 0x1b00017 [0152.407] GetCurrentObject (hdc=0x5801084a, type=0x2) returned 0x1900010 [0152.407] GetCurrentObject (hdc=0x5801084a, type=0x7) returned 0x490500d1 [0152.407] GetCurrentObject (hdc=0x5801084a, type=0x6) returned 0x18a002e [0152.407] SaveDC (hdc=0x5801084a) returned 2 [0152.407] GetNearestColor (hdc=0x5801084a, color=0xf5f5f5) returned 0xf5f5f5 [0152.407] CreateSolidBrush (color=0xf5f5f5) returned 0x84100244 [0152.407] FillRect (hDC=0x5801084a, lprc=0x1ee2d0, hbr=0x84100244) returned 1 [0152.407] DeleteObject (ho=0x84100244) returned 1 [0152.407] RestoreDC (hdc=0x5801084a, nSavedDC=-1) returned 1 [0152.407] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0152.407] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0152.407] GetSystemMetrics (nIndex=42) returned 0 [0152.407] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0152.407] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0152.407] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0152.407] GetCurrentObject (hdc=0x5801084a, type=0x1) returned 0x1b00017 [0152.407] GetCurrentObject (hdc=0x5801084a, type=0x2) returned 0x1900010 [0152.407] GetCurrentObject (hdc=0x5801084a, type=0x7) returned 0x490500d1 [0152.407] GetCurrentObject (hdc=0x5801084a, type=0x6) returned 0x18a002e [0152.407] SaveDC (hdc=0x5801084a) returned 2 [0152.408] GetNearestColor (hdc=0x5801084a, color=0xf5f5f5) returned 0xf5f5f5 [0152.408] CreateSolidBrush (color=0xf5f5f5) returned 0x85100244 [0152.408] FillRect (hDC=0x5801084a, lprc=0x1ee270, hbr=0x85100244) returned 1 [0152.408] DeleteObject (ho=0x85100244) returned 1 [0152.408] RestoreDC (hdc=0x5801084a, nSavedDC=-1) returned 1 [0152.408] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0152.408] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0152.408] GetSystemMetrics (nIndex=42) returned 0 [0152.408] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0152.408] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0152.408] RestoreDC (hdc=0x5801084a, nSavedDC=-1) returned 1 [0152.408] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5801084a) returned 0x0 [0152.408] IsAppThemed () returned 0x1 [0152.408] GetThemeAppProperties () returned 0x3 [0152.408] GetThemeAppProperties () returned 0x3 [0152.408] IsAppThemed () returned 0x1 [0152.408] GetThemeAppProperties () returned 0x3 [0152.408] GetThemeAppProperties () returned 0x3 [0152.408] IsThemePartDefined () returned 0x1 [0152.408] GdipCreateRegion (region=0x1ee764) returned 0x0 [0152.408] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0152.408] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0152.408] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0152.408] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0152.408] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0152.408] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0152.409] LocalFree (hMem=0x416cb8) returned 0x0 [0152.409] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0152.409] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0152.409] LocalFree (hMem=0x416cb8) returned 0x0 [0152.409] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0152.409] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0152.409] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0152.409] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0152.409] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0152.409] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0152.409] GetCurrentObject (hdc=0x5801084a, type=0x1) returned 0x1b00017 [0152.409] GetCurrentObject (hdc=0x5801084a, type=0x2) returned 0x1900010 [0152.409] GetCurrentObject (hdc=0x5801084a, type=0x7) returned 0x490500d1 [0152.409] GetCurrentObject (hdc=0x5801084a, type=0x6) returned 0x18a002e [0152.409] SaveDC (hdc=0x5801084a) returned 1 [0152.409] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xff040246 [0152.409] GetClipRgn (hdc=0x5801084a, hrgn=0xff040246) returned 0 [0152.409] SelectClipRgn (hdc=0x5801084a, hrgn=0x1c040813) returned 2 [0152.409] DeleteObject (ho=0xff040246) returned 1 [0152.409] DeleteObject (ho=0x1c040813) returned 1 [0152.409] OffsetViewportOrgEx (in: hdc=0x5801084a, x=0, y=0, lppt=0x266d32c | out: lppt=0x266d32c) returned 1 [0152.409] IsAppThemed () returned 0x1 [0152.409] GetThemeAppProperties () returned 0x3 [0152.409] GetThemeAppProperties () returned 0x3 [0152.409] DrawThemeBackground () returned 0x0 [0152.410] RestoreDC (hdc=0x5801084a, nSavedDC=-1) returned 1 [0152.410] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5801084a) returned 0x0 [0152.410] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0152.410] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0152.410] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0152.410] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0152.410] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0152.410] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0152.410] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0152.410] LocalFree (hMem=0x416cb8) returned 0x0 [0152.410] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0152.410] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0152.410] LocalFree (hMem=0x416cb8) returned 0x0 [0152.410] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0152.410] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0152.410] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0152.410] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0152.410] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0152.410] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0152.410] GetCurrentObject (hdc=0x5801084a, type=0x1) returned 0x1b00017 [0152.410] GetCurrentObject (hdc=0x5801084a, type=0x2) returned 0x1900010 [0152.411] GetCurrentObject (hdc=0x5801084a, type=0x7) returned 0x490500d1 [0152.411] GetCurrentObject (hdc=0x5801084a, type=0x6) returned 0x18a002e [0152.411] SaveDC (hdc=0x5801084a) returned 1 [0152.411] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1d040813 [0152.411] GetClipRgn (hdc=0x5801084a, hrgn=0x1d040813) returned 0 [0152.411] SelectClipRgn (hdc=0x5801084a, hrgn=0x40246) returned 2 [0152.411] DeleteObject (ho=0x1d040813) returned 1 [0152.411] DeleteObject (ho=0x40246) returned 1 [0152.411] OffsetViewportOrgEx (in: hdc=0x5801084a, x=0, y=0, lppt=0x266d600 | out: lppt=0x266d600) returned 1 [0152.411] IsAppThemed () returned 0x1 [0152.411] GetThemeAppProperties () returned 0x3 [0152.411] GetThemeAppProperties () returned 0x3 [0152.411] GetThemeBackgroundContentRect () returned 0x0 [0152.411] RestoreDC (hdc=0x5801084a, nSavedDC=-1) returned 1 [0152.411] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5801084a) returned 0x0 [0152.411] IsAppThemed () returned 0x1 [0152.411] GetThemeAppProperties () returned 0x3 [0152.411] GetThemeAppProperties () returned 0x3 [0152.411] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0152.411] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0152.411] GetCurrentObject (hdc=0x5801084a, type=0x1) returned 0x1b00017 [0152.411] GetCurrentObject (hdc=0x5801084a, type=0x2) returned 0x1900010 [0152.411] GetCurrentObject (hdc=0x5801084a, type=0x7) returned 0x490500d1 [0152.411] GetCurrentObject (hdc=0x5801084a, type=0x6) returned 0x18a002e [0152.411] SaveDC (hdc=0x5801084a) returned 1 [0152.412] GetTextAlign (hdc=0x5801084a) returned 0x0 [0152.412] GetTextColor (hdc=0x5801084a) returned 0x0 [0152.412] GetCurrentObject (hdc=0x5801084a, type=0x6) returned 0x18a002e [0152.412] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0152.412] SelectObject (hdc=0x5801084a, h=0x220a081a) returned 0x18a002e [0152.412] GetBkMode (hdc=0x5801084a) returned 2 [0152.412] SetBkMode (hdc=0x5801084a, mode=1) returned 2 [0152.412] DrawTextExW (in: hdc=0x5801084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x266d994 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0152.412] DrawTextExW (in: hdc=0x5801084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x266d994 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0152.412] RestoreDC (hdc=0x5801084a, nSavedDC=-1) returned 1 [0152.412] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5801084a) returned 0x0 [0152.412] GetFocus () returned 0x201d0 [0152.412] IsAppThemed () returned 0x1 [0152.412] GetThemeAppProperties () returned 0x3 [0152.412] GetThemeAppProperties () returned 0x3 [0152.412] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0152.412] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5801084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0152.413] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5801084a) returned 0x0 [0152.413] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0152.413] SelectObject (hdc=0x5801084a, h=0x185000f) returned 0x490500d1 [0152.413] DeleteDC (hdc=0x5801084a) returned 1 [0152.413] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0152.413] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0152.413] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x266da90, cPoints=0x1 | out: lpPoints=0x266da90) returned 42533703 [0152.413] WindowFromPoint (Point=0x3d9) returned 0x201d0 [0152.413] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d9) returned 0x1 [0152.413] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0152.413] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0152.413] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0152.413] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.413] GetSystemMetrics (nIndex=42) returned 0 [0152.413] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0152.413] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0152.413] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0152.413] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.413] GetCapture () returned 0x201d0 [0152.413] ReleaseCapture () returned 1 [0152.413] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0152.414] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0152.414] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d9) returned 0x1 [0152.414] IsWindowUnicode (hWnd=0x201d0) returned 1 [0152.414] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0152.414] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303d9) returned 0x1 [0152.414] SetCursor (hCursor=0x10003) returned 0x10003 [0152.414] TranslateMessage (lpMsg=0x1ef250) returned 0 [0152.414] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0152.414] GetKeyState (nVirtKey=1) returned 1 [0152.414] GetKeyState (nVirtKey=2) returned 0 [0152.414] GetKeyState (nVirtKey=4) returned 0 [0152.414] GetKeyState (nVirtKey=5) returned 0 [0152.414] GetKeyState (nVirtKey=6) returned 0 [0152.414] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0152.414] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0152.414] WaitMessage () returned 1 [0155.459] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0155.460] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bd) returned 0x1 [0155.460] IsWindowUnicode (hWnd=0x201d0) returned 1 [0155.460] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0155.460] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bd) returned 0x1 [0155.460] SetCursor (hCursor=0x10003) returned 0x10003 [0155.460] TranslateMessage (lpMsg=0x1ef250) returned 0 [0155.460] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0155.460] GetKeyState (nVirtKey=1) returned 1 [0155.460] GetKeyState (nVirtKey=2) returned 0 [0155.460] GetKeyState (nVirtKey=4) returned 0 [0155.460] GetKeyState (nVirtKey=5) returned 0 [0155.460] GetKeyState (nVirtKey=6) returned 0 [0155.460] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0155.460] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0155.460] WaitMessage () returned 1 [0155.524] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0155.524] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bd) returned 0x1 [0155.524] IsWindowUnicode (hWnd=0x201d0) returned 1 [0155.524] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0155.525] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bd) returned 0x1 [0155.525] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0155.525] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e60278) returned 0x0 [0155.525] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0155.525] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0155.525] SetCursor (hCursor=0x10003) returned 0x10003 [0155.525] TranslateMessage (lpMsg=0x1ef250) returned 0 [0155.525] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0155.525] GetKeyState (nVirtKey=1) returned -128 [0155.525] GetKeyState (nVirtKey=2) returned 0 [0155.525] GetKeyState (nVirtKey=4) returned 0 [0155.525] GetKeyState (nVirtKey=5) returned 0 [0155.526] GetKeyState (nVirtKey=6) returned 0 [0155.526] IsWindowVisible (hWnd=0x201d0) returned 1 [0155.526] IsWindowEnabled (hWnd=0x201d0) returned 1 [0155.526] SetFocus (hWnd=0x201d0) returned 0x201d0 [0155.526] GetFocus () returned 0x201d0 [0155.526] GetFocus () returned 0x201d0 [0155.526] GetFocus () returned 0x201d0 [0155.526] GetKeyState (nVirtKey=1) returned -128 [0155.526] GetKeyState (nVirtKey=2) returned 0 [0155.526] GetKeyState (nVirtKey=4) returned 0 [0155.526] GetKeyState (nVirtKey=5) returned 0 [0155.526] GetKeyState (nVirtKey=6) returned 0 [0155.526] GetCapture () returned 0x0 [0155.526] SetCapture (hWnd=0x201d0) returned 0x0 [0155.526] GetKeyState (nVirtKey=1) returned -128 [0155.526] GetKeyState (nVirtKey=2) returned 0 [0155.526] GetKeyState (nVirtKey=4) returned 0 [0155.526] GetKeyState (nVirtKey=5) returned 0 [0155.526] GetKeyState (nVirtKey=6) returned 0 [0155.526] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0155.526] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0155.526] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0155.526] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0155.526] TranslateMessage (lpMsg=0x1ef250) returned 0 [0155.526] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0155.526] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0155.527] IsWindowUnicode (hWnd=0x201d0) returned 1 [0155.527] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0155.527] TranslateMessage (lpMsg=0x1ef250) returned 0 [0155.527] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0155.527] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x266dbb4, cPoints=0x1 | out: lpPoints=0x266dbb4) returned 42533703 [0155.527] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0155.527] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0155.527] UpdateWindow (hWnd=0x201d0) returned 1 [0155.527] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0155.527] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0155.527] CreateCompatibleDC (hdc=0x160107c7) returned 0x5901084a [0155.527] SelectObject (hdc=0x5901084a, h=0x490500d1) returned 0x185000f [0155.527] GdipCreateFromHDC (hdc=0x5901084a, graphics=0x1eea5c) returned 0x0 [0155.527] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.527] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0155.527] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0155.528] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0155.528] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0155.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0155.528] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0155.528] LocalFree (hMem=0x416cb8) returned 0x0 [0155.528] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0155.528] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0155.528] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0155.528] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0155.528] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0155.528] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd370dbd) returned 0x0 [0155.528] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0155.528] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0155.528] GetCurrentObject (hdc=0x5901084a, type=0x1) returned 0x1b00017 [0155.528] GetCurrentObject (hdc=0x5901084a, type=0x2) returned 0x1900010 [0155.528] GetCurrentObject (hdc=0x5901084a, type=0x7) returned 0x490500d1 [0155.528] GetCurrentObject (hdc=0x5901084a, type=0x6) returned 0x18a002e [0155.528] SaveDC (hdc=0x5901084a) returned 1 [0155.529] GetNearestColor (hdc=0x5901084a, color=0xf5f5f5) returned 0xf5f5f5 [0155.529] GetNearestColor (hdc=0x5901084a, color=0x515151) returned 0x515151 [0155.529] GetNearestColor (hdc=0x5901084a, color=0x0) returned 0x0 [0155.529] GetNearestColor (hdc=0x5901084a, color=0x515151) returned 0x515151 [0155.529] GetNearestColor (hdc=0x5901084a, color=0x0) returned 0x0 [0155.529] GetNearestColor (hdc=0x5901084a, color=0xfafafa) returned 0xfafafa [0155.529] GetNearestColor (hdc=0x5901084a, color=0xe0e0e0) returned 0xe0e0e0 [0155.529] GetNearestColor (hdc=0x5901084a, color=0xdcdcdc) returned 0xdcdcdc [0155.529] GetNearestColor (hdc=0x5901084a, color=0x0) returned 0x0 [0155.529] RestoreDC (hdc=0x5901084a, nSavedDC=-1) returned 1 [0155.529] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5901084a) returned 0x0 [0155.529] IsAppThemed () returned 0x1 [0155.529] GetThemeAppProperties () returned 0x3 [0155.529] GetThemeAppProperties () returned 0x3 [0155.529] IsAppThemed () returned 0x1 [0155.529] GetThemeAppProperties () returned 0x3 [0155.529] GetThemeAppProperties () returned 0x3 [0155.530] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x266e2b8 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0155.530] IsAppThemed () returned 0x1 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] IsAppThemed () returned 0x1 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] IsAppThemed () returned 0x1 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] IsAppThemed () returned 0x1 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] IsThemePartDefined () returned 0x1 [0155.530] IsAppThemed () returned 0x1 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0155.530] IsAppThemed () returned 0x1 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] IsAppThemed () returned 0x1 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] GetThemeAppProperties () returned 0x3 [0155.530] IsThemePartDefined () returned 0x1 [0155.530] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0155.531] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0155.531] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0155.531] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0155.531] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0155.531] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0155.531] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0155.531] LocalFree (hMem=0x416cb8) returned 0x0 [0155.531] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0155.531] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0155.531] LocalFree (hMem=0x416cb8) returned 0x0 [0155.531] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0155.531] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0155.531] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0155.531] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0155.531] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0155.531] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0155.531] GetCurrentObject (hdc=0x5901084a, type=0x1) returned 0x1b00017 [0155.531] GetCurrentObject (hdc=0x5901084a, type=0x2) returned 0x1900010 [0155.532] GetCurrentObject (hdc=0x5901084a, type=0x7) returned 0x490500d1 [0155.532] GetCurrentObject (hdc=0x5901084a, type=0x6) returned 0x18a002e [0155.532] SaveDC (hdc=0x5901084a) returned 1 [0155.532] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1040246 [0155.532] GetClipRgn (hdc=0x5901084a, hrgn=0x1040246) returned 0 [0155.532] SelectClipRgn (hdc=0x5901084a, hrgn=0x21040813) returned 2 [0155.532] DeleteObject (ho=0x1040246) returned 1 [0155.532] DeleteObject (ho=0x21040813) returned 1 [0155.532] OffsetViewportOrgEx (in: hdc=0x5901084a, x=0, y=0, lppt=0x266e968 | out: lppt=0x266e968) returned 1 [0155.532] DrawThemeParentBackground () returned 0x0 [0155.532] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0155.532] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0155.532] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0155.532] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0155.532] GetSystemMetrics (nIndex=42) returned 0 [0155.532] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0155.532] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0155.533] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0155.533] GetCurrentObject (hdc=0x5901084a, type=0x1) returned 0x1b00017 [0155.533] GetCurrentObject (hdc=0x5901084a, type=0x2) returned 0x1900010 [0155.533] GetCurrentObject (hdc=0x5901084a, type=0x7) returned 0x490500d1 [0155.533] GetCurrentObject (hdc=0x5901084a, type=0x6) returned 0x18a002e [0155.533] SaveDC (hdc=0x5901084a) returned 2 [0155.533] GetNearestColor (hdc=0x5901084a, color=0xf5f5f5) returned 0xf5f5f5 [0155.533] CreateSolidBrush (color=0xf5f5f5) returned 0x86100244 [0155.533] FillRect (hDC=0x5901084a, lprc=0x1ee2d0, hbr=0x86100244) returned 1 [0155.533] DeleteObject (ho=0x86100244) returned 1 [0155.533] RestoreDC (hdc=0x5901084a, nSavedDC=-1) returned 1 [0155.533] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0155.533] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0155.533] GetSystemMetrics (nIndex=42) returned 0 [0155.533] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0155.533] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0155.533] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0155.533] GetCurrentObject (hdc=0x5901084a, type=0x1) returned 0x1b00017 [0155.534] GetCurrentObject (hdc=0x5901084a, type=0x2) returned 0x1900010 [0155.534] GetCurrentObject (hdc=0x5901084a, type=0x7) returned 0x490500d1 [0155.534] GetCurrentObject (hdc=0x5901084a, type=0x6) returned 0x18a002e [0155.534] SaveDC (hdc=0x5901084a) returned 2 [0155.534] GetNearestColor (hdc=0x5901084a, color=0xf5f5f5) returned 0xf5f5f5 [0155.534] CreateSolidBrush (color=0xf5f5f5) returned 0x87100244 [0155.534] FillRect (hDC=0x5901084a, lprc=0x1ee270, hbr=0x87100244) returned 1 [0155.534] DeleteObject (ho=0x87100244) returned 1 [0155.534] RestoreDC (hdc=0x5901084a, nSavedDC=-1) returned 1 [0155.534] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0155.534] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0155.534] GetSystemMetrics (nIndex=42) returned 0 [0155.534] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0155.534] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0155.534] RestoreDC (hdc=0x5901084a, nSavedDC=-1) returned 1 [0155.534] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5901084a) returned 0x0 [0155.535] IsAppThemed () returned 0x1 [0155.535] GetThemeAppProperties () returned 0x3 [0155.535] GetThemeAppProperties () returned 0x3 [0155.535] IsAppThemed () returned 0x1 [0155.535] GetThemeAppProperties () returned 0x3 [0155.535] GetThemeAppProperties () returned 0x3 [0155.535] IsThemePartDefined () returned 0x1 [0155.535] GdipCreateRegion (region=0x1ee764) returned 0x0 [0155.535] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0155.535] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0155.535] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0155.535] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0155.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0155.535] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0155.535] LocalFree (hMem=0x416cb8) returned 0x0 [0155.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0155.535] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0155.535] LocalFree (hMem=0x416cb8) returned 0x0 [0155.535] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0155.535] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0155.535] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0155.536] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0155.536] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0155.536] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0155.536] GetCurrentObject (hdc=0x5901084a, type=0x1) returned 0x1b00017 [0155.536] GetCurrentObject (hdc=0x5901084a, type=0x2) returned 0x1900010 [0155.536] GetCurrentObject (hdc=0x5901084a, type=0x7) returned 0x490500d1 [0155.536] GetCurrentObject (hdc=0x5901084a, type=0x6) returned 0x18a002e [0155.536] SaveDC (hdc=0x5901084a) returned 1 [0155.536] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x22040813 [0155.536] GetClipRgn (hdc=0x5901084a, hrgn=0x22040813) returned 0 [0155.536] SelectClipRgn (hdc=0x5901084a, hrgn=0x3040246) returned 2 [0155.536] DeleteObject (ho=0x22040813) returned 1 [0155.536] DeleteObject (ho=0x3040246) returned 1 [0155.536] OffsetViewportOrgEx (in: hdc=0x5901084a, x=0, y=0, lppt=0x266f1a8 | out: lppt=0x266f1a8) returned 1 [0155.536] IsAppThemed () returned 0x1 [0155.536] GetThemeAppProperties () returned 0x3 [0155.536] GetThemeAppProperties () returned 0x3 [0155.536] DrawThemeBackground () returned 0x0 [0155.537] RestoreDC (hdc=0x5901084a, nSavedDC=-1) returned 1 [0155.537] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5901084a) returned 0x0 [0155.537] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0155.537] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0155.537] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0155.537] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0155.537] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0155.537] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0155.537] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0155.537] LocalFree (hMem=0x416cb8) returned 0x0 [0155.537] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0155.537] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0155.537] LocalFree (hMem=0x416cb8) returned 0x0 [0155.537] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0155.537] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0155.537] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0155.537] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0155.538] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0155.538] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0155.538] GetCurrentObject (hdc=0x5901084a, type=0x1) returned 0x1b00017 [0155.538] GetCurrentObject (hdc=0x5901084a, type=0x2) returned 0x1900010 [0155.538] GetCurrentObject (hdc=0x5901084a, type=0x7) returned 0x490500d1 [0155.538] GetCurrentObject (hdc=0x5901084a, type=0x6) returned 0x18a002e [0155.538] SaveDC (hdc=0x5901084a) returned 1 [0155.538] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4040246 [0155.538] GetClipRgn (hdc=0x5901084a, hrgn=0x4040246) returned 0 [0155.538] SelectClipRgn (hdc=0x5901084a, hrgn=0x23040813) returned 2 [0155.538] DeleteObject (ho=0x4040246) returned 1 [0155.538] DeleteObject (ho=0x23040813) returned 1 [0155.538] OffsetViewportOrgEx (in: hdc=0x5901084a, x=0, y=0, lppt=0x266f47c | out: lppt=0x266f47c) returned 1 [0155.538] IsAppThemed () returned 0x1 [0155.538] GetThemeAppProperties () returned 0x3 [0155.538] GetThemeAppProperties () returned 0x3 [0155.538] GetThemeBackgroundContentRect () returned 0x0 [0155.538] RestoreDC (hdc=0x5901084a, nSavedDC=-1) returned 1 [0155.538] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5901084a) returned 0x0 [0155.538] IsAppThemed () returned 0x1 [0155.539] GetThemeAppProperties () returned 0x3 [0155.539] GetThemeAppProperties () returned 0x3 [0155.539] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0155.539] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0155.539] GetCurrentObject (hdc=0x5901084a, type=0x1) returned 0x1b00017 [0155.539] GetCurrentObject (hdc=0x5901084a, type=0x2) returned 0x1900010 [0155.539] GetCurrentObject (hdc=0x5901084a, type=0x7) returned 0x490500d1 [0155.539] GetCurrentObject (hdc=0x5901084a, type=0x6) returned 0x18a002e [0155.539] SaveDC (hdc=0x5901084a) returned 1 [0155.539] GetTextAlign (hdc=0x5901084a) returned 0x0 [0155.539] GetTextColor (hdc=0x5901084a) returned 0x0 [0155.539] GetCurrentObject (hdc=0x5901084a, type=0x6) returned 0x18a002e [0155.539] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0155.539] SelectObject (hdc=0x5901084a, h=0x220a081a) returned 0x18a002e [0155.539] GetBkMode (hdc=0x5901084a) returned 2 [0155.539] SetBkMode (hdc=0x5901084a, mode=1) returned 2 [0155.540] DrawTextExW (in: hdc=0x5901084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x266f810 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0155.540] DrawTextExW (in: hdc=0x5901084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x266f810 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0155.540] RestoreDC (hdc=0x5901084a, nSavedDC=-1) returned 1 [0155.540] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5901084a) returned 0x0 [0155.540] GetFocus () returned 0x201d0 [0155.540] IsAppThemed () returned 0x1 [0155.540] GetThemeAppProperties () returned 0x3 [0155.540] GetThemeAppProperties () returned 0x3 [0155.540] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0155.540] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5901084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.540] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5901084a) returned 0x0 [0155.540] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0155.540] SelectObject (hdc=0x5901084a, h=0x185000f) returned 0x490500d1 [0155.540] DeleteDC (hdc=0x5901084a) returned 1 [0155.541] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0155.541] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0155.541] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x266f90c, cPoints=0x1 | out: lpPoints=0x266f90c) returned 42533703 [0155.541] WindowFromPoint (Point=0x3bd) returned 0x201d0 [0155.541] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bd) returned 0x1 [0155.541] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0155.541] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0155.541] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0155.541] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.541] GetSystemMetrics (nIndex=42) returned 0 [0155.541] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0155.541] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0155.541] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0155.541] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.541] GetCapture () returned 0x201d0 [0155.541] ReleaseCapture () returned 1 [0155.541] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0155.541] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0155.542] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bd) returned 0x1 [0155.542] IsWindowUnicode (hWnd=0x201d0) returned 1 [0155.542] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0155.542] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bd) returned 0x1 [0155.542] SetCursor (hCursor=0x10003) returned 0x10003 [0155.542] TranslateMessage (lpMsg=0x1ef250) returned 0 [0155.542] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0155.542] GetKeyState (nVirtKey=1) returned 0 [0155.542] GetKeyState (nVirtKey=2) returned 0 [0155.542] GetKeyState (nVirtKey=4) returned 0 [0155.542] GetKeyState (nVirtKey=5) returned 0 [0155.542] GetKeyState (nVirtKey=6) returned 0 [0155.542] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0155.542] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0155.542] WaitMessage () returned 1 [0158.471] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0158.471] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203bf) returned 0x1 [0158.471] IsWindowUnicode (hWnd=0x201d0) returned 1 [0158.471] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0158.471] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203bf) returned 0x1 [0158.471] SetCursor (hCursor=0x10003) returned 0x10003 [0158.471] TranslateMessage (lpMsg=0x1ef250) returned 0 [0158.471] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0158.471] GetKeyState (nVirtKey=1) returned 0 [0158.472] GetKeyState (nVirtKey=2) returned 0 [0158.472] GetKeyState (nVirtKey=4) returned 0 [0158.472] GetKeyState (nVirtKey=5) returned 0 [0158.472] GetKeyState (nVirtKey=6) returned 0 [0158.472] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0158.472] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0158.472] WaitMessage () returned 1 [0158.529] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0158.529] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203bf) returned 0x1 [0158.529] IsWindowUnicode (hWnd=0x201d0) returned 1 [0158.529] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0158.529] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203bf) returned 0x1 [0158.529] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0158.529] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e1027a) returned 0x0 [0158.529] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0158.530] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0158.530] SetCursor (hCursor=0x10003) returned 0x10003 [0158.530] TranslateMessage (lpMsg=0x1ef250) returned 0 [0158.530] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0158.530] GetKeyState (nVirtKey=1) returned -127 [0158.530] GetKeyState (nVirtKey=2) returned 0 [0158.530] GetKeyState (nVirtKey=4) returned 0 [0158.530] GetKeyState (nVirtKey=5) returned 0 [0158.530] GetKeyState (nVirtKey=6) returned 0 [0158.530] IsWindowVisible (hWnd=0x201d0) returned 1 [0158.530] IsWindowEnabled (hWnd=0x201d0) returned 1 [0158.530] SetFocus (hWnd=0x201d0) returned 0x201d0 [0158.530] GetFocus () returned 0x201d0 [0158.530] GetFocus () returned 0x201d0 [0158.530] GetFocus () returned 0x201d0 [0158.530] GetKeyState (nVirtKey=1) returned -127 [0158.531] GetKeyState (nVirtKey=2) returned 0 [0158.531] GetKeyState (nVirtKey=4) returned 0 [0158.531] GetKeyState (nVirtKey=5) returned 0 [0158.531] GetKeyState (nVirtKey=6) returned 0 [0158.531] GetCapture () returned 0x0 [0158.531] SetCapture (hWnd=0x201d0) returned 0x0 [0158.531] GetKeyState (nVirtKey=1) returned -127 [0158.531] GetKeyState (nVirtKey=2) returned 0 [0158.531] GetKeyState (nVirtKey=4) returned 0 [0158.531] GetKeyState (nVirtKey=5) returned 0 [0158.531] GetKeyState (nVirtKey=6) returned 0 [0158.531] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0158.531] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0158.531] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0158.531] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0158.531] TranslateMessage (lpMsg=0x1ef250) returned 0 [0158.531] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0158.531] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0158.531] IsWindowUnicode (hWnd=0x201d0) returned 1 [0158.531] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0158.531] TranslateMessage (lpMsg=0x1ef250) returned 0 [0158.531] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0158.531] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x266fa30, cPoints=0x1 | out: lpPoints=0x266fa30) returned 42533703 [0158.531] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0158.531] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0158.531] UpdateWindow (hWnd=0x201d0) returned 1 [0158.531] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0158.531] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0158.532] CreateCompatibleDC (hdc=0x160107c7) returned 0x5a01084a [0158.532] SelectObject (hdc=0x5a01084a, h=0x490500d1) returned 0x185000f [0158.532] GdipCreateFromHDC (hdc=0x5a01084a, graphics=0x1eea5c) returned 0x0 [0158.532] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0158.532] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0158.532] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0158.532] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0158.532] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0158.532] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0158.532] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0158.532] LocalFree (hMem=0x416cb8) returned 0x0 [0158.532] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0158.532] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0158.532] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0158.532] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0158.532] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0158.532] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd350dbd) returned 0x0 [0158.532] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0158.533] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0158.533] GetCurrentObject (hdc=0x5a01084a, type=0x1) returned 0x1b00017 [0158.533] GetCurrentObject (hdc=0x5a01084a, type=0x2) returned 0x1900010 [0158.533] GetCurrentObject (hdc=0x5a01084a, type=0x7) returned 0x490500d1 [0158.533] GetCurrentObject (hdc=0x5a01084a, type=0x6) returned 0x18a002e [0158.533] SaveDC (hdc=0x5a01084a) returned 1 [0158.533] GetNearestColor (hdc=0x5a01084a, color=0xf5f5f5) returned 0xf5f5f5 [0158.533] GetNearestColor (hdc=0x5a01084a, color=0x515151) returned 0x515151 [0158.533] GetNearestColor (hdc=0x5a01084a, color=0x0) returned 0x0 [0158.533] GetNearestColor (hdc=0x5a01084a, color=0x515151) returned 0x515151 [0158.533] GetNearestColor (hdc=0x5a01084a, color=0x0) returned 0x0 [0158.533] GetNearestColor (hdc=0x5a01084a, color=0xfafafa) returned 0xfafafa [0158.533] GetNearestColor (hdc=0x5a01084a, color=0xe0e0e0) returned 0xe0e0e0 [0158.533] GetNearestColor (hdc=0x5a01084a, color=0xdcdcdc) returned 0xdcdcdc [0158.533] GetNearestColor (hdc=0x5a01084a, color=0x0) returned 0x0 [0158.533] RestoreDC (hdc=0x5a01084a, nSavedDC=-1) returned 1 [0158.533] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5a01084a) returned 0x0 [0158.533] IsAppThemed () returned 0x1 [0158.533] GetThemeAppProperties () returned 0x3 [0158.533] GetThemeAppProperties () returned 0x3 [0158.533] IsAppThemed () returned 0x1 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2670134 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0158.534] IsAppThemed () returned 0x1 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] IsAppThemed () returned 0x1 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] IsAppThemed () returned 0x1 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] IsAppThemed () returned 0x1 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] IsThemePartDefined () returned 0x1 [0158.534] IsAppThemed () returned 0x1 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0158.534] IsAppThemed () returned 0x1 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] IsAppThemed () returned 0x1 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] GetThemeAppProperties () returned 0x3 [0158.534] IsThemePartDefined () returned 0x1 [0158.534] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0158.535] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0158.535] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0158.535] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0158.535] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0158.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0158.535] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0158.535] LocalFree (hMem=0x416cb8) returned 0x0 [0158.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0158.535] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0158.535] LocalFree (hMem=0x416cb8) returned 0x0 [0158.535] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0158.535] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0158.535] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0158.535] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0158.535] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0158.535] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0158.535] GetCurrentObject (hdc=0x5a01084a, type=0x1) returned 0x1b00017 [0158.535] GetCurrentObject (hdc=0x5a01084a, type=0x2) returned 0x1900010 [0158.535] GetCurrentObject (hdc=0x5a01084a, type=0x7) returned 0x490500d1 [0158.535] GetCurrentObject (hdc=0x5a01084a, type=0x6) returned 0x18a002e [0158.535] SaveDC (hdc=0x5a01084a) returned 1 [0158.535] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x24040813 [0158.535] GetClipRgn (hdc=0x5a01084a, hrgn=0x24040813) returned 0 [0158.536] SelectClipRgn (hdc=0x5a01084a, hrgn=0x8040246) returned 2 [0158.536] DeleteObject (ho=0x24040813) returned 1 [0158.536] DeleteObject (ho=0x8040246) returned 1 [0158.536] OffsetViewportOrgEx (in: hdc=0x5a01084a, x=0, y=0, lppt=0x26707e4 | out: lppt=0x26707e4) returned 1 [0158.536] DrawThemeParentBackground () returned 0x0 [0158.536] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0158.536] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0158.536] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0158.536] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0158.536] GetSystemMetrics (nIndex=42) returned 0 [0158.536] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0158.536] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0158.536] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0158.536] GetCurrentObject (hdc=0x5a01084a, type=0x1) returned 0x1b00017 [0158.536] GetCurrentObject (hdc=0x5a01084a, type=0x2) returned 0x1900010 [0158.536] GetCurrentObject (hdc=0x5a01084a, type=0x7) returned 0x490500d1 [0158.536] GetCurrentObject (hdc=0x5a01084a, type=0x6) returned 0x18a002e [0158.536] SaveDC (hdc=0x5a01084a) returned 2 [0158.536] GetNearestColor (hdc=0x5a01084a, color=0xf5f5f5) returned 0xf5f5f5 [0158.536] CreateSolidBrush (color=0xf5f5f5) returned 0x88100244 [0158.536] FillRect (hDC=0x5a01084a, lprc=0x1ee2d0, hbr=0x88100244) returned 1 [0158.536] DeleteObject (ho=0x88100244) returned 1 [0158.537] RestoreDC (hdc=0x5a01084a, nSavedDC=-1) returned 1 [0158.537] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0158.537] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0158.537] GetSystemMetrics (nIndex=42) returned 0 [0158.537] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0158.537] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0158.537] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0158.537] GetCurrentObject (hdc=0x5a01084a, type=0x1) returned 0x1b00017 [0158.537] GetCurrentObject (hdc=0x5a01084a, type=0x2) returned 0x1900010 [0158.537] GetCurrentObject (hdc=0x5a01084a, type=0x7) returned 0x490500d1 [0158.537] GetCurrentObject (hdc=0x5a01084a, type=0x6) returned 0x18a002e [0158.537] SaveDC (hdc=0x5a01084a) returned 2 [0158.537] GetNearestColor (hdc=0x5a01084a, color=0xf5f5f5) returned 0xf5f5f5 [0158.537] CreateSolidBrush (color=0xf5f5f5) returned 0x89100244 [0158.537] FillRect (hDC=0x5a01084a, lprc=0x1ee270, hbr=0x89100244) returned 1 [0158.537] DeleteObject (ho=0x89100244) returned 1 [0158.537] RestoreDC (hdc=0x5a01084a, nSavedDC=-1) returned 1 [0158.537] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0158.537] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0158.537] GetSystemMetrics (nIndex=42) returned 0 [0158.537] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0158.537] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0158.538] RestoreDC (hdc=0x5a01084a, nSavedDC=-1) returned 1 [0158.538] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5a01084a) returned 0x0 [0158.538] IsAppThemed () returned 0x1 [0158.538] GetThemeAppProperties () returned 0x3 [0158.538] GetThemeAppProperties () returned 0x3 [0158.538] IsAppThemed () returned 0x1 [0158.538] GetThemeAppProperties () returned 0x3 [0158.538] GetThemeAppProperties () returned 0x3 [0158.538] IsThemePartDefined () returned 0x1 [0158.538] GdipCreateRegion (region=0x1ee764) returned 0x0 [0158.538] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0158.538] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0158.538] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0158.538] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0158.538] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0158.538] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0158.538] LocalFree (hMem=0x416cb8) returned 0x0 [0158.538] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0158.538] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0158.538] LocalFree (hMem=0x416cb8) returned 0x0 [0158.538] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0158.538] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0158.538] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0158.538] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0158.538] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0158.538] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0158.539] GetCurrentObject (hdc=0x5a01084a, type=0x1) returned 0x1b00017 [0158.539] GetCurrentObject (hdc=0x5a01084a, type=0x2) returned 0x1900010 [0158.539] GetCurrentObject (hdc=0x5a01084a, type=0x7) returned 0x490500d1 [0158.539] GetCurrentObject (hdc=0x5a01084a, type=0x6) returned 0x18a002e [0158.539] SaveDC (hdc=0x5a01084a) returned 1 [0158.539] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9040246 [0158.539] GetClipRgn (hdc=0x5a01084a, hrgn=0x9040246) returned 0 [0158.539] SelectClipRgn (hdc=0x5a01084a, hrgn=0x26040813) returned 2 [0158.539] DeleteObject (ho=0x9040246) returned 1 [0158.539] DeleteObject (ho=0x26040813) returned 1 [0158.539] OffsetViewportOrgEx (in: hdc=0x5a01084a, x=0, y=0, lppt=0x2671024 | out: lppt=0x2671024) returned 1 [0158.539] IsAppThemed () returned 0x1 [0158.539] GetThemeAppProperties () returned 0x3 [0158.539] GetThemeAppProperties () returned 0x3 [0158.539] DrawThemeBackground () returned 0x0 [0158.539] RestoreDC (hdc=0x5a01084a, nSavedDC=-1) returned 1 [0158.539] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5a01084a) returned 0x0 [0158.539] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0158.539] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0158.539] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0158.539] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0158.539] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0158.540] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0158.540] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0158.540] LocalFree (hMem=0x416cb8) returned 0x0 [0158.540] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0158.540] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0158.540] LocalFree (hMem=0x416cb8) returned 0x0 [0158.540] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0158.540] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0158.540] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0158.540] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0158.540] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0158.540] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0158.540] GetCurrentObject (hdc=0x5a01084a, type=0x1) returned 0x1b00017 [0158.540] GetCurrentObject (hdc=0x5a01084a, type=0x2) returned 0x1900010 [0158.540] GetCurrentObject (hdc=0x5a01084a, type=0x7) returned 0x490500d1 [0158.540] GetCurrentObject (hdc=0x5a01084a, type=0x6) returned 0x18a002e [0158.540] SaveDC (hdc=0x5a01084a) returned 1 [0158.540] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x27040813 [0158.540] GetClipRgn (hdc=0x5a01084a, hrgn=0x27040813) returned 0 [0158.540] SelectClipRgn (hdc=0x5a01084a, hrgn=0xa040246) returned 2 [0158.540] DeleteObject (ho=0x27040813) returned 1 [0158.540] DeleteObject (ho=0xa040246) returned 1 [0158.541] OffsetViewportOrgEx (in: hdc=0x5a01084a, x=0, y=0, lppt=0x26712f8 | out: lppt=0x26712f8) returned 1 [0158.541] IsAppThemed () returned 0x1 [0158.541] GetThemeAppProperties () returned 0x3 [0158.541] GetThemeAppProperties () returned 0x3 [0158.541] GetThemeBackgroundContentRect () returned 0x0 [0158.541] RestoreDC (hdc=0x5a01084a, nSavedDC=-1) returned 1 [0158.541] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5a01084a) returned 0x0 [0158.541] IsAppThemed () returned 0x1 [0158.541] GetThemeAppProperties () returned 0x3 [0158.541] GetThemeAppProperties () returned 0x3 [0158.541] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0158.541] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0158.541] GetCurrentObject (hdc=0x5a01084a, type=0x1) returned 0x1b00017 [0158.541] GetCurrentObject (hdc=0x5a01084a, type=0x2) returned 0x1900010 [0158.541] GetCurrentObject (hdc=0x5a01084a, type=0x7) returned 0x490500d1 [0158.541] GetCurrentObject (hdc=0x5a01084a, type=0x6) returned 0x18a002e [0158.541] SaveDC (hdc=0x5a01084a) returned 1 [0158.541] GetTextAlign (hdc=0x5a01084a) returned 0x0 [0158.541] GetTextColor (hdc=0x5a01084a) returned 0x0 [0158.541] GetCurrentObject (hdc=0x5a01084a, type=0x6) returned 0x18a002e [0158.541] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0158.541] SelectObject (hdc=0x5a01084a, h=0x220a081a) returned 0x18a002e [0158.541] GetBkMode (hdc=0x5a01084a) returned 2 [0158.541] SetBkMode (hdc=0x5a01084a, mode=1) returned 2 [0158.542] DrawTextExW (in: hdc=0x5a01084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x267168c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0158.542] DrawTextExW (in: hdc=0x5a01084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x267168c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0158.542] RestoreDC (hdc=0x5a01084a, nSavedDC=-1) returned 1 [0158.542] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5a01084a) returned 0x0 [0158.542] GetFocus () returned 0x201d0 [0158.542] IsAppThemed () returned 0x1 [0158.542] GetThemeAppProperties () returned 0x3 [0158.542] GetThemeAppProperties () returned 0x3 [0158.542] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0158.542] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5a01084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0158.542] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5a01084a) returned 0x0 [0158.542] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0158.542] SelectObject (hdc=0x5a01084a, h=0x185000f) returned 0x490500d1 [0158.542] DeleteDC (hdc=0x5a01084a) returned 1 [0158.542] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0158.542] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0158.542] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2671788, cPoints=0x1 | out: lpPoints=0x2671788) returned 42533703 [0158.543] WindowFromPoint (Point=0x3bf) returned 0x201d0 [0158.543] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203bf) returned 0x1 [0158.543] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0158.543] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0158.543] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0158.543] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.543] GetSystemMetrics (nIndex=42) returned 0 [0158.543] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0158.543] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0158.543] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0158.543] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.543] GetCapture () returned 0x201d0 [0158.543] ReleaseCapture () returned 1 [0158.543] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0158.543] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0158.543] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203bf) returned 0x1 [0158.543] IsWindowUnicode (hWnd=0x201d0) returned 1 [0158.543] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0158.543] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203bf) returned 0x1 [0158.543] SetCursor (hCursor=0x10003) returned 0x10003 [0158.543] TranslateMessage (lpMsg=0x1ef250) returned 0 [0158.543] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0158.543] GetKeyState (nVirtKey=1) returned 1 [0158.544] GetKeyState (nVirtKey=2) returned 0 [0158.544] GetKeyState (nVirtKey=4) returned 0 [0158.544] GetKeyState (nVirtKey=5) returned 0 [0158.544] GetKeyState (nVirtKey=6) returned 0 [0158.544] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0158.544] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0158.544] WaitMessage () returned 1 [0161.590] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0161.590] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703c3) returned 0x1 [0161.590] IsWindowUnicode (hWnd=0x201d0) returned 1 [0161.590] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0161.590] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703c3) returned 0x1 [0161.590] SetCursor (hCursor=0x10003) returned 0x10003 [0161.591] TranslateMessage (lpMsg=0x1ef250) returned 0 [0161.591] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0161.591] GetKeyState (nVirtKey=1) returned 1 [0161.591] GetKeyState (nVirtKey=2) returned 0 [0161.591] GetKeyState (nVirtKey=4) returned 0 [0161.591] GetKeyState (nVirtKey=5) returned 0 [0161.591] GetKeyState (nVirtKey=6) returned 0 [0161.591] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0161.591] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0161.591] WaitMessage () returned 1 [0161.667] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0161.667] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703c3) returned 0x1 [0161.668] IsWindowUnicode (hWnd=0x201d0) returned 1 [0161.668] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0161.668] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703c3) returned 0x1 [0161.668] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0161.668] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e6027e) returned 0x0 [0161.668] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0161.668] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0161.668] SetCursor (hCursor=0x10003) returned 0x10003 [0161.668] TranslateMessage (lpMsg=0x1ef250) returned 0 [0161.668] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0161.668] GetKeyState (nVirtKey=1) returned -128 [0161.668] GetKeyState (nVirtKey=2) returned 0 [0161.668] GetKeyState (nVirtKey=4) returned 0 [0161.668] GetKeyState (nVirtKey=5) returned 0 [0161.668] GetKeyState (nVirtKey=6) returned 0 [0161.668] IsWindowVisible (hWnd=0x201d0) returned 1 [0161.669] IsWindowEnabled (hWnd=0x201d0) returned 1 [0161.669] SetFocus (hWnd=0x201d0) returned 0x201d0 [0161.669] GetFocus () returned 0x201d0 [0161.669] GetFocus () returned 0x201d0 [0161.669] GetFocus () returned 0x201d0 [0161.669] GetKeyState (nVirtKey=1) returned -128 [0161.669] GetKeyState (nVirtKey=2) returned 0 [0161.669] GetKeyState (nVirtKey=4) returned 0 [0161.669] GetKeyState (nVirtKey=5) returned 0 [0161.669] GetKeyState (nVirtKey=6) returned 0 [0161.669] GetCapture () returned 0x0 [0161.669] SetCapture (hWnd=0x201d0) returned 0x0 [0161.669] GetKeyState (nVirtKey=1) returned -128 [0161.669] GetKeyState (nVirtKey=2) returned 0 [0161.669] GetKeyState (nVirtKey=4) returned 0 [0161.669] GetKeyState (nVirtKey=5) returned 0 [0161.669] GetKeyState (nVirtKey=6) returned 0 [0161.669] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0161.669] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0161.669] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0161.669] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0161.669] TranslateMessage (lpMsg=0x1ef250) returned 0 [0161.669] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0161.669] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0161.669] IsWindowUnicode (hWnd=0x201d0) returned 1 [0161.669] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0161.669] TranslateMessage (lpMsg=0x1ef250) returned 0 [0161.669] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0161.669] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26718ac, cPoints=0x1 | out: lpPoints=0x26718ac) returned 42533703 [0161.669] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0161.669] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0161.669] UpdateWindow (hWnd=0x201d0) returned 1 [0161.670] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0161.670] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0161.670] CreateCompatibleDC (hdc=0x160107c7) returned 0x5b01084a [0161.670] SelectObject (hdc=0x5b01084a, h=0x490500d1) returned 0x185000f [0161.670] GdipCreateFromHDC (hdc=0x5b01084a, graphics=0x1eea5c) returned 0x0 [0161.670] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0161.670] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0161.670] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0161.670] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0161.670] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0161.670] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0161.670] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0161.670] LocalFree (hMem=0x416cb8) returned 0x0 [0161.670] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0161.670] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0161.670] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0161.670] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0161.671] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0161.671] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd330dbd) returned 0x0 [0161.671] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0161.671] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0161.671] GetCurrentObject (hdc=0x5b01084a, type=0x1) returned 0x1b00017 [0161.671] GetCurrentObject (hdc=0x5b01084a, type=0x2) returned 0x1900010 [0161.671] GetCurrentObject (hdc=0x5b01084a, type=0x7) returned 0x490500d1 [0161.671] GetCurrentObject (hdc=0x5b01084a, type=0x6) returned 0x18a002e [0161.671] SaveDC (hdc=0x5b01084a) returned 1 [0161.671] GetNearestColor (hdc=0x5b01084a, color=0xf5f5f5) returned 0xf5f5f5 [0161.671] GetNearestColor (hdc=0x5b01084a, color=0x515151) returned 0x515151 [0161.671] GetNearestColor (hdc=0x5b01084a, color=0x0) returned 0x0 [0161.671] GetNearestColor (hdc=0x5b01084a, color=0x515151) returned 0x515151 [0161.671] GetNearestColor (hdc=0x5b01084a, color=0x0) returned 0x0 [0161.671] GetNearestColor (hdc=0x5b01084a, color=0xfafafa) returned 0xfafafa [0161.671] GetNearestColor (hdc=0x5b01084a, color=0xe0e0e0) returned 0xe0e0e0 [0161.671] GetNearestColor (hdc=0x5b01084a, color=0xdcdcdc) returned 0xdcdcdc [0161.671] GetNearestColor (hdc=0x5b01084a, color=0x0) returned 0x0 [0161.671] RestoreDC (hdc=0x5b01084a, nSavedDC=-1) returned 1 [0161.672] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5b01084a) returned 0x0 [0161.672] IsAppThemed () returned 0x1 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] IsAppThemed () returned 0x1 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2671fb0 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0161.672] IsAppThemed () returned 0x1 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] IsAppThemed () returned 0x1 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] IsAppThemed () returned 0x1 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] IsAppThemed () returned 0x1 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] IsThemePartDefined () returned 0x1 [0161.672] IsAppThemed () returned 0x1 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] GetThemeAppProperties () returned 0x3 [0161.672] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0161.672] IsAppThemed () returned 0x1 [0161.673] GetThemeAppProperties () returned 0x3 [0161.673] GetThemeAppProperties () returned 0x3 [0161.673] IsAppThemed () returned 0x1 [0161.673] GetThemeAppProperties () returned 0x3 [0161.673] GetThemeAppProperties () returned 0x3 [0161.673] IsThemePartDefined () returned 0x1 [0161.673] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0161.673] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0161.673] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0161.673] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0161.673] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0161.673] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0161.673] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0161.673] LocalFree (hMem=0x416cb8) returned 0x0 [0161.673] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0161.673] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0161.673] LocalFree (hMem=0x416cb8) returned 0x0 [0161.673] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0161.673] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0161.673] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0161.673] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0161.673] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0161.673] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0161.673] GetCurrentObject (hdc=0x5b01084a, type=0x1) returned 0x1b00017 [0161.673] GetCurrentObject (hdc=0x5b01084a, type=0x2) returned 0x1900010 [0161.674] GetCurrentObject (hdc=0x5b01084a, type=0x7) returned 0x490500d1 [0161.674] GetCurrentObject (hdc=0x5b01084a, type=0x6) returned 0x18a002e [0161.674] SaveDC (hdc=0x5b01084a) returned 1 [0161.674] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb040246 [0161.674] GetClipRgn (hdc=0x5b01084a, hrgn=0xb040246) returned 0 [0161.674] SelectClipRgn (hdc=0x5b01084a, hrgn=0x2b040813) returned 2 [0161.674] DeleteObject (ho=0xb040246) returned 1 [0161.674] DeleteObject (ho=0x2b040813) returned 1 [0161.674] OffsetViewportOrgEx (in: hdc=0x5b01084a, x=0, y=0, lppt=0x2672660 | out: lppt=0x2672660) returned 1 [0161.674] DrawThemeParentBackground () returned 0x0 [0161.674] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0161.674] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0161.674] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0161.674] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0161.674] GetSystemMetrics (nIndex=42) returned 0 [0161.674] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0161.674] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0161.674] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0161.674] GetCurrentObject (hdc=0x5b01084a, type=0x1) returned 0x1b00017 [0161.674] GetCurrentObject (hdc=0x5b01084a, type=0x2) returned 0x1900010 [0161.674] GetCurrentObject (hdc=0x5b01084a, type=0x7) returned 0x490500d1 [0161.674] GetCurrentObject (hdc=0x5b01084a, type=0x6) returned 0x18a002e [0161.675] SaveDC (hdc=0x5b01084a) returned 2 [0161.675] GetNearestColor (hdc=0x5b01084a, color=0xf5f5f5) returned 0xf5f5f5 [0161.675] CreateSolidBrush (color=0xf5f5f5) returned 0x8a100244 [0161.675] FillRect (hDC=0x5b01084a, lprc=0x1ee2d0, hbr=0x8a100244) returned 1 [0161.675] DeleteObject (ho=0x8a100244) returned 1 [0161.675] RestoreDC (hdc=0x5b01084a, nSavedDC=-1) returned 1 [0161.675] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0161.675] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0161.675] GetSystemMetrics (nIndex=42) returned 0 [0161.675] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0161.675] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0161.675] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0161.675] GetCurrentObject (hdc=0x5b01084a, type=0x1) returned 0x1b00017 [0161.675] GetCurrentObject (hdc=0x5b01084a, type=0x2) returned 0x1900010 [0161.675] GetCurrentObject (hdc=0x5b01084a, type=0x7) returned 0x490500d1 [0161.675] GetCurrentObject (hdc=0x5b01084a, type=0x6) returned 0x18a002e [0161.675] SaveDC (hdc=0x5b01084a) returned 2 [0161.675] GetNearestColor (hdc=0x5b01084a, color=0xf5f5f5) returned 0xf5f5f5 [0161.675] CreateSolidBrush (color=0xf5f5f5) returned 0x8b100244 [0161.676] FillRect (hDC=0x5b01084a, lprc=0x1ee270, hbr=0x8b100244) returned 1 [0161.676] DeleteObject (ho=0x8b100244) returned 1 [0161.676] RestoreDC (hdc=0x5b01084a, nSavedDC=-1) returned 1 [0161.676] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0161.676] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0161.676] GetSystemMetrics (nIndex=42) returned 0 [0161.676] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0161.676] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0161.676] RestoreDC (hdc=0x5b01084a, nSavedDC=-1) returned 1 [0161.676] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5b01084a) returned 0x0 [0161.676] IsAppThemed () returned 0x1 [0161.676] GetThemeAppProperties () returned 0x3 [0161.676] GetThemeAppProperties () returned 0x3 [0161.676] IsAppThemed () returned 0x1 [0161.676] GetThemeAppProperties () returned 0x3 [0161.676] GetThemeAppProperties () returned 0x3 [0161.676] IsThemePartDefined () returned 0x1 [0161.676] GdipCreateRegion (region=0x1ee764) returned 0x0 [0161.676] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0161.676] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0161.676] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0161.676] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0161.676] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0161.676] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0161.676] LocalFree (hMem=0x416cb8) returned 0x0 [0161.677] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0161.677] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0161.677] LocalFree (hMem=0x416cb8) returned 0x0 [0161.677] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0161.677] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0161.677] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0161.677] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0161.677] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0161.677] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0161.677] GetCurrentObject (hdc=0x5b01084a, type=0x1) returned 0x1b00017 [0161.677] GetCurrentObject (hdc=0x5b01084a, type=0x2) returned 0x1900010 [0161.677] GetCurrentObject (hdc=0x5b01084a, type=0x7) returned 0x490500d1 [0161.677] GetCurrentObject (hdc=0x5b01084a, type=0x6) returned 0x18a002e [0161.677] SaveDC (hdc=0x5b01084a) returned 1 [0161.677] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c040813 [0161.677] GetClipRgn (hdc=0x5b01084a, hrgn=0x2c040813) returned 0 [0161.677] SelectClipRgn (hdc=0x5b01084a, hrgn=0xd040246) returned 2 [0161.677] DeleteObject (ho=0x2c040813) returned 1 [0161.677] DeleteObject (ho=0xd040246) returned 1 [0161.677] OffsetViewportOrgEx (in: hdc=0x5b01084a, x=0, y=0, lppt=0x2672ea0 | out: lppt=0x2672ea0) returned 1 [0161.677] IsAppThemed () returned 0x1 [0161.677] GetThemeAppProperties () returned 0x3 [0161.677] GetThemeAppProperties () returned 0x3 [0161.677] DrawThemeBackground () returned 0x0 [0161.678] RestoreDC (hdc=0x5b01084a, nSavedDC=-1) returned 1 [0161.678] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5b01084a) returned 0x0 [0161.678] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0161.678] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0161.678] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0161.678] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0161.678] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0161.678] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0161.678] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0161.678] LocalFree (hMem=0x416cb8) returned 0x0 [0161.678] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0161.678] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0161.678] LocalFree (hMem=0x416cb8) returned 0x0 [0161.678] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0161.678] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0161.678] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0161.678] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0161.678] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0161.678] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0161.678] GetCurrentObject (hdc=0x5b01084a, type=0x1) returned 0x1b00017 [0161.678] GetCurrentObject (hdc=0x5b01084a, type=0x2) returned 0x1900010 [0161.678] GetCurrentObject (hdc=0x5b01084a, type=0x7) returned 0x490500d1 [0161.679] GetCurrentObject (hdc=0x5b01084a, type=0x6) returned 0x18a002e [0161.679] SaveDC (hdc=0x5b01084a) returned 1 [0161.679] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe040246 [0161.679] GetClipRgn (hdc=0x5b01084a, hrgn=0xe040246) returned 0 [0161.679] SelectClipRgn (hdc=0x5b01084a, hrgn=0x2d040813) returned 2 [0161.679] DeleteObject (ho=0xe040246) returned 1 [0161.679] DeleteObject (ho=0x2d040813) returned 1 [0161.679] OffsetViewportOrgEx (in: hdc=0x5b01084a, x=0, y=0, lppt=0x2673174 | out: lppt=0x2673174) returned 1 [0161.679] IsAppThemed () returned 0x1 [0161.679] GetThemeAppProperties () returned 0x3 [0161.679] GetThemeAppProperties () returned 0x3 [0161.679] GetThemeBackgroundContentRect () returned 0x0 [0161.679] RestoreDC (hdc=0x5b01084a, nSavedDC=-1) returned 1 [0161.679] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5b01084a) returned 0x0 [0161.679] IsAppThemed () returned 0x1 [0161.679] GetThemeAppProperties () returned 0x3 [0161.679] GetThemeAppProperties () returned 0x3 [0161.679] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0161.679] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0161.679] GetCurrentObject (hdc=0x5b01084a, type=0x1) returned 0x1b00017 [0161.679] GetCurrentObject (hdc=0x5b01084a, type=0x2) returned 0x1900010 [0161.679] GetCurrentObject (hdc=0x5b01084a, type=0x7) returned 0x490500d1 [0161.679] GetCurrentObject (hdc=0x5b01084a, type=0x6) returned 0x18a002e [0161.679] SaveDC (hdc=0x5b01084a) returned 1 [0161.680] GetTextAlign (hdc=0x5b01084a) returned 0x0 [0161.680] GetTextColor (hdc=0x5b01084a) returned 0x0 [0161.680] GetCurrentObject (hdc=0x5b01084a, type=0x6) returned 0x18a002e [0161.680] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0161.680] SelectObject (hdc=0x5b01084a, h=0x220a081a) returned 0x18a002e [0161.680] GetBkMode (hdc=0x5b01084a) returned 2 [0161.680] SetBkMode (hdc=0x5b01084a, mode=1) returned 2 [0161.680] DrawTextExW (in: hdc=0x5b01084a, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2673508 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0161.680] DrawTextExW (in: hdc=0x5b01084a, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2673508 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0161.680] RestoreDC (hdc=0x5b01084a, nSavedDC=-1) returned 1 [0161.680] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5b01084a) returned 0x0 [0161.680] GetFocus () returned 0x201d0 [0161.680] IsAppThemed () returned 0x1 [0161.680] GetThemeAppProperties () returned 0x3 [0161.680] GetThemeAppProperties () returned 0x3 [0161.680] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0161.680] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x5b01084a, x1=0, y1=0, rop=0xcc0020) returned 1 [0161.681] GdipReleaseDC (graphics=0x504fbc8, hdc=0x5b01084a) returned 0x0 [0161.681] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0161.681] SelectObject (hdc=0x5b01084a, h=0x185000f) returned 0x490500d1 [0161.681] DeleteDC (hdc=0x5b01084a) returned 1 [0161.681] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0161.681] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0161.681] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2673604, cPoints=0x1 | out: lpPoints=0x2673604) returned 42533703 [0161.681] WindowFromPoint (Point=0x3c3) returned 0x201d0 [0161.681] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703c3) returned 0x1 [0161.681] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0161.681] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0161.681] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0161.681] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.681] GetSystemMetrics (nIndex=42) returned 0 [0161.681] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0161.681] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0161.681] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0161.681] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.681] GetCapture () returned 0x201d0 [0161.681] ReleaseCapture () returned 1 [0161.681] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0161.682] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0161.682] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703c3) returned 0x1 [0161.682] IsWindowUnicode (hWnd=0x201d0) returned 1 [0161.682] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0161.682] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703c3) returned 0x1 [0161.682] SetCursor (hCursor=0x10003) returned 0x10003 [0161.682] TranslateMessage (lpMsg=0x1ef250) returned 0 [0161.682] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0161.682] GetKeyState (nVirtKey=1) returned 0 [0161.682] GetKeyState (nVirtKey=2) returned 0 [0161.682] GetKeyState (nVirtKey=4) returned 0 [0161.682] GetKeyState (nVirtKey=5) returned 0 [0161.682] GetKeyState (nVirtKey=6) returned 0 [0161.682] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0161.682] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0161.682] WaitMessage () returned 1 [0164.712] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0164.712] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403dc) returned 0x1 [0164.712] IsWindowUnicode (hWnd=0x201d0) returned 1 [0164.712] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0164.712] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403dc) returned 0x1 [0164.712] SetCursor (hCursor=0x10003) returned 0x10003 [0164.712] TranslateMessage (lpMsg=0x1ef250) returned 0 [0164.712] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0164.712] GetKeyState (nVirtKey=1) returned 0 [0164.712] GetKeyState (nVirtKey=2) returned 0 [0164.712] GetKeyState (nVirtKey=4) returned 0 [0164.712] GetKeyState (nVirtKey=5) returned 0 [0164.712] GetKeyState (nVirtKey=6) returned 0 [0164.712] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0164.712] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0164.713] WaitMessage () returned 1 [0164.771] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0164.771] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403dc) returned 0x1 [0164.771] IsWindowUnicode (hWnd=0x201d0) returned 1 [0164.771] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0164.771] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403dc) returned 0x1 [0164.771] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0164.771] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e30297) returned 0x0 [0164.772] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0164.772] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0164.772] SetCursor (hCursor=0x10003) returned 0x10003 [0164.772] TranslateMessage (lpMsg=0x1ef250) returned 0 [0164.772] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0164.772] GetKeyState (nVirtKey=1) returned -127 [0164.772] GetKeyState (nVirtKey=2) returned 0 [0164.772] GetKeyState (nVirtKey=4) returned 0 [0164.772] GetKeyState (nVirtKey=5) returned 0 [0164.772] GetKeyState (nVirtKey=6) returned 0 [0164.772] IsWindowVisible (hWnd=0x201d0) returned 1 [0164.772] IsWindowEnabled (hWnd=0x201d0) returned 1 [0164.772] SetFocus (hWnd=0x201d0) returned 0x201d0 [0164.772] GetFocus () returned 0x201d0 [0164.772] GetFocus () returned 0x201d0 [0164.772] GetFocus () returned 0x201d0 [0164.772] GetKeyState (nVirtKey=1) returned -127 [0164.772] GetKeyState (nVirtKey=2) returned 0 [0164.772] GetKeyState (nVirtKey=4) returned 0 [0164.772] GetKeyState (nVirtKey=5) returned 0 [0164.772] GetKeyState (nVirtKey=6) returned 0 [0164.772] GetCapture () returned 0x0 [0164.773] SetCapture (hWnd=0x201d0) returned 0x0 [0164.773] GetKeyState (nVirtKey=1) returned -127 [0164.773] GetKeyState (nVirtKey=2) returned 0 [0164.773] GetKeyState (nVirtKey=4) returned 0 [0164.773] GetKeyState (nVirtKey=5) returned 0 [0164.773] GetKeyState (nVirtKey=6) returned 0 [0164.773] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0164.773] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0164.773] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0164.773] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0164.773] TranslateMessage (lpMsg=0x1ef250) returned 0 [0164.773] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0164.773] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0164.773] IsWindowUnicode (hWnd=0x201d0) returned 1 [0164.773] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0164.773] TranslateMessage (lpMsg=0x1ef250) returned 0 [0164.773] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0164.773] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2673728, cPoints=0x1 | out: lpPoints=0x2673728) returned 42533703 [0164.773] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0164.773] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0164.773] UpdateWindow (hWnd=0x201d0) returned 1 [0164.773] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0164.773] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0164.773] CreateCompatibleDC (hdc=0x160107c7) returned 0x31010810 [0164.773] SelectObject (hdc=0x31010810, h=0x490500d1) returned 0x185000f [0164.773] GdipCreateFromHDC (hdc=0x31010810, graphics=0x1eea5c) returned 0x0 [0164.774] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0164.774] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0164.774] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0164.774] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0164.774] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0164.774] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0164.774] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0164.774] LocalFree (hMem=0x416cb8) returned 0x0 [0164.774] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0164.774] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0164.774] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0164.774] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0164.774] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0164.774] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd310dbd) returned 0x0 [0164.774] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0164.774] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0164.774] GetCurrentObject (hdc=0x31010810, type=0x1) returned 0x1b00017 [0164.774] GetCurrentObject (hdc=0x31010810, type=0x2) returned 0x1900010 [0164.774] GetCurrentObject (hdc=0x31010810, type=0x7) returned 0x490500d1 [0164.774] GetCurrentObject (hdc=0x31010810, type=0x6) returned 0x18a002e [0164.774] SaveDC (hdc=0x31010810) returned 1 [0164.774] GetNearestColor (hdc=0x31010810, color=0xf5f5f5) returned 0xf5f5f5 [0164.775] GetNearestColor (hdc=0x31010810, color=0x515151) returned 0x515151 [0164.775] GetNearestColor (hdc=0x31010810, color=0x0) returned 0x0 [0164.775] GetNearestColor (hdc=0x31010810, color=0x515151) returned 0x515151 [0164.775] GetNearestColor (hdc=0x31010810, color=0x0) returned 0x0 [0164.775] GetNearestColor (hdc=0x31010810, color=0xfafafa) returned 0xfafafa [0164.775] GetNearestColor (hdc=0x31010810, color=0xe0e0e0) returned 0xe0e0e0 [0164.775] GetNearestColor (hdc=0x31010810, color=0xdcdcdc) returned 0xdcdcdc [0164.775] GetNearestColor (hdc=0x31010810, color=0x0) returned 0x0 [0164.775] RestoreDC (hdc=0x31010810, nSavedDC=-1) returned 1 [0164.775] GdipReleaseDC (graphics=0x504fbc8, hdc=0x31010810) returned 0x0 [0164.775] IsAppThemed () returned 0x1 [0164.775] GetThemeAppProperties () returned 0x3 [0164.775] GetThemeAppProperties () returned 0x3 [0164.775] IsAppThemed () returned 0x1 [0164.775] GetThemeAppProperties () returned 0x3 [0164.775] GetThemeAppProperties () returned 0x3 [0164.775] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2673e2c | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0164.775] IsAppThemed () returned 0x1 [0164.775] GetThemeAppProperties () returned 0x3 [0164.775] GetThemeAppProperties () returned 0x3 [0164.775] IsAppThemed () returned 0x1 [0164.775] GetThemeAppProperties () returned 0x3 [0164.775] GetThemeAppProperties () returned 0x3 [0164.776] IsAppThemed () returned 0x1 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] IsAppThemed () returned 0x1 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] IsThemePartDefined () returned 0x1 [0164.776] IsAppThemed () returned 0x1 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0164.776] IsAppThemed () returned 0x1 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] IsAppThemed () returned 0x1 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] IsThemePartDefined () returned 0x1 [0164.776] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0164.776] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0164.776] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0164.776] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0164.776] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0164.776] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0164.776] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0164.776] LocalFree (hMem=0x416cb8) returned 0x0 [0164.776] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0164.776] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0164.776] LocalFree (hMem=0x416cb8) returned 0x0 [0164.776] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0164.776] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0164.776] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0164.777] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0164.777] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0164.777] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0164.777] GetCurrentObject (hdc=0x31010810, type=0x1) returned 0x1b00017 [0164.777] GetCurrentObject (hdc=0x31010810, type=0x2) returned 0x1900010 [0164.777] GetCurrentObject (hdc=0x31010810, type=0x7) returned 0x490500d1 [0164.777] GetCurrentObject (hdc=0x31010810, type=0x6) returned 0x18a002e [0164.777] SaveDC (hdc=0x31010810) returned 1 [0164.777] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2e040813 [0164.777] GetClipRgn (hdc=0x31010810, hrgn=0x2e040813) returned 0 [0164.777] SelectClipRgn (hdc=0x31010810, hrgn=0x12040246) returned 2 [0164.777] DeleteObject (ho=0x2e040813) returned 1 [0164.777] DeleteObject (ho=0x12040246) returned 1 [0164.777] OffsetViewportOrgEx (in: hdc=0x31010810, x=0, y=0, lppt=0x26744dc | out: lppt=0x26744dc) returned 1 [0164.777] DrawThemeParentBackground () returned 0x0 [0164.777] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0164.777] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0164.777] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0164.777] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0164.777] GetSystemMetrics (nIndex=42) returned 0 [0164.777] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0164.777] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0164.778] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0164.778] GetCurrentObject (hdc=0x31010810, type=0x1) returned 0x1b00017 [0164.778] GetCurrentObject (hdc=0x31010810, type=0x2) returned 0x1900010 [0164.778] GetCurrentObject (hdc=0x31010810, type=0x7) returned 0x490500d1 [0164.778] GetCurrentObject (hdc=0x31010810, type=0x6) returned 0x18a002e [0164.778] SaveDC (hdc=0x31010810) returned 2 [0164.778] GetNearestColor (hdc=0x31010810, color=0xf5f5f5) returned 0xf5f5f5 [0164.778] CreateSolidBrush (color=0xf5f5f5) returned 0x8c100244 [0164.778] FillRect (hDC=0x31010810, lprc=0x1ee2d0, hbr=0x8c100244) returned 1 [0164.778] DeleteObject (ho=0x8c100244) returned 1 [0164.778] RestoreDC (hdc=0x31010810, nSavedDC=-1) returned 1 [0164.778] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0164.778] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0164.778] GetSystemMetrics (nIndex=42) returned 0 [0164.778] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0164.778] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0164.778] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0164.778] GetCurrentObject (hdc=0x31010810, type=0x1) returned 0x1b00017 [0164.778] GetCurrentObject (hdc=0x31010810, type=0x2) returned 0x1900010 [0164.778] GetCurrentObject (hdc=0x31010810, type=0x7) returned 0x490500d1 [0164.778] GetCurrentObject (hdc=0x31010810, type=0x6) returned 0x18a002e [0164.778] SaveDC (hdc=0x31010810) returned 2 [0164.779] GetNearestColor (hdc=0x31010810, color=0xf5f5f5) returned 0xf5f5f5 [0164.779] CreateSolidBrush (color=0xf5f5f5) returned 0x8d100244 [0164.779] FillRect (hDC=0x31010810, lprc=0x1ee270, hbr=0x8d100244) returned 1 [0164.779] DeleteObject (ho=0x8d100244) returned 1 [0164.779] RestoreDC (hdc=0x31010810, nSavedDC=-1) returned 1 [0164.779] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0164.779] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0164.779] GetSystemMetrics (nIndex=42) returned 0 [0164.779] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0164.779] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0164.779] RestoreDC (hdc=0x31010810, nSavedDC=-1) returned 1 [0164.779] GdipReleaseDC (graphics=0x504fbc8, hdc=0x31010810) returned 0x0 [0164.779] IsAppThemed () returned 0x1 [0164.779] GetThemeAppProperties () returned 0x3 [0164.779] GetThemeAppProperties () returned 0x3 [0164.779] IsAppThemed () returned 0x1 [0164.779] GetThemeAppProperties () returned 0x3 [0164.779] GetThemeAppProperties () returned 0x3 [0164.780] IsThemePartDefined () returned 0x1 [0164.780] GdipCreateRegion (region=0x1ee764) returned 0x0 [0164.780] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0164.780] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0164.780] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0164.780] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0164.780] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0164.780] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0164.780] LocalFree (hMem=0x416cb8) returned 0x0 [0164.780] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0164.780] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0164.780] LocalFree (hMem=0x416cb8) returned 0x0 [0164.780] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0164.780] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0164.780] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0164.780] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0164.780] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0164.780] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0164.780] GetCurrentObject (hdc=0x31010810, type=0x1) returned 0x1b00017 [0164.780] GetCurrentObject (hdc=0x31010810, type=0x2) returned 0x1900010 [0164.780] GetCurrentObject (hdc=0x31010810, type=0x7) returned 0x490500d1 [0164.780] GetCurrentObject (hdc=0x31010810, type=0x6) returned 0x18a002e [0164.780] SaveDC (hdc=0x31010810) returned 1 [0164.780] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x13040246 [0164.780] GetClipRgn (hdc=0x31010810, hrgn=0x13040246) returned 0 [0164.781] SelectClipRgn (hdc=0x31010810, hrgn=0x30040813) returned 2 [0164.781] DeleteObject (ho=0x13040246) returned 1 [0164.781] DeleteObject (ho=0x30040813) returned 1 [0164.781] OffsetViewportOrgEx (in: hdc=0x31010810, x=0, y=0, lppt=0x2674d1c | out: lppt=0x2674d1c) returned 1 [0164.781] IsAppThemed () returned 0x1 [0164.781] GetThemeAppProperties () returned 0x3 [0164.781] GetThemeAppProperties () returned 0x3 [0164.781] DrawThemeBackground () returned 0x0 [0164.781] RestoreDC (hdc=0x31010810, nSavedDC=-1) returned 1 [0164.781] GdipReleaseDC (graphics=0x504fbc8, hdc=0x31010810) returned 0x0 [0164.781] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0164.781] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0164.781] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0164.781] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0164.781] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0164.781] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0164.781] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0164.781] LocalFree (hMem=0x416cb8) returned 0x0 [0164.781] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0164.781] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0164.781] LocalFree (hMem=0x416cb8) returned 0x0 [0164.781] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0164.781] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0164.781] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0164.781] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0164.782] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0164.782] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0164.782] GetCurrentObject (hdc=0x31010810, type=0x1) returned 0x1b00017 [0164.782] GetCurrentObject (hdc=0x31010810, type=0x2) returned 0x1900010 [0164.782] GetCurrentObject (hdc=0x31010810, type=0x7) returned 0x490500d1 [0164.782] GetCurrentObject (hdc=0x31010810, type=0x6) returned 0x18a002e [0164.782] SaveDC (hdc=0x31010810) returned 1 [0164.782] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x31040813 [0164.782] GetClipRgn (hdc=0x31010810, hrgn=0x31040813) returned 0 [0164.782] SelectClipRgn (hdc=0x31010810, hrgn=0x14040246) returned 2 [0164.782] DeleteObject (ho=0x31040813) returned 1 [0164.782] DeleteObject (ho=0x14040246) returned 1 [0164.782] OffsetViewportOrgEx (in: hdc=0x31010810, x=0, y=0, lppt=0x2674ff0 | out: lppt=0x2674ff0) returned 1 [0164.782] IsAppThemed () returned 0x1 [0164.782] GetThemeAppProperties () returned 0x3 [0164.782] GetThemeAppProperties () returned 0x3 [0164.782] GetThemeBackgroundContentRect () returned 0x0 [0164.782] RestoreDC (hdc=0x31010810, nSavedDC=-1) returned 1 [0164.782] GdipReleaseDC (graphics=0x504fbc8, hdc=0x31010810) returned 0x0 [0164.782] IsAppThemed () returned 0x1 [0164.782] GetThemeAppProperties () returned 0x3 [0164.782] GetThemeAppProperties () returned 0x3 [0164.782] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0164.782] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0164.782] GetCurrentObject (hdc=0x31010810, type=0x1) returned 0x1b00017 [0164.783] GetCurrentObject (hdc=0x31010810, type=0x2) returned 0x1900010 [0164.783] GetCurrentObject (hdc=0x31010810, type=0x7) returned 0x490500d1 [0164.783] GetCurrentObject (hdc=0x31010810, type=0x6) returned 0x18a002e [0164.783] SaveDC (hdc=0x31010810) returned 1 [0164.783] GetTextAlign (hdc=0x31010810) returned 0x0 [0164.783] GetTextColor (hdc=0x31010810) returned 0x0 [0164.783] GetCurrentObject (hdc=0x31010810, type=0x6) returned 0x18a002e [0164.783] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0164.783] SelectObject (hdc=0x31010810, h=0x220a081a) returned 0x18a002e [0164.783] GetBkMode (hdc=0x31010810) returned 2 [0164.783] SetBkMode (hdc=0x31010810, mode=1) returned 2 [0164.783] DrawTextExW (in: hdc=0x31010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2675384 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0164.783] DrawTextExW (in: hdc=0x31010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2675384 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0164.783] RestoreDC (hdc=0x31010810, nSavedDC=-1) returned 1 [0164.783] GdipReleaseDC (graphics=0x504fbc8, hdc=0x31010810) returned 0x0 [0164.783] GetFocus () returned 0x201d0 [0164.783] IsAppThemed () returned 0x1 [0164.784] GetThemeAppProperties () returned 0x3 [0164.784] GetThemeAppProperties () returned 0x3 [0164.784] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0164.784] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x31010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0164.784] GdipReleaseDC (graphics=0x504fbc8, hdc=0x31010810) returned 0x0 [0164.784] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0164.784] SelectObject (hdc=0x31010810, h=0x185000f) returned 0x490500d1 [0164.784] DeleteDC (hdc=0x31010810) returned 1 [0164.784] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0164.784] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0164.784] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2675480, cPoints=0x1 | out: lpPoints=0x2675480) returned 42533703 [0164.784] WindowFromPoint (Point=0x3dc) returned 0x201d0 [0164.784] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403dc) returned 0x1 [0164.784] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0164.784] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0164.784] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0164.784] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.784] GetSystemMetrics (nIndex=42) returned 0 [0164.784] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0164.784] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0164.784] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0164.784] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.784] GetCapture () returned 0x201d0 [0164.785] ReleaseCapture () returned 1 [0164.785] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0164.785] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0164.785] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403dc) returned 0x1 [0164.785] IsWindowUnicode (hWnd=0x201d0) returned 1 [0164.785] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0164.785] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29403dc) returned 0x1 [0164.785] SetCursor (hCursor=0x10003) returned 0x10003 [0164.785] TranslateMessage (lpMsg=0x1ef250) returned 0 [0164.785] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0164.785] GetKeyState (nVirtKey=1) returned 1 [0164.785] GetKeyState (nVirtKey=2) returned 0 [0164.785] GetKeyState (nVirtKey=4) returned 0 [0164.785] GetKeyState (nVirtKey=5) returned 0 [0164.785] GetKeyState (nVirtKey=6) returned 0 [0164.785] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0164.785] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0164.785] WaitMessage () returned 1 [0167.829] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0167.829] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ba) returned 0x1 [0167.830] IsWindowUnicode (hWnd=0x201d0) returned 1 [0167.830] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0167.830] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ba) returned 0x1 [0167.830] SetCursor (hCursor=0x10003) returned 0x10003 [0167.830] TranslateMessage (lpMsg=0x1ef250) returned 0 [0167.830] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0167.830] GetKeyState (nVirtKey=1) returned 1 [0167.830] GetKeyState (nVirtKey=2) returned 0 [0167.830] GetKeyState (nVirtKey=4) returned 0 [0167.830] GetKeyState (nVirtKey=5) returned 0 [0167.830] GetKeyState (nVirtKey=6) returned 0 [0167.830] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0167.830] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0167.830] WaitMessage () returned 1 [0167.907] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0167.907] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ba) returned 0x1 [0167.907] IsWindowUnicode (hWnd=0x201d0) returned 1 [0167.907] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0167.907] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ba) returned 0x1 [0167.908] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0167.908] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1df0275) returned 0x0 [0167.908] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0167.908] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0167.908] SetCursor (hCursor=0x10003) returned 0x10003 [0167.908] TranslateMessage (lpMsg=0x1ef250) returned 0 [0167.908] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0167.908] GetKeyState (nVirtKey=1) returned -128 [0167.908] GetKeyState (nVirtKey=2) returned 0 [0167.908] GetKeyState (nVirtKey=4) returned 0 [0167.908] GetKeyState (nVirtKey=5) returned 0 [0167.908] GetKeyState (nVirtKey=6) returned 0 [0167.908] IsWindowVisible (hWnd=0x201d0) returned 1 [0167.908] IsWindowEnabled (hWnd=0x201d0) returned 1 [0167.908] SetFocus (hWnd=0x201d0) returned 0x201d0 [0167.908] GetFocus () returned 0x201d0 [0167.908] GetFocus () returned 0x201d0 [0167.908] GetFocus () returned 0x201d0 [0167.908] GetKeyState (nVirtKey=1) returned -128 [0167.908] GetKeyState (nVirtKey=2) returned 0 [0167.909] GetKeyState (nVirtKey=4) returned 0 [0167.909] GetKeyState (nVirtKey=5) returned 0 [0167.909] GetKeyState (nVirtKey=6) returned 0 [0167.909] GetCapture () returned 0x0 [0167.909] SetCapture (hWnd=0x201d0) returned 0x0 [0167.909] GetKeyState (nVirtKey=1) returned -128 [0167.909] GetKeyState (nVirtKey=2) returned 0 [0167.909] GetKeyState (nVirtKey=4) returned 0 [0167.909] GetKeyState (nVirtKey=5) returned 0 [0167.909] GetKeyState (nVirtKey=6) returned 0 [0167.909] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0167.909] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0167.909] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0167.909] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0167.909] TranslateMessage (lpMsg=0x1ef250) returned 0 [0167.909] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0167.909] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0167.909] IsWindowUnicode (hWnd=0x201d0) returned 1 [0167.909] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0167.909] TranslateMessage (lpMsg=0x1ef250) returned 0 [0167.909] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0167.909] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26755a4, cPoints=0x1 | out: lpPoints=0x26755a4) returned 42533703 [0167.909] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0167.909] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0167.909] UpdateWindow (hWnd=0x201d0) returned 1 [0167.909] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0167.909] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0167.909] CreateCompatibleDC (hdc=0x160107c7) returned 0x32010810 [0167.909] SelectObject (hdc=0x32010810, h=0x490500d1) returned 0x185000f [0167.910] GdipCreateFromHDC (hdc=0x32010810, graphics=0x1eea5c) returned 0x0 [0167.910] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0167.910] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0167.910] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0167.910] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0167.910] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0167.910] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0167.910] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0167.910] LocalFree (hMem=0x416cb8) returned 0x0 [0167.910] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0167.910] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0167.910] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0167.910] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0167.910] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0167.910] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd2f0dbd) returned 0x0 [0167.910] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0167.910] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0167.910] GetCurrentObject (hdc=0x32010810, type=0x1) returned 0x1b00017 [0167.910] GetCurrentObject (hdc=0x32010810, type=0x2) returned 0x1900010 [0167.910] GetCurrentObject (hdc=0x32010810, type=0x7) returned 0x490500d1 [0167.911] GetCurrentObject (hdc=0x32010810, type=0x6) returned 0x18a002e [0167.911] SaveDC (hdc=0x32010810) returned 1 [0167.911] GetNearestColor (hdc=0x32010810, color=0xf5f5f5) returned 0xf5f5f5 [0167.911] GetNearestColor (hdc=0x32010810, color=0x515151) returned 0x515151 [0167.911] GetNearestColor (hdc=0x32010810, color=0x0) returned 0x0 [0167.911] GetNearestColor (hdc=0x32010810, color=0x515151) returned 0x515151 [0167.911] GetNearestColor (hdc=0x32010810, color=0x0) returned 0x0 [0167.911] GetNearestColor (hdc=0x32010810, color=0xfafafa) returned 0xfafafa [0167.911] GetNearestColor (hdc=0x32010810, color=0xe0e0e0) returned 0xe0e0e0 [0167.911] GetNearestColor (hdc=0x32010810, color=0xdcdcdc) returned 0xdcdcdc [0167.911] GetNearestColor (hdc=0x32010810, color=0x0) returned 0x0 [0167.911] RestoreDC (hdc=0x32010810, nSavedDC=-1) returned 1 [0167.911] GdipReleaseDC (graphics=0x504fbc8, hdc=0x32010810) returned 0x0 [0167.911] IsAppThemed () returned 0x1 [0167.911] GetThemeAppProperties () returned 0x3 [0167.911] GetThemeAppProperties () returned 0x3 [0167.911] IsAppThemed () returned 0x1 [0167.911] GetThemeAppProperties () returned 0x3 [0167.911] GetThemeAppProperties () returned 0x3 [0167.911] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2675ca8 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0167.912] IsAppThemed () returned 0x1 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] IsAppThemed () returned 0x1 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] IsAppThemed () returned 0x1 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] IsAppThemed () returned 0x1 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] IsThemePartDefined () returned 0x1 [0167.912] IsAppThemed () returned 0x1 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0167.912] IsAppThemed () returned 0x1 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] IsAppThemed () returned 0x1 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] GetThemeAppProperties () returned 0x3 [0167.912] IsThemePartDefined () returned 0x1 [0167.912] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0167.912] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0167.912] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0167.912] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0167.912] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0167.912] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0167.912] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0167.912] LocalFree (hMem=0x416cb8) returned 0x0 [0167.913] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0167.913] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0167.913] LocalFree (hMem=0x416cb8) returned 0x0 [0167.913] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0167.913] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0167.913] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0167.913] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0167.913] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0167.913] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0167.913] GetCurrentObject (hdc=0x32010810, type=0x1) returned 0x1b00017 [0167.913] GetCurrentObject (hdc=0x32010810, type=0x2) returned 0x1900010 [0167.913] GetCurrentObject (hdc=0x32010810, type=0x7) returned 0x490500d1 [0167.913] GetCurrentObject (hdc=0x32010810, type=0x6) returned 0x18a002e [0167.913] SaveDC (hdc=0x32010810) returned 1 [0167.913] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x15040246 [0167.913] GetClipRgn (hdc=0x32010810, hrgn=0x15040246) returned 0 [0167.913] SelectClipRgn (hdc=0x32010810, hrgn=0x35040813) returned 2 [0167.913] DeleteObject (ho=0x15040246) returned 1 [0167.913] DeleteObject (ho=0x35040813) returned 1 [0167.913] OffsetViewportOrgEx (in: hdc=0x32010810, x=0, y=0, lppt=0x2676358 | out: lppt=0x2676358) returned 1 [0167.913] DrawThemeParentBackground () returned 0x0 [0167.913] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0167.914] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0167.914] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0167.914] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0167.914] GetSystemMetrics (nIndex=42) returned 0 [0167.914] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0167.914] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0167.914] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0167.914] GetCurrentObject (hdc=0x32010810, type=0x1) returned 0x1b00017 [0167.914] GetCurrentObject (hdc=0x32010810, type=0x2) returned 0x1900010 [0167.914] GetCurrentObject (hdc=0x32010810, type=0x7) returned 0x490500d1 [0167.914] GetCurrentObject (hdc=0x32010810, type=0x6) returned 0x18a002e [0167.914] SaveDC (hdc=0x32010810) returned 2 [0167.914] GetNearestColor (hdc=0x32010810, color=0xf5f5f5) returned 0xf5f5f5 [0167.914] CreateSolidBrush (color=0xf5f5f5) returned 0x8e100244 [0167.914] FillRect (hDC=0x32010810, lprc=0x1ee2d0, hbr=0x8e100244) returned 1 [0167.914] DeleteObject (ho=0x8e100244) returned 1 [0167.914] RestoreDC (hdc=0x32010810, nSavedDC=-1) returned 1 [0167.914] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0167.914] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0167.914] GetSystemMetrics (nIndex=42) returned 0 [0167.914] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0167.914] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0167.915] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0167.915] GetCurrentObject (hdc=0x32010810, type=0x1) returned 0x1b00017 [0167.915] GetCurrentObject (hdc=0x32010810, type=0x2) returned 0x1900010 [0167.915] GetCurrentObject (hdc=0x32010810, type=0x7) returned 0x490500d1 [0167.915] GetCurrentObject (hdc=0x32010810, type=0x6) returned 0x18a002e [0167.915] SaveDC (hdc=0x32010810) returned 2 [0167.915] GetNearestColor (hdc=0x32010810, color=0xf5f5f5) returned 0xf5f5f5 [0167.915] CreateSolidBrush (color=0xf5f5f5) returned 0x8f100244 [0167.915] FillRect (hDC=0x32010810, lprc=0x1ee270, hbr=0x8f100244) returned 1 [0167.915] DeleteObject (ho=0x8f100244) returned 1 [0167.915] RestoreDC (hdc=0x32010810, nSavedDC=-1) returned 1 [0167.915] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0167.915] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0167.915] GetSystemMetrics (nIndex=42) returned 0 [0167.915] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0167.915] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0167.915] RestoreDC (hdc=0x32010810, nSavedDC=-1) returned 1 [0167.915] GdipReleaseDC (graphics=0x504fbc8, hdc=0x32010810) returned 0x0 [0167.915] IsAppThemed () returned 0x1 [0167.915] GetThemeAppProperties () returned 0x3 [0167.915] GetThemeAppProperties () returned 0x3 [0167.915] IsAppThemed () returned 0x1 [0167.915] GetThemeAppProperties () returned 0x3 [0167.915] GetThemeAppProperties () returned 0x3 [0167.916] IsThemePartDefined () returned 0x1 [0167.916] GdipCreateRegion (region=0x1ee764) returned 0x0 [0167.916] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0167.916] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0167.916] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0167.916] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0167.916] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0167.916] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0167.916] LocalFree (hMem=0x416cb8) returned 0x0 [0167.916] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0167.916] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0167.916] LocalFree (hMem=0x416cb8) returned 0x0 [0167.916] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0167.916] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0167.916] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0167.916] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0167.916] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0167.916] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0167.916] GetCurrentObject (hdc=0x32010810, type=0x1) returned 0x1b00017 [0167.916] GetCurrentObject (hdc=0x32010810, type=0x2) returned 0x1900010 [0167.916] GetCurrentObject (hdc=0x32010810, type=0x7) returned 0x490500d1 [0167.916] GetCurrentObject (hdc=0x32010810, type=0x6) returned 0x18a002e [0167.916] SaveDC (hdc=0x32010810) returned 1 [0167.916] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x36040813 [0167.917] GetClipRgn (hdc=0x32010810, hrgn=0x36040813) returned 0 [0167.917] SelectClipRgn (hdc=0x32010810, hrgn=0x17040246) returned 2 [0167.917] DeleteObject (ho=0x36040813) returned 1 [0167.917] DeleteObject (ho=0x17040246) returned 1 [0167.917] OffsetViewportOrgEx (in: hdc=0x32010810, x=0, y=0, lppt=0x2676b98 | out: lppt=0x2676b98) returned 1 [0167.917] IsAppThemed () returned 0x1 [0167.917] GetThemeAppProperties () returned 0x3 [0167.917] GetThemeAppProperties () returned 0x3 [0167.917] DrawThemeBackground () returned 0x0 [0167.917] RestoreDC (hdc=0x32010810, nSavedDC=-1) returned 1 [0167.917] GdipReleaseDC (graphics=0x504fbc8, hdc=0x32010810) returned 0x0 [0167.917] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0167.917] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0167.917] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0167.917] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0167.917] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0167.917] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0167.917] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0167.917] LocalFree (hMem=0x416cb8) returned 0x0 [0167.917] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0167.917] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0167.917] LocalFree (hMem=0x416cb8) returned 0x0 [0167.917] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0167.918] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0167.918] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0167.918] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0167.918] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0167.918] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0167.918] GetCurrentObject (hdc=0x32010810, type=0x1) returned 0x1b00017 [0167.918] GetCurrentObject (hdc=0x32010810, type=0x2) returned 0x1900010 [0167.918] GetCurrentObject (hdc=0x32010810, type=0x7) returned 0x490500d1 [0167.918] GetCurrentObject (hdc=0x32010810, type=0x6) returned 0x18a002e [0167.918] SaveDC (hdc=0x32010810) returned 1 [0167.918] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x18040246 [0167.918] GetClipRgn (hdc=0x32010810, hrgn=0x18040246) returned 0 [0167.918] SelectClipRgn (hdc=0x32010810, hrgn=0x37040813) returned 2 [0167.918] DeleteObject (ho=0x18040246) returned 1 [0167.918] DeleteObject (ho=0x37040813) returned 1 [0167.918] OffsetViewportOrgEx (in: hdc=0x32010810, x=0, y=0, lppt=0x2676e6c | out: lppt=0x2676e6c) returned 1 [0167.918] IsAppThemed () returned 0x1 [0167.918] GetThemeAppProperties () returned 0x3 [0167.918] GetThemeAppProperties () returned 0x3 [0167.918] GetThemeBackgroundContentRect () returned 0x0 [0167.918] RestoreDC (hdc=0x32010810, nSavedDC=-1) returned 1 [0167.918] GdipReleaseDC (graphics=0x504fbc8, hdc=0x32010810) returned 0x0 [0167.918] IsAppThemed () returned 0x1 [0167.918] GetThemeAppProperties () returned 0x3 [0167.918] GetThemeAppProperties () returned 0x3 [0167.918] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0167.919] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0167.919] GetCurrentObject (hdc=0x32010810, type=0x1) returned 0x1b00017 [0167.919] GetCurrentObject (hdc=0x32010810, type=0x2) returned 0x1900010 [0167.919] GetCurrentObject (hdc=0x32010810, type=0x7) returned 0x490500d1 [0167.919] GetCurrentObject (hdc=0x32010810, type=0x6) returned 0x18a002e [0167.919] SaveDC (hdc=0x32010810) returned 1 [0167.919] GetTextAlign (hdc=0x32010810) returned 0x0 [0167.919] GetTextColor (hdc=0x32010810) returned 0x0 [0167.919] GetCurrentObject (hdc=0x32010810, type=0x6) returned 0x18a002e [0167.919] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0167.919] SelectObject (hdc=0x32010810, h=0x220a081a) returned 0x18a002e [0167.919] GetBkMode (hdc=0x32010810) returned 2 [0167.919] SetBkMode (hdc=0x32010810, mode=1) returned 2 [0167.919] DrawTextExW (in: hdc=0x32010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2677200 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0167.919] DrawTextExW (in: hdc=0x32010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2677200 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0167.920] RestoreDC (hdc=0x32010810, nSavedDC=-1) returned 1 [0167.920] GdipReleaseDC (graphics=0x504fbc8, hdc=0x32010810) returned 0x0 [0167.920] GetFocus () returned 0x201d0 [0167.920] IsAppThemed () returned 0x1 [0167.920] GetThemeAppProperties () returned 0x3 [0167.920] GetThemeAppProperties () returned 0x3 [0167.920] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0167.920] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x32010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.920] GdipReleaseDC (graphics=0x504fbc8, hdc=0x32010810) returned 0x0 [0167.920] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0167.920] SelectObject (hdc=0x32010810, h=0x185000f) returned 0x490500d1 [0167.920] DeleteDC (hdc=0x32010810) returned 1 [0167.920] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0167.920] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0167.920] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26772fc, cPoints=0x1 | out: lpPoints=0x26772fc) returned 42533703 [0167.920] WindowFromPoint (Point=0x3ba) returned 0x201d0 [0167.920] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ba) returned 0x1 [0167.920] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0167.920] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0167.921] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0167.921] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.921] GetSystemMetrics (nIndex=42) returned 0 [0167.921] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0167.921] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0167.921] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0167.921] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.921] GetCapture () returned 0x201d0 [0167.921] ReleaseCapture () returned 1 [0167.921] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0167.921] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0167.921] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ba) returned 0x1 [0167.921] IsWindowUnicode (hWnd=0x201d0) returned 1 [0167.921] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0167.921] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ba) returned 0x1 [0167.921] SetCursor (hCursor=0x10003) returned 0x10003 [0167.921] TranslateMessage (lpMsg=0x1ef250) returned 0 [0167.921] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0167.921] GetKeyState (nVirtKey=1) returned 0 [0167.921] GetKeyState (nVirtKey=2) returned 0 [0167.921] GetKeyState (nVirtKey=4) returned 0 [0167.921] GetKeyState (nVirtKey=5) returned 0 [0167.921] GetKeyState (nVirtKey=6) returned 0 [0167.921] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0167.921] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0167.921] WaitMessage () returned 1 [0170.952] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0170.953] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2920398) returned 0x1 [0170.953] IsWindowUnicode (hWnd=0x201d0) returned 1 [0170.953] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0170.953] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2920398) returned 0x1 [0170.953] SetCursor (hCursor=0x10003) returned 0x10003 [0170.953] TranslateMessage (lpMsg=0x1ef250) returned 0 [0170.953] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0170.953] GetKeyState (nVirtKey=1) returned 0 [0170.953] GetKeyState (nVirtKey=2) returned 0 [0170.953] GetKeyState (nVirtKey=4) returned 0 [0170.953] GetKeyState (nVirtKey=5) returned 0 [0170.953] GetKeyState (nVirtKey=6) returned 0 [0170.953] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0170.953] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0170.953] WaitMessage () returned 1 [0171.009] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0171.010] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2920398) returned 0x1 [0171.010] IsWindowUnicode (hWnd=0x201d0) returned 1 [0171.010] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0171.010] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2920398) returned 0x1 [0171.010] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0171.010] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e10253) returned 0x0 [0171.010] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0171.010] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0171.010] SetCursor (hCursor=0x10003) returned 0x10003 [0171.011] TranslateMessage (lpMsg=0x1ef250) returned 0 [0171.011] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0171.011] GetKeyState (nVirtKey=1) returned -127 [0171.011] GetKeyState (nVirtKey=2) returned 0 [0171.011] GetKeyState (nVirtKey=4) returned 0 [0171.011] GetKeyState (nVirtKey=5) returned 0 [0171.011] GetKeyState (nVirtKey=6) returned 0 [0171.011] IsWindowVisible (hWnd=0x201d0) returned 1 [0171.011] IsWindowEnabled (hWnd=0x201d0) returned 1 [0171.011] SetFocus (hWnd=0x201d0) returned 0x201d0 [0171.011] GetFocus () returned 0x201d0 [0171.011] GetFocus () returned 0x201d0 [0171.011] GetFocus () returned 0x201d0 [0171.011] GetKeyState (nVirtKey=1) returned -127 [0171.011] GetKeyState (nVirtKey=2) returned 0 [0171.011] GetKeyState (nVirtKey=4) returned 0 [0171.011] GetKeyState (nVirtKey=5) returned 0 [0171.011] GetKeyState (nVirtKey=6) returned 0 [0171.011] GetCapture () returned 0x0 [0171.011] SetCapture (hWnd=0x201d0) returned 0x0 [0171.011] GetKeyState (nVirtKey=1) returned -127 [0171.011] GetKeyState (nVirtKey=2) returned 0 [0171.011] GetKeyState (nVirtKey=4) returned 0 [0171.011] GetKeyState (nVirtKey=5) returned 0 [0171.011] GetKeyState (nVirtKey=6) returned 0 [0171.011] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0171.012] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0171.012] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0171.012] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0171.012] TranslateMessage (lpMsg=0x1ef250) returned 0 [0171.012] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0171.012] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0171.012] IsWindowUnicode (hWnd=0x201d0) returned 1 [0171.012] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0171.012] TranslateMessage (lpMsg=0x1ef250) returned 0 [0171.012] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0171.012] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2677420, cPoints=0x1 | out: lpPoints=0x2677420) returned 42533703 [0171.012] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0171.012] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0171.012] UpdateWindow (hWnd=0x201d0) returned 1 [0171.012] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0171.013] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0171.013] CreateCompatibleDC (hdc=0x160107c7) returned 0x33010810 [0171.013] SelectObject (hdc=0x33010810, h=0x490500d1) returned 0x185000f [0171.013] GdipCreateFromHDC (hdc=0x33010810, graphics=0x1eea5c) returned 0x0 [0171.013] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0171.013] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0171.013] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0171.013] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0171.013] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0171.013] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0171.013] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0171.013] LocalFree (hMem=0x416cb8) returned 0x0 [0171.014] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0171.014] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0171.014] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0171.014] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0171.014] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0171.014] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd2d0dbd) returned 0x0 [0171.014] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0171.014] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0171.014] GetCurrentObject (hdc=0x33010810, type=0x1) returned 0x1b00017 [0171.014] GetCurrentObject (hdc=0x33010810, type=0x2) returned 0x1900010 [0171.014] GetCurrentObject (hdc=0x33010810, type=0x7) returned 0x490500d1 [0171.014] GetCurrentObject (hdc=0x33010810, type=0x6) returned 0x18a002e [0171.014] SaveDC (hdc=0x33010810) returned 1 [0171.014] GetNearestColor (hdc=0x33010810, color=0xf5f5f5) returned 0xf5f5f5 [0171.014] GetNearestColor (hdc=0x33010810, color=0x515151) returned 0x515151 [0171.014] GetNearestColor (hdc=0x33010810, color=0x0) returned 0x0 [0171.014] GetNearestColor (hdc=0x33010810, color=0x515151) returned 0x515151 [0171.014] GetNearestColor (hdc=0x33010810, color=0x0) returned 0x0 [0171.014] GetNearestColor (hdc=0x33010810, color=0xfafafa) returned 0xfafafa [0171.014] GetNearestColor (hdc=0x33010810, color=0xe0e0e0) returned 0xe0e0e0 [0171.015] GetNearestColor (hdc=0x33010810, color=0xdcdcdc) returned 0xdcdcdc [0171.015] GetNearestColor (hdc=0x33010810, color=0x0) returned 0x0 [0171.015] RestoreDC (hdc=0x33010810, nSavedDC=-1) returned 1 [0171.015] GdipReleaseDC (graphics=0x504fbc8, hdc=0x33010810) returned 0x0 [0171.015] IsAppThemed () returned 0x1 [0171.015] GetThemeAppProperties () returned 0x3 [0171.015] GetThemeAppProperties () returned 0x3 [0171.015] IsAppThemed () returned 0x1 [0171.015] GetThemeAppProperties () returned 0x3 [0171.015] GetThemeAppProperties () returned 0x3 [0171.015] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2677b24 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0171.015] IsAppThemed () returned 0x1 [0171.015] GetThemeAppProperties () returned 0x3 [0171.015] GetThemeAppProperties () returned 0x3 [0171.015] IsAppThemed () returned 0x1 [0171.015] GetThemeAppProperties () returned 0x3 [0171.015] GetThemeAppProperties () returned 0x3 [0171.015] IsAppThemed () returned 0x1 [0171.015] GetThemeAppProperties () returned 0x3 [0171.015] GetThemeAppProperties () returned 0x3 [0171.015] IsAppThemed () returned 0x1 [0171.016] GetThemeAppProperties () returned 0x3 [0171.016] GetThemeAppProperties () returned 0x3 [0171.016] IsThemePartDefined () returned 0x1 [0171.016] IsAppThemed () returned 0x1 [0171.016] GetThemeAppProperties () returned 0x3 [0171.016] GetThemeAppProperties () returned 0x3 [0171.016] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0171.016] IsAppThemed () returned 0x1 [0171.016] GetThemeAppProperties () returned 0x3 [0171.016] GetThemeAppProperties () returned 0x3 [0171.016] IsAppThemed () returned 0x1 [0171.016] GetThemeAppProperties () returned 0x3 [0171.016] GetThemeAppProperties () returned 0x3 [0171.016] IsThemePartDefined () returned 0x1 [0171.016] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0171.016] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0171.016] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0171.016] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0171.016] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0171.016] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0171.016] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0171.016] LocalFree (hMem=0x416cb8) returned 0x0 [0171.016] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0171.016] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0171.016] LocalFree (hMem=0x416cb8) returned 0x0 [0171.016] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0171.016] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0171.016] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0171.016] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0171.017] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0171.017] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0171.017] GetCurrentObject (hdc=0x33010810, type=0x1) returned 0x1b00017 [0171.017] GetCurrentObject (hdc=0x33010810, type=0x2) returned 0x1900010 [0171.017] GetCurrentObject (hdc=0x33010810, type=0x7) returned 0x490500d1 [0171.017] GetCurrentObject (hdc=0x33010810, type=0x6) returned 0x18a002e [0171.017] SaveDC (hdc=0x33010810) returned 1 [0171.017] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x38040813 [0171.017] GetClipRgn (hdc=0x33010810, hrgn=0x38040813) returned 0 [0171.017] SelectClipRgn (hdc=0x33010810, hrgn=0x1c040246) returned 2 [0171.017] DeleteObject (ho=0x38040813) returned 1 [0171.017] DeleteObject (ho=0x1c040246) returned 1 [0171.017] OffsetViewportOrgEx (in: hdc=0x33010810, x=0, y=0, lppt=0x26781d4 | out: lppt=0x26781d4) returned 1 [0171.017] DrawThemeParentBackground () returned 0x0 [0171.017] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0171.017] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0171.017] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0171.017] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0171.017] GetSystemMetrics (nIndex=42) returned 0 [0171.017] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0171.017] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0171.018] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0171.018] GetCurrentObject (hdc=0x33010810, type=0x1) returned 0x1b00017 [0171.018] GetCurrentObject (hdc=0x33010810, type=0x2) returned 0x1900010 [0171.018] GetCurrentObject (hdc=0x33010810, type=0x7) returned 0x490500d1 [0171.018] GetCurrentObject (hdc=0x33010810, type=0x6) returned 0x18a002e [0171.018] SaveDC (hdc=0x33010810) returned 2 [0171.018] GetNearestColor (hdc=0x33010810, color=0xf5f5f5) returned 0xf5f5f5 [0171.018] CreateSolidBrush (color=0xf5f5f5) returned 0x90100244 [0171.018] FillRect (hDC=0x33010810, lprc=0x1ee2d0, hbr=0x90100244) returned 1 [0171.018] DeleteObject (ho=0x90100244) returned 1 [0171.018] RestoreDC (hdc=0x33010810, nSavedDC=-1) returned 1 [0171.018] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0171.018] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0171.018] GetSystemMetrics (nIndex=42) returned 0 [0171.018] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0171.018] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0171.019] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0171.019] GetCurrentObject (hdc=0x33010810, type=0x1) returned 0x1b00017 [0171.019] GetCurrentObject (hdc=0x33010810, type=0x2) returned 0x1900010 [0171.019] GetCurrentObject (hdc=0x33010810, type=0x7) returned 0x490500d1 [0171.019] GetCurrentObject (hdc=0x33010810, type=0x6) returned 0x18a002e [0171.019] SaveDC (hdc=0x33010810) returned 2 [0171.019] GetNearestColor (hdc=0x33010810, color=0xf5f5f5) returned 0xf5f5f5 [0171.019] CreateSolidBrush (color=0xf5f5f5) returned 0x91100244 [0171.019] FillRect (hDC=0x33010810, lprc=0x1ee270, hbr=0x91100244) returned 1 [0171.019] DeleteObject (ho=0x91100244) returned 1 [0171.019] RestoreDC (hdc=0x33010810, nSavedDC=-1) returned 1 [0171.019] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0171.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0171.019] GetSystemMetrics (nIndex=42) returned 0 [0171.019] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0171.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0171.019] RestoreDC (hdc=0x33010810, nSavedDC=-1) returned 1 [0171.019] GdipReleaseDC (graphics=0x504fbc8, hdc=0x33010810) returned 0x0 [0171.019] IsAppThemed () returned 0x1 [0171.019] GetThemeAppProperties () returned 0x3 [0171.019] GetThemeAppProperties () returned 0x3 [0171.019] IsAppThemed () returned 0x1 [0171.019] GetThemeAppProperties () returned 0x3 [0171.020] GetThemeAppProperties () returned 0x3 [0171.020] IsThemePartDefined () returned 0x1 [0171.020] GdipCreateRegion (region=0x1ee764) returned 0x0 [0171.020] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0171.020] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0171.020] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0171.020] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0171.020] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0171.020] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0171.020] LocalFree (hMem=0x416cb8) returned 0x0 [0171.020] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0171.020] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0171.020] LocalFree (hMem=0x416cb8) returned 0x0 [0171.020] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0171.020] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0171.020] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0171.020] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0171.020] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0171.020] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0171.020] GetCurrentObject (hdc=0x33010810, type=0x1) returned 0x1b00017 [0171.020] GetCurrentObject (hdc=0x33010810, type=0x2) returned 0x1900010 [0171.020] GetCurrentObject (hdc=0x33010810, type=0x7) returned 0x490500d1 [0171.020] GetCurrentObject (hdc=0x33010810, type=0x6) returned 0x18a002e [0171.020] SaveDC (hdc=0x33010810) returned 1 [0171.021] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1d040246 [0171.021] GetClipRgn (hdc=0x33010810, hrgn=0x1d040246) returned 0 [0171.021] SelectClipRgn (hdc=0x33010810, hrgn=0x3a040813) returned 2 [0171.021] DeleteObject (ho=0x1d040246) returned 1 [0171.021] DeleteObject (ho=0x3a040813) returned 1 [0171.021] OffsetViewportOrgEx (in: hdc=0x33010810, x=0, y=0, lppt=0x2678a14 | out: lppt=0x2678a14) returned 1 [0171.021] IsAppThemed () returned 0x1 [0171.021] GetThemeAppProperties () returned 0x3 [0171.021] GetThemeAppProperties () returned 0x3 [0171.021] DrawThemeBackground () returned 0x0 [0171.021] RestoreDC (hdc=0x33010810, nSavedDC=-1) returned 1 [0171.021] GdipReleaseDC (graphics=0x504fbc8, hdc=0x33010810) returned 0x0 [0171.021] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0171.021] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0171.021] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0171.021] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0171.021] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0171.021] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0171.021] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0171.022] LocalFree (hMem=0x416cb8) returned 0x0 [0171.022] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0171.022] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0171.022] LocalFree (hMem=0x416cb8) returned 0x0 [0171.022] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0171.022] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0171.022] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0171.022] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0171.022] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0171.022] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0171.022] GetCurrentObject (hdc=0x33010810, type=0x1) returned 0x1b00017 [0171.022] GetCurrentObject (hdc=0x33010810, type=0x2) returned 0x1900010 [0171.022] GetCurrentObject (hdc=0x33010810, type=0x7) returned 0x490500d1 [0171.022] GetCurrentObject (hdc=0x33010810, type=0x6) returned 0x18a002e [0171.022] SaveDC (hdc=0x33010810) returned 1 [0171.022] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b040813 [0171.022] GetClipRgn (hdc=0x33010810, hrgn=0x3b040813) returned 0 [0171.022] SelectClipRgn (hdc=0x33010810, hrgn=0x1e040246) returned 2 [0171.022] DeleteObject (ho=0x3b040813) returned 1 [0171.022] DeleteObject (ho=0x1e040246) returned 1 [0171.022] OffsetViewportOrgEx (in: hdc=0x33010810, x=0, y=0, lppt=0x2678ce8 | out: lppt=0x2678ce8) returned 1 [0171.022] IsAppThemed () returned 0x1 [0171.022] GetThemeAppProperties () returned 0x3 [0171.022] GetThemeAppProperties () returned 0x3 [0171.022] GetThemeBackgroundContentRect () returned 0x0 [0171.023] RestoreDC (hdc=0x33010810, nSavedDC=-1) returned 1 [0171.023] GdipReleaseDC (graphics=0x504fbc8, hdc=0x33010810) returned 0x0 [0171.023] IsAppThemed () returned 0x1 [0171.023] GetThemeAppProperties () returned 0x3 [0171.023] GetThemeAppProperties () returned 0x3 [0171.023] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0171.023] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0171.023] GetCurrentObject (hdc=0x33010810, type=0x1) returned 0x1b00017 [0171.023] GetCurrentObject (hdc=0x33010810, type=0x2) returned 0x1900010 [0171.023] GetCurrentObject (hdc=0x33010810, type=0x7) returned 0x490500d1 [0171.023] GetCurrentObject (hdc=0x33010810, type=0x6) returned 0x18a002e [0171.023] SaveDC (hdc=0x33010810) returned 1 [0171.023] GetTextAlign (hdc=0x33010810) returned 0x0 [0171.023] GetTextColor (hdc=0x33010810) returned 0x0 [0171.023] GetCurrentObject (hdc=0x33010810, type=0x6) returned 0x18a002e [0171.023] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0171.023] SelectObject (hdc=0x33010810, h=0x220a081a) returned 0x18a002e [0171.023] GetBkMode (hdc=0x33010810) returned 2 [0171.023] SetBkMode (hdc=0x33010810, mode=1) returned 2 [0171.023] DrawTextExW (in: hdc=0x33010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x267907c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0171.024] DrawTextExW (in: hdc=0x33010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x267907c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0171.024] RestoreDC (hdc=0x33010810, nSavedDC=-1) returned 1 [0171.024] GdipReleaseDC (graphics=0x504fbc8, hdc=0x33010810) returned 0x0 [0171.024] GetFocus () returned 0x201d0 [0171.024] IsAppThemed () returned 0x1 [0171.024] GetThemeAppProperties () returned 0x3 [0171.024] GetThemeAppProperties () returned 0x3 [0171.024] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0171.024] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x33010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0171.025] GdipReleaseDC (graphics=0x504fbc8, hdc=0x33010810) returned 0x0 [0171.025] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0171.025] SelectObject (hdc=0x33010810, h=0x185000f) returned 0x490500d1 [0171.025] DeleteDC (hdc=0x33010810) returned 1 [0171.025] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0171.025] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0171.025] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2679178, cPoints=0x1 | out: lpPoints=0x2679178) returned 42533703 [0171.025] WindowFromPoint (Point=0x398) returned 0x201d0 [0171.025] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2920398) returned 0x1 [0171.025] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0171.025] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0171.025] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0171.025] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.025] GetSystemMetrics (nIndex=42) returned 0 [0171.025] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0171.025] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0171.026] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0171.026] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.026] GetCapture () returned 0x201d0 [0171.026] ReleaseCapture () returned 1 [0171.026] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0171.026] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0171.026] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2920398) returned 0x1 [0171.026] IsWindowUnicode (hWnd=0x201d0) returned 1 [0171.026] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0171.026] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2920398) returned 0x1 [0171.026] SetCursor (hCursor=0x10003) returned 0x10003 [0171.026] TranslateMessage (lpMsg=0x1ef250) returned 0 [0171.026] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0171.026] GetKeyState (nVirtKey=1) returned 1 [0171.026] GetKeyState (nVirtKey=2) returned 0 [0171.026] GetKeyState (nVirtKey=4) returned 0 [0171.026] GetKeyState (nVirtKey=5) returned 0 [0171.026] GetKeyState (nVirtKey=6) returned 0 [0171.026] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0171.026] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0171.026] WaitMessage () returned 1 [0174.070] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0174.070] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203d0) returned 0x1 [0174.070] IsWindowUnicode (hWnd=0x201d0) returned 1 [0174.070] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0174.070] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203d0) returned 0x1 [0174.070] SetCursor (hCursor=0x10003) returned 0x10003 [0174.070] TranslateMessage (lpMsg=0x1ef250) returned 0 [0174.070] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0174.070] GetKeyState (nVirtKey=1) returned 1 [0174.070] GetKeyState (nVirtKey=2) returned 0 [0174.070] GetKeyState (nVirtKey=4) returned 0 [0174.070] GetKeyState (nVirtKey=5) returned 0 [0174.070] GetKeyState (nVirtKey=6) returned 0 [0174.070] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0174.070] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0174.070] WaitMessage () returned 1 [0174.128] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0174.128] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203d0) returned 0x1 [0174.128] IsWindowUnicode (hWnd=0x201d0) returned 1 [0174.128] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0174.129] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203d0) returned 0x1 [0174.129] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0174.129] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e1028b) returned 0x0 [0174.129] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0174.129] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0174.129] SetCursor (hCursor=0x10003) returned 0x10003 [0174.129] TranslateMessage (lpMsg=0x1ef250) returned 0 [0174.129] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0174.129] GetKeyState (nVirtKey=1) returned -128 [0174.129] GetKeyState (nVirtKey=2) returned 0 [0174.129] GetKeyState (nVirtKey=4) returned 0 [0174.129] GetKeyState (nVirtKey=5) returned 0 [0174.129] GetKeyState (nVirtKey=6) returned 0 [0174.129] IsWindowVisible (hWnd=0x201d0) returned 1 [0174.129] IsWindowEnabled (hWnd=0x201d0) returned 1 [0174.129] SetFocus (hWnd=0x201d0) returned 0x201d0 [0174.130] GetFocus () returned 0x201d0 [0174.130] GetFocus () returned 0x201d0 [0174.130] GetFocus () returned 0x201d0 [0174.130] GetKeyState (nVirtKey=1) returned -128 [0174.130] GetKeyState (nVirtKey=2) returned 0 [0174.130] GetKeyState (nVirtKey=4) returned 0 [0174.130] GetKeyState (nVirtKey=5) returned 0 [0174.130] GetKeyState (nVirtKey=6) returned 0 [0174.130] GetCapture () returned 0x0 [0174.130] SetCapture (hWnd=0x201d0) returned 0x0 [0174.130] GetKeyState (nVirtKey=1) returned -128 [0174.130] GetKeyState (nVirtKey=2) returned 0 [0174.130] GetKeyState (nVirtKey=4) returned 0 [0174.130] GetKeyState (nVirtKey=5) returned 0 [0174.130] GetKeyState (nVirtKey=6) returned 0 [0174.130] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0174.130] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0174.130] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0174.130] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0174.130] TranslateMessage (lpMsg=0x1ef250) returned 0 [0174.130] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0174.130] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0174.130] IsWindowUnicode (hWnd=0x201d0) returned 1 [0174.130] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0174.130] TranslateMessage (lpMsg=0x1ef250) returned 0 [0174.130] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0174.130] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x267929c, cPoints=0x1 | out: lpPoints=0x267929c) returned 42533703 [0174.130] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0174.130] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0174.130] UpdateWindow (hWnd=0x201d0) returned 1 [0174.130] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0174.131] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0174.131] CreateCompatibleDC (hdc=0x160107c7) returned 0x34010810 [0174.131] SelectObject (hdc=0x34010810, h=0x490500d1) returned 0x185000f [0174.131] GdipCreateFromHDC (hdc=0x34010810, graphics=0x1eea5c) returned 0x0 [0174.131] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0174.131] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0174.131] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0174.131] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0174.131] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0174.131] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0174.131] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0174.131] LocalFree (hMem=0x416cb8) returned 0x0 [0174.131] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0174.131] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0174.131] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0174.131] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0174.131] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0174.132] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd2b0dbd) returned 0x0 [0174.132] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0174.132] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0174.132] GetCurrentObject (hdc=0x34010810, type=0x1) returned 0x1b00017 [0174.132] GetCurrentObject (hdc=0x34010810, type=0x2) returned 0x1900010 [0174.132] GetCurrentObject (hdc=0x34010810, type=0x7) returned 0x490500d1 [0174.132] GetCurrentObject (hdc=0x34010810, type=0x6) returned 0x18a002e [0174.132] SaveDC (hdc=0x34010810) returned 1 [0174.132] GetNearestColor (hdc=0x34010810, color=0xf5f5f5) returned 0xf5f5f5 [0174.132] GetNearestColor (hdc=0x34010810, color=0x515151) returned 0x515151 [0174.132] GetNearestColor (hdc=0x34010810, color=0x0) returned 0x0 [0174.132] GetNearestColor (hdc=0x34010810, color=0x515151) returned 0x515151 [0174.132] GetNearestColor (hdc=0x34010810, color=0x0) returned 0x0 [0174.132] GetNearestColor (hdc=0x34010810, color=0xfafafa) returned 0xfafafa [0174.132] GetNearestColor (hdc=0x34010810, color=0xe0e0e0) returned 0xe0e0e0 [0174.132] GetNearestColor (hdc=0x34010810, color=0xdcdcdc) returned 0xdcdcdc [0174.132] GetNearestColor (hdc=0x34010810, color=0x0) returned 0x0 [0174.132] RestoreDC (hdc=0x34010810, nSavedDC=-1) returned 1 [0174.132] GdipReleaseDC (graphics=0x504fbc8, hdc=0x34010810) returned 0x0 [0174.133] IsAppThemed () returned 0x1 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] IsAppThemed () returned 0x1 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26799a0 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0174.133] IsAppThemed () returned 0x1 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] IsAppThemed () returned 0x1 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] IsAppThemed () returned 0x1 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] IsAppThemed () returned 0x1 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] IsThemePartDefined () returned 0x1 [0174.133] IsAppThemed () returned 0x1 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0174.133] IsAppThemed () returned 0x1 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] GetThemeAppProperties () returned 0x3 [0174.133] IsAppThemed () returned 0x1 [0174.133] GetThemeAppProperties () returned 0x3 [0174.134] GetThemeAppProperties () returned 0x3 [0174.134] IsThemePartDefined () returned 0x1 [0174.134] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0174.134] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0174.134] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0174.134] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0174.134] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0174.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0174.134] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0174.134] LocalFree (hMem=0x416cb8) returned 0x0 [0174.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0174.134] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0174.134] LocalFree (hMem=0x416cb8) returned 0x0 [0174.134] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0174.134] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0174.134] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0174.134] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0174.134] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0174.134] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0174.134] GetCurrentObject (hdc=0x34010810, type=0x1) returned 0x1b00017 [0174.134] GetCurrentObject (hdc=0x34010810, type=0x2) returned 0x1900010 [0174.134] GetCurrentObject (hdc=0x34010810, type=0x7) returned 0x490500d1 [0174.134] GetCurrentObject (hdc=0x34010810, type=0x6) returned 0x18a002e [0174.134] SaveDC (hdc=0x34010810) returned 1 [0174.135] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1f040246 [0174.135] GetClipRgn (hdc=0x34010810, hrgn=0x1f040246) returned 0 [0174.135] SelectClipRgn (hdc=0x34010810, hrgn=0x3f040813) returned 2 [0174.135] DeleteObject (ho=0x1f040246) returned 1 [0174.135] DeleteObject (ho=0x3f040813) returned 1 [0174.135] OffsetViewportOrgEx (in: hdc=0x34010810, x=0, y=0, lppt=0x267a050 | out: lppt=0x267a050) returned 1 [0174.135] DrawThemeParentBackground () returned 0x0 [0174.135] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0174.135] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0174.135] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0174.135] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0174.135] GetSystemMetrics (nIndex=42) returned 0 [0174.135] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0174.135] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0174.135] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0174.135] GetCurrentObject (hdc=0x34010810, type=0x1) returned 0x1b00017 [0174.135] GetCurrentObject (hdc=0x34010810, type=0x2) returned 0x1900010 [0174.135] GetCurrentObject (hdc=0x34010810, type=0x7) returned 0x490500d1 [0174.135] GetCurrentObject (hdc=0x34010810, type=0x6) returned 0x18a002e [0174.135] SaveDC (hdc=0x34010810) returned 2 [0174.135] GetNearestColor (hdc=0x34010810, color=0xf5f5f5) returned 0xf5f5f5 [0174.135] CreateSolidBrush (color=0xf5f5f5) returned 0x92100244 [0174.136] FillRect (hDC=0x34010810, lprc=0x1ee2d0, hbr=0x92100244) returned 1 [0174.136] DeleteObject (ho=0x92100244) returned 1 [0174.136] RestoreDC (hdc=0x34010810, nSavedDC=-1) returned 1 [0174.136] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0174.136] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0174.136] GetSystemMetrics (nIndex=42) returned 0 [0174.136] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0174.136] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0174.136] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0174.136] GetCurrentObject (hdc=0x34010810, type=0x1) returned 0x1b00017 [0174.136] GetCurrentObject (hdc=0x34010810, type=0x2) returned 0x1900010 [0174.136] GetCurrentObject (hdc=0x34010810, type=0x7) returned 0x490500d1 [0174.136] GetCurrentObject (hdc=0x34010810, type=0x6) returned 0x18a002e [0174.136] SaveDC (hdc=0x34010810) returned 2 [0174.136] GetNearestColor (hdc=0x34010810, color=0xf5f5f5) returned 0xf5f5f5 [0174.136] CreateSolidBrush (color=0xf5f5f5) returned 0x93100244 [0174.136] FillRect (hDC=0x34010810, lprc=0x1ee270, hbr=0x93100244) returned 1 [0174.136] DeleteObject (ho=0x93100244) returned 1 [0174.136] RestoreDC (hdc=0x34010810, nSavedDC=-1) returned 1 [0174.136] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0174.137] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0174.137] GetSystemMetrics (nIndex=42) returned 0 [0174.137] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0174.137] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0174.137] RestoreDC (hdc=0x34010810, nSavedDC=-1) returned 1 [0174.137] GdipReleaseDC (graphics=0x504fbc8, hdc=0x34010810) returned 0x0 [0174.137] IsAppThemed () returned 0x1 [0174.137] GetThemeAppProperties () returned 0x3 [0174.137] GetThemeAppProperties () returned 0x3 [0174.137] IsAppThemed () returned 0x1 [0174.137] GetThemeAppProperties () returned 0x3 [0174.137] GetThemeAppProperties () returned 0x3 [0174.137] IsThemePartDefined () returned 0x1 [0174.137] GdipCreateRegion (region=0x1ee764) returned 0x0 [0174.137] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0174.137] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0174.137] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0174.137] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0174.137] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0174.137] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0174.137] LocalFree (hMem=0x416cb8) returned 0x0 [0174.137] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0174.137] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0174.137] LocalFree (hMem=0x416cb8) returned 0x0 [0174.137] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0174.137] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0174.138] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0174.138] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0174.138] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0174.138] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0174.138] GetCurrentObject (hdc=0x34010810, type=0x1) returned 0x1b00017 [0174.138] GetCurrentObject (hdc=0x34010810, type=0x2) returned 0x1900010 [0174.138] GetCurrentObject (hdc=0x34010810, type=0x7) returned 0x490500d1 [0174.138] GetCurrentObject (hdc=0x34010810, type=0x6) returned 0x18a002e [0174.138] SaveDC (hdc=0x34010810) returned 1 [0174.138] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x40040813 [0174.138] GetClipRgn (hdc=0x34010810, hrgn=0x40040813) returned 0 [0174.138] SelectClipRgn (hdc=0x34010810, hrgn=0x21040246) returned 2 [0174.138] DeleteObject (ho=0x40040813) returned 1 [0174.138] DeleteObject (ho=0x21040246) returned 1 [0174.138] OffsetViewportOrgEx (in: hdc=0x34010810, x=0, y=0, lppt=0x267a890 | out: lppt=0x267a890) returned 1 [0174.138] IsAppThemed () returned 0x1 [0174.138] GetThemeAppProperties () returned 0x3 [0174.138] GetThemeAppProperties () returned 0x3 [0174.138] DrawThemeBackground () returned 0x0 [0174.138] RestoreDC (hdc=0x34010810, nSavedDC=-1) returned 1 [0174.138] GdipReleaseDC (graphics=0x504fbc8, hdc=0x34010810) returned 0x0 [0174.138] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0174.138] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0174.138] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0174.139] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0174.139] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0174.139] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0174.139] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0174.139] LocalFree (hMem=0x416cb8) returned 0x0 [0174.139] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0174.139] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0174.139] LocalFree (hMem=0x416cb8) returned 0x0 [0174.139] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0174.139] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0174.139] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0174.139] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0174.139] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0174.139] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0174.139] GetCurrentObject (hdc=0x34010810, type=0x1) returned 0x1b00017 [0174.139] GetCurrentObject (hdc=0x34010810, type=0x2) returned 0x1900010 [0174.139] GetCurrentObject (hdc=0x34010810, type=0x7) returned 0x490500d1 [0174.139] GetCurrentObject (hdc=0x34010810, type=0x6) returned 0x18a002e [0174.139] SaveDC (hdc=0x34010810) returned 1 [0174.139] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x22040246 [0174.139] GetClipRgn (hdc=0x34010810, hrgn=0x22040246) returned 0 [0174.139] SelectClipRgn (hdc=0x34010810, hrgn=0x41040813) returned 2 [0174.139] DeleteObject (ho=0x22040246) returned 1 [0174.140] DeleteObject (ho=0x41040813) returned 1 [0174.140] OffsetViewportOrgEx (in: hdc=0x34010810, x=0, y=0, lppt=0x267ab64 | out: lppt=0x267ab64) returned 1 [0174.140] IsAppThemed () returned 0x1 [0174.140] GetThemeAppProperties () returned 0x3 [0174.140] GetThemeAppProperties () returned 0x3 [0174.140] GetThemeBackgroundContentRect () returned 0x0 [0174.140] RestoreDC (hdc=0x34010810, nSavedDC=-1) returned 1 [0174.140] GdipReleaseDC (graphics=0x504fbc8, hdc=0x34010810) returned 0x0 [0174.140] IsAppThemed () returned 0x1 [0174.140] GetThemeAppProperties () returned 0x3 [0174.140] GetThemeAppProperties () returned 0x3 [0174.140] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0174.140] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0174.140] GetCurrentObject (hdc=0x34010810, type=0x1) returned 0x1b00017 [0174.140] GetCurrentObject (hdc=0x34010810, type=0x2) returned 0x1900010 [0174.140] GetCurrentObject (hdc=0x34010810, type=0x7) returned 0x490500d1 [0174.140] GetCurrentObject (hdc=0x34010810, type=0x6) returned 0x18a002e [0174.140] SaveDC (hdc=0x34010810) returned 1 [0174.140] GetTextAlign (hdc=0x34010810) returned 0x0 [0174.140] GetTextColor (hdc=0x34010810) returned 0x0 [0174.140] GetCurrentObject (hdc=0x34010810, type=0x6) returned 0x18a002e [0174.140] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0174.140] SelectObject (hdc=0x34010810, h=0x220a081a) returned 0x18a002e [0174.140] GetBkMode (hdc=0x34010810) returned 2 [0174.141] SetBkMode (hdc=0x34010810, mode=1) returned 2 [0174.141] DrawTextExW (in: hdc=0x34010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x267aef8 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0174.141] DrawTextExW (in: hdc=0x34010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x267aef8 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0174.141] RestoreDC (hdc=0x34010810, nSavedDC=-1) returned 1 [0174.141] GdipReleaseDC (graphics=0x504fbc8, hdc=0x34010810) returned 0x0 [0174.141] GetFocus () returned 0x201d0 [0174.141] IsAppThemed () returned 0x1 [0174.141] GetThemeAppProperties () returned 0x3 [0174.141] GetThemeAppProperties () returned 0x3 [0174.141] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0174.141] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x34010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.141] GdipReleaseDC (graphics=0x504fbc8, hdc=0x34010810) returned 0x0 [0174.141] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0174.141] SelectObject (hdc=0x34010810, h=0x185000f) returned 0x490500d1 [0174.141] DeleteDC (hdc=0x34010810) returned 1 [0174.141] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0174.141] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0174.142] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x267aff4, cPoints=0x1 | out: lpPoints=0x267aff4) returned 42533703 [0174.142] WindowFromPoint (Point=0x3d0) returned 0x201d0 [0174.142] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203d0) returned 0x1 [0174.142] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0174.142] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0174.142] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0174.142] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.142] GetSystemMetrics (nIndex=42) returned 0 [0174.142] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0174.142] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0174.142] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0174.142] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.142] GetCapture () returned 0x201d0 [0174.142] ReleaseCapture () returned 1 [0174.142] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0174.142] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0174.142] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203d0) returned 0x1 [0174.142] IsWindowUnicode (hWnd=0x201d0) returned 1 [0174.142] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0174.142] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29203d0) returned 0x1 [0174.142] SetCursor (hCursor=0x10003) returned 0x10003 [0174.142] TranslateMessage (lpMsg=0x1ef250) returned 0 [0174.143] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0174.143] GetKeyState (nVirtKey=1) returned 0 [0174.143] GetKeyState (nVirtKey=2) returned 0 [0174.143] GetKeyState (nVirtKey=4) returned 0 [0174.143] GetKeyState (nVirtKey=5) returned 0 [0174.143] GetKeyState (nVirtKey=6) returned 0 [0174.143] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0174.143] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0174.143] WaitMessage () returned 1 [0177.192] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0177.193] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930392) returned 0x1 [0177.193] IsWindowUnicode (hWnd=0x201d0) returned 1 [0177.193] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0177.193] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930392) returned 0x1 [0177.193] SetCursor (hCursor=0x10003) returned 0x10003 [0177.193] TranslateMessage (lpMsg=0x1ef250) returned 0 [0177.193] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0177.194] GetKeyState (nVirtKey=1) returned 0 [0177.194] GetKeyState (nVirtKey=2) returned 0 [0177.194] GetKeyState (nVirtKey=4) returned 0 [0177.194] GetKeyState (nVirtKey=5) returned 0 [0177.194] GetKeyState (nVirtKey=6) returned 0 [0177.194] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0177.194] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0177.194] WaitMessage () returned 1 [0177.251] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0177.251] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930392) returned 0x1 [0177.251] IsWindowUnicode (hWnd=0x201d0) returned 1 [0177.251] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0177.251] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930392) returned 0x1 [0177.251] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0177.251] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e2024d) returned 0x0 [0177.251] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0177.251] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0177.252] SetCursor (hCursor=0x10003) returned 0x10003 [0177.252] TranslateMessage (lpMsg=0x1ef250) returned 0 [0177.252] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0177.252] GetKeyState (nVirtKey=1) returned -127 [0177.252] GetKeyState (nVirtKey=2) returned 0 [0177.252] GetKeyState (nVirtKey=4) returned 0 [0177.252] GetKeyState (nVirtKey=5) returned 0 [0177.252] GetKeyState (nVirtKey=6) returned 0 [0177.252] IsWindowVisible (hWnd=0x201d0) returned 1 [0177.252] IsWindowEnabled (hWnd=0x201d0) returned 1 [0177.252] SetFocus (hWnd=0x201d0) returned 0x201d0 [0177.252] GetFocus () returned 0x201d0 [0177.252] GetFocus () returned 0x201d0 [0177.252] GetFocus () returned 0x201d0 [0177.252] GetKeyState (nVirtKey=1) returned -127 [0177.252] GetKeyState (nVirtKey=2) returned 0 [0177.252] GetKeyState (nVirtKey=4) returned 0 [0177.252] GetKeyState (nVirtKey=5) returned 0 [0177.252] GetKeyState (nVirtKey=6) returned 0 [0177.253] GetCapture () returned 0x0 [0177.253] SetCapture (hWnd=0x201d0) returned 0x0 [0177.253] GetKeyState (nVirtKey=1) returned -127 [0177.253] GetKeyState (nVirtKey=2) returned 0 [0177.253] GetKeyState (nVirtKey=4) returned 0 [0177.253] GetKeyState (nVirtKey=5) returned 0 [0177.253] GetKeyState (nVirtKey=6) returned 0 [0177.253] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0177.253] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0177.253] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0177.253] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0177.253] TranslateMessage (lpMsg=0x1ef250) returned 0 [0177.253] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0177.253] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0177.253] IsWindowUnicode (hWnd=0x201d0) returned 1 [0177.253] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0177.253] TranslateMessage (lpMsg=0x1ef250) returned 0 [0177.253] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0177.253] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x267b118, cPoints=0x1 | out: lpPoints=0x267b118) returned 42533703 [0177.253] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0177.253] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0177.253] UpdateWindow (hWnd=0x201d0) returned 1 [0177.254] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0177.254] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0177.254] CreateCompatibleDC (hdc=0x160107c7) returned 0x35010810 [0177.254] SelectObject (hdc=0x35010810, h=0x490500d1) returned 0x185000f [0177.254] GdipCreateFromHDC (hdc=0x35010810, graphics=0x1eea5c) returned 0x0 [0177.255] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0177.255] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0177.255] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0177.255] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0177.255] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0177.255] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0177.255] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0177.256] LocalFree (hMem=0x416cb8) returned 0x0 [0177.256] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0177.256] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0177.256] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0177.256] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0177.256] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0177.256] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd290dbd) returned 0x0 [0177.256] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0177.256] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0177.256] GetCurrentObject (hdc=0x35010810, type=0x1) returned 0x1b00017 [0177.256] GetCurrentObject (hdc=0x35010810, type=0x2) returned 0x1900010 [0177.256] GetCurrentObject (hdc=0x35010810, type=0x7) returned 0x490500d1 [0177.257] GetCurrentObject (hdc=0x35010810, type=0x6) returned 0x18a002e [0177.257] SaveDC (hdc=0x35010810) returned 1 [0177.257] GetNearestColor (hdc=0x35010810, color=0xf5f5f5) returned 0xf5f5f5 [0177.257] GetNearestColor (hdc=0x35010810, color=0x515151) returned 0x515151 [0177.257] GetNearestColor (hdc=0x35010810, color=0x0) returned 0x0 [0177.257] GetNearestColor (hdc=0x35010810, color=0x515151) returned 0x515151 [0177.257] GetNearestColor (hdc=0x35010810, color=0x0) returned 0x0 [0177.257] GetNearestColor (hdc=0x35010810, color=0xfafafa) returned 0xfafafa [0177.257] GetNearestColor (hdc=0x35010810, color=0xe0e0e0) returned 0xe0e0e0 [0177.257] GetNearestColor (hdc=0x35010810, color=0xdcdcdc) returned 0xdcdcdc [0177.257] GetNearestColor (hdc=0x35010810, color=0x0) returned 0x0 [0177.257] RestoreDC (hdc=0x35010810, nSavedDC=-1) returned 1 [0177.258] GdipReleaseDC (graphics=0x504fbc8, hdc=0x35010810) returned 0x0 [0177.258] IsAppThemed () returned 0x1 [0177.258] GetThemeAppProperties () returned 0x3 [0177.258] GetThemeAppProperties () returned 0x3 [0177.258] IsAppThemed () returned 0x1 [0177.258] GetThemeAppProperties () returned 0x3 [0177.258] GetThemeAppProperties () returned 0x3 [0177.258] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x267b81c | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0177.258] IsAppThemed () returned 0x1 [0177.258] GetThemeAppProperties () returned 0x3 [0177.258] GetThemeAppProperties () returned 0x3 [0177.259] IsAppThemed () returned 0x1 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] IsAppThemed () returned 0x1 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] IsAppThemed () returned 0x1 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] IsThemePartDefined () returned 0x1 [0177.259] IsAppThemed () returned 0x1 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0177.259] IsAppThemed () returned 0x1 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] IsAppThemed () returned 0x1 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] GetThemeAppProperties () returned 0x3 [0177.259] IsThemePartDefined () returned 0x1 [0177.259] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0177.259] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0177.259] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0177.259] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0177.259] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0177.259] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0177.259] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0177.259] LocalFree (hMem=0x416cb8) returned 0x0 [0177.259] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0177.260] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0177.260] LocalFree (hMem=0x416cb8) returned 0x0 [0177.260] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0177.260] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0177.260] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0177.260] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0177.260] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0177.260] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0177.260] GetCurrentObject (hdc=0x35010810, type=0x1) returned 0x1b00017 [0177.260] GetCurrentObject (hdc=0x35010810, type=0x2) returned 0x1900010 [0177.260] GetCurrentObject (hdc=0x35010810, type=0x7) returned 0x490500d1 [0177.260] GetCurrentObject (hdc=0x35010810, type=0x6) returned 0x18a002e [0177.260] SaveDC (hdc=0x35010810) returned 1 [0177.260] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x42040813 [0177.260] GetClipRgn (hdc=0x35010810, hrgn=0x42040813) returned 0 [0177.260] SelectClipRgn (hdc=0x35010810, hrgn=0x26040246) returned 2 [0177.260] DeleteObject (ho=0x42040813) returned 1 [0177.260] DeleteObject (ho=0x26040246) returned 1 [0177.260] OffsetViewportOrgEx (in: hdc=0x35010810, x=0, y=0, lppt=0x267becc | out: lppt=0x267becc) returned 1 [0177.260] DrawThemeParentBackground () returned 0x0 [0177.261] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0177.261] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0177.261] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0177.261] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0177.261] GetSystemMetrics (nIndex=42) returned 0 [0177.261] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0177.261] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0177.261] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0177.261] GetCurrentObject (hdc=0x35010810, type=0x1) returned 0x1b00017 [0177.261] GetCurrentObject (hdc=0x35010810, type=0x2) returned 0x1900010 [0177.261] GetCurrentObject (hdc=0x35010810, type=0x7) returned 0x490500d1 [0177.261] GetCurrentObject (hdc=0x35010810, type=0x6) returned 0x18a002e [0177.261] SaveDC (hdc=0x35010810) returned 2 [0177.261] GetNearestColor (hdc=0x35010810, color=0xf5f5f5) returned 0xf5f5f5 [0177.261] CreateSolidBrush (color=0xf5f5f5) returned 0x94100244 [0177.261] FillRect (hDC=0x35010810, lprc=0x1ee2d0, hbr=0x94100244) returned 1 [0177.261] DeleteObject (ho=0x94100244) returned 1 [0177.261] RestoreDC (hdc=0x35010810, nSavedDC=-1) returned 1 [0177.262] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0177.262] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0177.262] GetSystemMetrics (nIndex=42) returned 0 [0177.262] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0177.262] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0177.262] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0177.262] GetCurrentObject (hdc=0x35010810, type=0x1) returned 0x1b00017 [0177.262] GetCurrentObject (hdc=0x35010810, type=0x2) returned 0x1900010 [0177.262] GetCurrentObject (hdc=0x35010810, type=0x7) returned 0x490500d1 [0177.262] GetCurrentObject (hdc=0x35010810, type=0x6) returned 0x18a002e [0177.262] SaveDC (hdc=0x35010810) returned 2 [0177.262] GetNearestColor (hdc=0x35010810, color=0xf5f5f5) returned 0xf5f5f5 [0177.262] CreateSolidBrush (color=0xf5f5f5) returned 0x95100244 [0177.262] FillRect (hDC=0x35010810, lprc=0x1ee270, hbr=0x95100244) returned 1 [0177.262] DeleteObject (ho=0x95100244) returned 1 [0177.262] RestoreDC (hdc=0x35010810, nSavedDC=-1) returned 1 [0177.262] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0177.262] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0177.262] GetSystemMetrics (nIndex=42) returned 0 [0177.262] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0177.262] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0177.263] RestoreDC (hdc=0x35010810, nSavedDC=-1) returned 1 [0177.263] GdipReleaseDC (graphics=0x504fbc8, hdc=0x35010810) returned 0x0 [0177.263] IsAppThemed () returned 0x1 [0177.263] GetThemeAppProperties () returned 0x3 [0177.263] GetThemeAppProperties () returned 0x3 [0177.263] IsAppThemed () returned 0x1 [0177.263] GetThemeAppProperties () returned 0x3 [0177.263] GetThemeAppProperties () returned 0x3 [0177.263] IsThemePartDefined () returned 0x1 [0177.263] GdipCreateRegion (region=0x1ee764) returned 0x0 [0177.263] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0177.263] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0177.263] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0177.263] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0177.263] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0177.263] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0177.263] LocalFree (hMem=0x416cb8) returned 0x0 [0177.263] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0177.263] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0177.263] LocalFree (hMem=0x416cb8) returned 0x0 [0177.263] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0177.263] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0177.263] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0177.263] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0177.264] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0177.264] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0177.264] GetCurrentObject (hdc=0x35010810, type=0x1) returned 0x1b00017 [0177.264] GetCurrentObject (hdc=0x35010810, type=0x2) returned 0x1900010 [0177.264] GetCurrentObject (hdc=0x35010810, type=0x7) returned 0x490500d1 [0177.264] GetCurrentObject (hdc=0x35010810, type=0x6) returned 0x18a002e [0177.264] SaveDC (hdc=0x35010810) returned 1 [0177.264] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x27040246 [0177.264] GetClipRgn (hdc=0x35010810, hrgn=0x27040246) returned 0 [0177.264] SelectClipRgn (hdc=0x35010810, hrgn=0x44040813) returned 2 [0177.264] DeleteObject (ho=0x27040246) returned 1 [0177.264] DeleteObject (ho=0x44040813) returned 1 [0177.264] OffsetViewportOrgEx (in: hdc=0x35010810, x=0, y=0, lppt=0x267c70c | out: lppt=0x267c70c) returned 1 [0177.264] IsAppThemed () returned 0x1 [0177.264] GetThemeAppProperties () returned 0x3 [0177.264] GetThemeAppProperties () returned 0x3 [0177.264] DrawThemeBackground () returned 0x0 [0177.264] RestoreDC (hdc=0x35010810, nSavedDC=-1) returned 1 [0177.264] GdipReleaseDC (graphics=0x504fbc8, hdc=0x35010810) returned 0x0 [0177.264] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0177.264] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0177.264] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0177.264] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0177.265] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0177.265] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0177.265] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0177.265] LocalFree (hMem=0x416cb8) returned 0x0 [0177.265] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0177.265] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0177.265] LocalFree (hMem=0x416cb8) returned 0x0 [0177.265] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0177.265] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0177.265] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0177.265] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0177.265] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0177.265] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0177.265] GetCurrentObject (hdc=0x35010810, type=0x1) returned 0x1b00017 [0177.265] GetCurrentObject (hdc=0x35010810, type=0x2) returned 0x1900010 [0177.265] GetCurrentObject (hdc=0x35010810, type=0x7) returned 0x490500d1 [0177.265] GetCurrentObject (hdc=0x35010810, type=0x6) returned 0x18a002e [0177.265] SaveDC (hdc=0x35010810) returned 1 [0177.265] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x45040813 [0177.265] GetClipRgn (hdc=0x35010810, hrgn=0x45040813) returned 0 [0177.265] SelectClipRgn (hdc=0x35010810, hrgn=0x28040246) returned 2 [0177.265] DeleteObject (ho=0x45040813) returned 1 [0177.265] DeleteObject (ho=0x28040246) returned 1 [0177.266] OffsetViewportOrgEx (in: hdc=0x35010810, x=0, y=0, lppt=0x267c9e0 | out: lppt=0x267c9e0) returned 1 [0177.266] IsAppThemed () returned 0x1 [0177.266] GetThemeAppProperties () returned 0x3 [0177.266] GetThemeAppProperties () returned 0x3 [0177.266] GetThemeBackgroundContentRect () returned 0x0 [0177.266] RestoreDC (hdc=0x35010810, nSavedDC=-1) returned 1 [0177.266] GdipReleaseDC (graphics=0x504fbc8, hdc=0x35010810) returned 0x0 [0177.266] IsAppThemed () returned 0x1 [0177.266] GetThemeAppProperties () returned 0x3 [0177.266] GetThemeAppProperties () returned 0x3 [0177.266] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0177.266] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0177.266] GetCurrentObject (hdc=0x35010810, type=0x1) returned 0x1b00017 [0177.266] GetCurrentObject (hdc=0x35010810, type=0x2) returned 0x1900010 [0177.266] GetCurrentObject (hdc=0x35010810, type=0x7) returned 0x490500d1 [0177.266] GetCurrentObject (hdc=0x35010810, type=0x6) returned 0x18a002e [0177.266] SaveDC (hdc=0x35010810) returned 1 [0177.266] GetTextAlign (hdc=0x35010810) returned 0x0 [0177.266] GetTextColor (hdc=0x35010810) returned 0x0 [0177.266] GetCurrentObject (hdc=0x35010810, type=0x6) returned 0x18a002e [0177.266] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0177.267] SelectObject (hdc=0x35010810, h=0x220a081a) returned 0x18a002e [0177.267] GetBkMode (hdc=0x35010810) returned 2 [0177.267] SetBkMode (hdc=0x35010810, mode=1) returned 2 [0177.267] DrawTextExW (in: hdc=0x35010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x267cd74 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0177.267] DrawTextExW (in: hdc=0x35010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x267cd74 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0177.267] RestoreDC (hdc=0x35010810, nSavedDC=-1) returned 1 [0177.267] GdipReleaseDC (graphics=0x504fbc8, hdc=0x35010810) returned 0x0 [0177.267] GetFocus () returned 0x201d0 [0177.267] IsAppThemed () returned 0x1 [0177.267] GetThemeAppProperties () returned 0x3 [0177.267] GetThemeAppProperties () returned 0x3 [0177.267] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0177.267] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x35010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0177.267] GdipReleaseDC (graphics=0x504fbc8, hdc=0x35010810) returned 0x0 [0177.267] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0177.268] SelectObject (hdc=0x35010810, h=0x185000f) returned 0x490500d1 [0177.268] DeleteDC (hdc=0x35010810) returned 1 [0177.268] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0177.268] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0177.268] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x267ce70, cPoints=0x1 | out: lpPoints=0x267ce70) returned 42533703 [0177.268] WindowFromPoint (Point=0x392) returned 0x201d0 [0177.268] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930392) returned 0x1 [0177.268] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0177.268] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0177.268] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0177.268] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.268] GetSystemMetrics (nIndex=42) returned 0 [0177.268] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0177.268] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0177.269] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0177.269] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.269] GetCapture () returned 0x201d0 [0177.269] ReleaseCapture () returned 1 [0177.269] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0177.269] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0177.269] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930392) returned 0x1 [0177.269] IsWindowUnicode (hWnd=0x201d0) returned 1 [0177.269] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0177.269] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2930392) returned 0x1 [0177.269] SetCursor (hCursor=0x10003) returned 0x10003 [0177.269] TranslateMessage (lpMsg=0x1ef250) returned 0 [0177.269] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0177.269] GetKeyState (nVirtKey=1) returned 1 [0177.269] GetKeyState (nVirtKey=2) returned 0 [0177.269] GetKeyState (nVirtKey=4) returned 0 [0177.269] GetKeyState (nVirtKey=5) returned 0 [0177.269] GetKeyState (nVirtKey=6) returned 0 [0177.269] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0177.269] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0177.269] WaitMessage () returned 1 [0180.296] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0180.296] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03a6) returned 0x1 [0180.296] IsWindowUnicode (hWnd=0x201d0) returned 1 [0180.296] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0180.296] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03a6) returned 0x1 [0180.296] SetCursor (hCursor=0x10003) returned 0x10003 [0180.296] TranslateMessage (lpMsg=0x1ef250) returned 0 [0180.296] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0180.296] GetKeyState (nVirtKey=1) returned 1 [0180.296] GetKeyState (nVirtKey=2) returned 0 [0180.296] GetKeyState (nVirtKey=4) returned 0 [0180.296] GetKeyState (nVirtKey=5) returned 0 [0180.296] GetKeyState (nVirtKey=6) returned 0 [0180.296] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0180.296] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0180.296] WaitMessage () returned 1 [0180.372] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0180.372] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03a6) returned 0x1 [0180.372] IsWindowUnicode (hWnd=0x201d0) returned 1 [0180.372] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0180.372] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03a6) returned 0x1 [0180.372] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0180.372] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1de0261) returned 0x0 [0180.372] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0180.373] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0180.373] SetCursor (hCursor=0x10003) returned 0x10003 [0180.373] TranslateMessage (lpMsg=0x1ef250) returned 0 [0180.373] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0180.373] GetKeyState (nVirtKey=1) returned -128 [0180.373] GetKeyState (nVirtKey=2) returned 0 [0180.373] GetKeyState (nVirtKey=4) returned 0 [0180.373] GetKeyState (nVirtKey=5) returned 0 [0180.373] GetKeyState (nVirtKey=6) returned 0 [0180.373] IsWindowVisible (hWnd=0x201d0) returned 1 [0180.373] IsWindowEnabled (hWnd=0x201d0) returned 1 [0180.373] SetFocus (hWnd=0x201d0) returned 0x201d0 [0180.373] GetFocus () returned 0x201d0 [0180.373] GetFocus () returned 0x201d0 [0180.373] GetFocus () returned 0x201d0 [0180.373] GetKeyState (nVirtKey=1) returned -128 [0180.373] GetKeyState (nVirtKey=2) returned 0 [0180.373] GetKeyState (nVirtKey=4) returned 0 [0180.373] GetKeyState (nVirtKey=5) returned 0 [0180.373] GetKeyState (nVirtKey=6) returned 0 [0180.373] GetCapture () returned 0x0 [0180.373] SetCapture (hWnd=0x201d0) returned 0x0 [0180.373] GetKeyState (nVirtKey=1) returned -128 [0180.373] GetKeyState (nVirtKey=2) returned 0 [0180.373] GetKeyState (nVirtKey=4) returned 0 [0180.373] GetKeyState (nVirtKey=5) returned 0 [0180.373] GetKeyState (nVirtKey=6) returned 0 [0180.373] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0180.373] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0180.373] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0180.373] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0180.373] TranslateMessage (lpMsg=0x1ef250) returned 0 [0180.373] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0180.373] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0180.374] IsWindowUnicode (hWnd=0x201d0) returned 1 [0180.374] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0180.374] TranslateMessage (lpMsg=0x1ef250) returned 0 [0180.374] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0180.374] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x267cf94, cPoints=0x1 | out: lpPoints=0x267cf94) returned 42533703 [0180.374] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0180.374] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0180.374] UpdateWindow (hWnd=0x201d0) returned 1 [0180.374] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0180.374] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0180.374] CreateCompatibleDC (hdc=0x160107c7) returned 0x39010810 [0180.374] SelectObject (hdc=0x39010810, h=0x490500d1) returned 0x185000f [0180.374] GdipCreateFromHDC (hdc=0x39010810, graphics=0x1eea5c) returned 0x0 [0180.374] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0180.374] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0180.374] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0180.374] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0180.374] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0180.374] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0180.374] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0180.375] LocalFree (hMem=0x416cb8) returned 0x0 [0180.375] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0180.375] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0180.375] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0180.375] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0180.375] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0180.375] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd270dbd) returned 0x0 [0180.375] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0180.375] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0180.375] GetCurrentObject (hdc=0x39010810, type=0x1) returned 0x1b00017 [0180.375] GetCurrentObject (hdc=0x39010810, type=0x2) returned 0x1900010 [0180.375] GetCurrentObject (hdc=0x39010810, type=0x7) returned 0x490500d1 [0180.375] GetCurrentObject (hdc=0x39010810, type=0x6) returned 0x18a002e [0180.375] SaveDC (hdc=0x39010810) returned 1 [0180.375] GetNearestColor (hdc=0x39010810, color=0xf5f5f5) returned 0xf5f5f5 [0180.375] GetNearestColor (hdc=0x39010810, color=0x515151) returned 0x515151 [0180.375] GetNearestColor (hdc=0x39010810, color=0x0) returned 0x0 [0180.375] GetNearestColor (hdc=0x39010810, color=0x515151) returned 0x515151 [0180.375] GetNearestColor (hdc=0x39010810, color=0x0) returned 0x0 [0180.376] GetNearestColor (hdc=0x39010810, color=0xfafafa) returned 0xfafafa [0180.376] GetNearestColor (hdc=0x39010810, color=0xe0e0e0) returned 0xe0e0e0 [0180.376] GetNearestColor (hdc=0x39010810, color=0xdcdcdc) returned 0xdcdcdc [0180.376] GetNearestColor (hdc=0x39010810, color=0x0) returned 0x0 [0180.376] RestoreDC (hdc=0x39010810, nSavedDC=-1) returned 1 [0180.376] GdipReleaseDC (graphics=0x504fbc8, hdc=0x39010810) returned 0x0 [0180.376] IsAppThemed () returned 0x1 [0180.376] GetThemeAppProperties () returned 0x3 [0180.376] GetThemeAppProperties () returned 0x3 [0180.376] IsAppThemed () returned 0x1 [0180.376] GetThemeAppProperties () returned 0x3 [0180.376] GetThemeAppProperties () returned 0x3 [0180.376] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x267d698 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0180.376] IsAppThemed () returned 0x1 [0180.376] GetThemeAppProperties () returned 0x3 [0180.376] GetThemeAppProperties () returned 0x3 [0180.376] IsAppThemed () returned 0x1 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] IsAppThemed () returned 0x1 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] IsAppThemed () returned 0x1 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] IsThemePartDefined () returned 0x1 [0180.377] IsAppThemed () returned 0x1 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0180.377] IsAppThemed () returned 0x1 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] IsAppThemed () returned 0x1 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] GetThemeAppProperties () returned 0x3 [0180.377] IsThemePartDefined () returned 0x1 [0180.377] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0180.377] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0180.377] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0180.377] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0180.377] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0180.377] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0180.377] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0180.377] LocalFree (hMem=0x416cb8) returned 0x0 [0180.377] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0180.377] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0180.377] LocalFree (hMem=0x416cb8) returned 0x0 [0180.377] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0180.377] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0180.378] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0180.378] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0180.378] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0180.378] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0180.378] GetCurrentObject (hdc=0x39010810, type=0x1) returned 0x1b00017 [0180.378] GetCurrentObject (hdc=0x39010810, type=0x2) returned 0x1900010 [0180.378] GetCurrentObject (hdc=0x39010810, type=0x7) returned 0x490500d1 [0180.378] GetCurrentObject (hdc=0x39010810, type=0x6) returned 0x18a002e [0180.378] SaveDC (hdc=0x39010810) returned 1 [0180.378] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x29040246 [0180.378] GetClipRgn (hdc=0x39010810, hrgn=0x29040246) returned 0 [0180.378] SelectClipRgn (hdc=0x39010810, hrgn=0x49040813) returned 2 [0180.378] DeleteObject (ho=0x29040246) returned 1 [0180.378] DeleteObject (ho=0x49040813) returned 1 [0180.378] OffsetViewportOrgEx (in: hdc=0x39010810, x=0, y=0, lppt=0x267dd48 | out: lppt=0x267dd48) returned 1 [0180.378] DrawThemeParentBackground () returned 0x0 [0180.378] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0180.378] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0180.378] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0180.378] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0180.378] GetSystemMetrics (nIndex=42) returned 0 [0180.378] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0180.378] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0180.379] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0180.379] GetCurrentObject (hdc=0x39010810, type=0x1) returned 0x1b00017 [0180.379] GetCurrentObject (hdc=0x39010810, type=0x2) returned 0x1900010 [0180.379] GetCurrentObject (hdc=0x39010810, type=0x7) returned 0x490500d1 [0180.379] GetCurrentObject (hdc=0x39010810, type=0x6) returned 0x18a002e [0180.379] SaveDC (hdc=0x39010810) returned 2 [0180.379] GetNearestColor (hdc=0x39010810, color=0xf5f5f5) returned 0xf5f5f5 [0180.379] CreateSolidBrush (color=0xf5f5f5) returned 0x96100244 [0180.379] FillRect (hDC=0x39010810, lprc=0x1ee2d0, hbr=0x96100244) returned 1 [0180.379] DeleteObject (ho=0x96100244) returned 1 [0180.379] RestoreDC (hdc=0x39010810, nSavedDC=-1) returned 1 [0180.379] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0180.379] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0180.379] GetSystemMetrics (nIndex=42) returned 0 [0180.379] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0180.379] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0180.379] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0180.379] GetCurrentObject (hdc=0x39010810, type=0x1) returned 0x1b00017 [0180.379] GetCurrentObject (hdc=0x39010810, type=0x2) returned 0x1900010 [0180.379] GetCurrentObject (hdc=0x39010810, type=0x7) returned 0x490500d1 [0180.379] GetCurrentObject (hdc=0x39010810, type=0x6) returned 0x18a002e [0180.380] SaveDC (hdc=0x39010810) returned 2 [0180.380] GetNearestColor (hdc=0x39010810, color=0xf5f5f5) returned 0xf5f5f5 [0180.380] CreateSolidBrush (color=0xf5f5f5) returned 0x97100244 [0180.380] FillRect (hDC=0x39010810, lprc=0x1ee270, hbr=0x97100244) returned 1 [0180.380] DeleteObject (ho=0x97100244) returned 1 [0180.380] RestoreDC (hdc=0x39010810, nSavedDC=-1) returned 1 [0180.380] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0180.380] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0180.380] GetSystemMetrics (nIndex=42) returned 0 [0180.380] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0180.380] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0180.380] RestoreDC (hdc=0x39010810, nSavedDC=-1) returned 1 [0180.380] GdipReleaseDC (graphics=0x504fbc8, hdc=0x39010810) returned 0x0 [0180.380] IsAppThemed () returned 0x1 [0180.380] GetThemeAppProperties () returned 0x3 [0180.380] GetThemeAppProperties () returned 0x3 [0180.380] IsAppThemed () returned 0x1 [0180.380] GetThemeAppProperties () returned 0x3 [0180.380] GetThemeAppProperties () returned 0x3 [0180.380] IsThemePartDefined () returned 0x1 [0180.380] GdipCreateRegion (region=0x1ee764) returned 0x0 [0180.380] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0180.380] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0180.380] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0180.380] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0180.381] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0180.381] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0180.381] LocalFree (hMem=0x416cb8) returned 0x0 [0180.381] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0180.381] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0180.381] LocalFree (hMem=0x416cb8) returned 0x0 [0180.381] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0180.381] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0180.381] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0180.381] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0180.381] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0180.381] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0180.381] GetCurrentObject (hdc=0x39010810, type=0x1) returned 0x1b00017 [0180.381] GetCurrentObject (hdc=0x39010810, type=0x2) returned 0x1900010 [0180.381] GetCurrentObject (hdc=0x39010810, type=0x7) returned 0x490500d1 [0180.381] GetCurrentObject (hdc=0x39010810, type=0x6) returned 0x18a002e [0180.381] SaveDC (hdc=0x39010810) returned 1 [0180.381] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4a040813 [0180.381] GetClipRgn (hdc=0x39010810, hrgn=0x4a040813) returned 0 [0180.381] SelectClipRgn (hdc=0x39010810, hrgn=0x2b040246) returned 2 [0180.381] DeleteObject (ho=0x4a040813) returned 1 [0180.381] DeleteObject (ho=0x2b040246) returned 1 [0180.382] OffsetViewportOrgEx (in: hdc=0x39010810, x=0, y=0, lppt=0x267e588 | out: lppt=0x267e588) returned 1 [0180.382] IsAppThemed () returned 0x1 [0180.382] GetThemeAppProperties () returned 0x3 [0180.382] GetThemeAppProperties () returned 0x3 [0180.382] DrawThemeBackground () returned 0x0 [0180.382] RestoreDC (hdc=0x39010810, nSavedDC=-1) returned 1 [0180.382] GdipReleaseDC (graphics=0x504fbc8, hdc=0x39010810) returned 0x0 [0180.382] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0180.382] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0180.382] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0180.382] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0180.382] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0180.382] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0180.382] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0180.382] LocalFree (hMem=0x416cb8) returned 0x0 [0180.382] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0180.382] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0180.382] LocalFree (hMem=0x416cb8) returned 0x0 [0180.382] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0180.382] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0180.382] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0180.382] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0180.382] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0180.382] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0180.383] GetCurrentObject (hdc=0x39010810, type=0x1) returned 0x1b00017 [0180.383] GetCurrentObject (hdc=0x39010810, type=0x2) returned 0x1900010 [0180.383] GetCurrentObject (hdc=0x39010810, type=0x7) returned 0x490500d1 [0180.383] GetCurrentObject (hdc=0x39010810, type=0x6) returned 0x18a002e [0180.383] SaveDC (hdc=0x39010810) returned 1 [0180.383] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c040246 [0180.383] GetClipRgn (hdc=0x39010810, hrgn=0x2c040246) returned 0 [0180.383] SelectClipRgn (hdc=0x39010810, hrgn=0x4b040813) returned 2 [0180.383] DeleteObject (ho=0x2c040246) returned 1 [0180.383] DeleteObject (ho=0x4b040813) returned 1 [0180.383] OffsetViewportOrgEx (in: hdc=0x39010810, x=0, y=0, lppt=0x267e85c | out: lppt=0x267e85c) returned 1 [0180.383] IsAppThemed () returned 0x1 [0180.383] GetThemeAppProperties () returned 0x3 [0180.383] GetThemeAppProperties () returned 0x3 [0180.383] GetThemeBackgroundContentRect () returned 0x0 [0180.383] RestoreDC (hdc=0x39010810, nSavedDC=-1) returned 1 [0180.383] GdipReleaseDC (graphics=0x504fbc8, hdc=0x39010810) returned 0x0 [0180.383] IsAppThemed () returned 0x1 [0180.383] GetThemeAppProperties () returned 0x3 [0180.383] GetThemeAppProperties () returned 0x3 [0180.383] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0180.383] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0180.383] GetCurrentObject (hdc=0x39010810, type=0x1) returned 0x1b00017 [0180.383] GetCurrentObject (hdc=0x39010810, type=0x2) returned 0x1900010 [0180.383] GetCurrentObject (hdc=0x39010810, type=0x7) returned 0x490500d1 [0180.384] GetCurrentObject (hdc=0x39010810, type=0x6) returned 0x18a002e [0180.384] SaveDC (hdc=0x39010810) returned 1 [0180.384] GetTextAlign (hdc=0x39010810) returned 0x0 [0180.384] GetTextColor (hdc=0x39010810) returned 0x0 [0180.384] GetCurrentObject (hdc=0x39010810, type=0x6) returned 0x18a002e [0180.384] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0180.384] SelectObject (hdc=0x39010810, h=0x220a081a) returned 0x18a002e [0180.384] GetBkMode (hdc=0x39010810) returned 2 [0180.384] SetBkMode (hdc=0x39010810, mode=1) returned 2 [0180.384] DrawTextExW (in: hdc=0x39010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x267ebf0 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0180.384] DrawTextExW (in: hdc=0x39010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x267ebf0 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0180.384] RestoreDC (hdc=0x39010810, nSavedDC=-1) returned 1 [0180.384] GdipReleaseDC (graphics=0x504fbc8, hdc=0x39010810) returned 0x0 [0180.384] GetFocus () returned 0x201d0 [0180.384] IsAppThemed () returned 0x1 [0180.384] GetThemeAppProperties () returned 0x3 [0180.384] GetThemeAppProperties () returned 0x3 [0180.384] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0180.385] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x39010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0180.385] GdipReleaseDC (graphics=0x504fbc8, hdc=0x39010810) returned 0x0 [0180.385] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0180.385] SelectObject (hdc=0x39010810, h=0x185000f) returned 0x490500d1 [0180.385] DeleteDC (hdc=0x39010810) returned 1 [0180.385] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0180.385] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0180.385] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x267ecec, cPoints=0x1 | out: lpPoints=0x267ecec) returned 42533703 [0180.385] WindowFromPoint (Point=0x3a6) returned 0x201d0 [0180.385] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03a6) returned 0x1 [0180.385] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0180.385] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0180.385] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0180.385] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0180.385] GetSystemMetrics (nIndex=42) returned 0 [0180.385] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0180.385] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0180.385] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0180.385] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0180.385] GetCapture () returned 0x201d0 [0180.385] ReleaseCapture () returned 1 [0180.386] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0180.386] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0180.386] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03a6) returned 0x1 [0180.386] IsWindowUnicode (hWnd=0x201d0) returned 1 [0180.386] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0180.386] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03a6) returned 0x1 [0180.386] SetCursor (hCursor=0x10003) returned 0x10003 [0180.386] TranslateMessage (lpMsg=0x1ef250) returned 0 [0180.386] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0180.386] GetKeyState (nVirtKey=1) returned 0 [0180.386] GetKeyState (nVirtKey=2) returned 0 [0180.386] GetKeyState (nVirtKey=4) returned 0 [0180.386] GetKeyState (nVirtKey=5) returned 0 [0180.386] GetKeyState (nVirtKey=6) returned 0 [0180.386] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0180.386] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0180.386] WaitMessage () returned 1 [0183.306] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0183.306] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900386) returned 0x1 [0183.306] IsWindowUnicode (hWnd=0x201d0) returned 1 [0183.306] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0183.306] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900386) returned 0x1 [0183.306] SetCursor (hCursor=0x10003) returned 0x10003 [0183.307] TranslateMessage (lpMsg=0x1ef250) returned 0 [0183.307] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0183.307] GetKeyState (nVirtKey=1) returned 0 [0183.307] GetKeyState (nVirtKey=2) returned 0 [0183.307] GetKeyState (nVirtKey=4) returned 0 [0183.307] GetKeyState (nVirtKey=5) returned 0 [0183.307] GetKeyState (nVirtKey=6) returned 0 [0183.307] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0183.307] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0183.307] WaitMessage () returned 1 [0183.365] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0183.365] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900386) returned 0x1 [0183.365] IsWindowUnicode (hWnd=0x201d0) returned 1 [0183.365] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0183.365] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900386) returned 0x1 [0183.365] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0183.365] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1df0241) returned 0x0 [0183.365] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0183.365] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0183.365] SetCursor (hCursor=0x10003) returned 0x10003 [0183.365] TranslateMessage (lpMsg=0x1ef250) returned 0 [0183.366] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0183.366] GetKeyState (nVirtKey=1) returned -127 [0183.366] GetKeyState (nVirtKey=2) returned 0 [0183.366] GetKeyState (nVirtKey=4) returned 0 [0183.366] GetKeyState (nVirtKey=5) returned 0 [0183.366] GetKeyState (nVirtKey=6) returned 0 [0183.366] IsWindowVisible (hWnd=0x201d0) returned 1 [0183.366] IsWindowEnabled (hWnd=0x201d0) returned 1 [0183.366] SetFocus (hWnd=0x201d0) returned 0x201d0 [0183.366] GetFocus () returned 0x201d0 [0183.366] GetFocus () returned 0x201d0 [0183.366] GetFocus () returned 0x201d0 [0183.366] GetKeyState (nVirtKey=1) returned -127 [0183.366] GetKeyState (nVirtKey=2) returned 0 [0183.366] GetKeyState (nVirtKey=4) returned 0 [0183.366] GetKeyState (nVirtKey=5) returned 0 [0183.366] GetKeyState (nVirtKey=6) returned 0 [0183.366] GetCapture () returned 0x0 [0183.366] SetCapture (hWnd=0x201d0) returned 0x0 [0183.366] GetKeyState (nVirtKey=1) returned -127 [0183.366] GetKeyState (nVirtKey=2) returned 0 [0183.366] GetKeyState (nVirtKey=4) returned 0 [0183.366] GetKeyState (nVirtKey=5) returned 0 [0183.366] GetKeyState (nVirtKey=6) returned 0 [0183.366] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0183.366] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0183.367] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0183.367] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0183.367] TranslateMessage (lpMsg=0x1ef250) returned 0 [0183.367] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0183.367] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0183.367] IsWindowUnicode (hWnd=0x201d0) returned 1 [0183.367] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0183.367] TranslateMessage (lpMsg=0x1ef250) returned 0 [0183.367] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0183.367] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x267ee10, cPoints=0x1 | out: lpPoints=0x267ee10) returned 42533703 [0183.367] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0183.367] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0183.367] UpdateWindow (hWnd=0x201d0) returned 1 [0183.367] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0183.367] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0183.367] CreateCompatibleDC (hdc=0x160107c7) returned 0x3a010810 [0183.367] SelectObject (hdc=0x3a010810, h=0x490500d1) returned 0x185000f [0183.367] GdipCreateFromHDC (hdc=0x3a010810, graphics=0x1eea5c) returned 0x0 [0183.367] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0183.367] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0183.367] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0183.367] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0183.368] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0183.368] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0183.368] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0183.368] LocalFree (hMem=0x416cb8) returned 0x0 [0183.368] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0183.368] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0183.368] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0183.368] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0183.368] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0183.368] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd250dbd) returned 0x0 [0183.368] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0183.368] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0183.368] GetCurrentObject (hdc=0x3a010810, type=0x1) returned 0x1b00017 [0183.368] GetCurrentObject (hdc=0x3a010810, type=0x2) returned 0x1900010 [0183.368] GetCurrentObject (hdc=0x3a010810, type=0x7) returned 0x490500d1 [0183.368] GetCurrentObject (hdc=0x3a010810, type=0x6) returned 0x18a002e [0183.368] SaveDC (hdc=0x3a010810) returned 1 [0183.368] GetNearestColor (hdc=0x3a010810, color=0xf5f5f5) returned 0xf5f5f5 [0183.368] GetNearestColor (hdc=0x3a010810, color=0x515151) returned 0x515151 [0183.368] GetNearestColor (hdc=0x3a010810, color=0x0) returned 0x0 [0183.369] GetNearestColor (hdc=0x3a010810, color=0x515151) returned 0x515151 [0183.369] GetNearestColor (hdc=0x3a010810, color=0x0) returned 0x0 [0183.369] GetNearestColor (hdc=0x3a010810, color=0xfafafa) returned 0xfafafa [0183.369] GetNearestColor (hdc=0x3a010810, color=0xe0e0e0) returned 0xe0e0e0 [0183.369] GetNearestColor (hdc=0x3a010810, color=0xdcdcdc) returned 0xdcdcdc [0183.369] GetNearestColor (hdc=0x3a010810, color=0x0) returned 0x0 [0183.369] RestoreDC (hdc=0x3a010810, nSavedDC=-1) returned 1 [0183.369] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3a010810) returned 0x0 [0183.369] IsAppThemed () returned 0x1 [0183.369] GetThemeAppProperties () returned 0x3 [0183.369] GetThemeAppProperties () returned 0x3 [0183.369] IsAppThemed () returned 0x1 [0183.369] GetThemeAppProperties () returned 0x3 [0183.369] GetThemeAppProperties () returned 0x3 [0183.369] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x267f514 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0183.369] IsAppThemed () returned 0x1 [0183.369] GetThemeAppProperties () returned 0x3 [0183.369] GetThemeAppProperties () returned 0x3 [0183.369] IsAppThemed () returned 0x1 [0183.369] GetThemeAppProperties () returned 0x3 [0183.369] GetThemeAppProperties () returned 0x3 [0183.369] IsAppThemed () returned 0x1 [0183.369] GetThemeAppProperties () returned 0x3 [0183.369] GetThemeAppProperties () returned 0x3 [0183.369] IsAppThemed () returned 0x1 [0183.369] GetThemeAppProperties () returned 0x3 [0183.370] GetThemeAppProperties () returned 0x3 [0183.370] IsThemePartDefined () returned 0x1 [0183.370] IsAppThemed () returned 0x1 [0183.370] GetThemeAppProperties () returned 0x3 [0183.370] GetThemeAppProperties () returned 0x3 [0183.370] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0183.370] IsAppThemed () returned 0x1 [0183.370] GetThemeAppProperties () returned 0x3 [0183.370] GetThemeAppProperties () returned 0x3 [0183.370] IsAppThemed () returned 0x1 [0183.370] GetThemeAppProperties () returned 0x3 [0183.370] GetThemeAppProperties () returned 0x3 [0183.370] IsThemePartDefined () returned 0x1 [0183.370] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0183.370] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0183.370] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0183.370] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0183.370] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0183.370] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0183.370] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0183.370] LocalFree (hMem=0x416cb8) returned 0x0 [0183.370] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0183.370] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0183.370] LocalFree (hMem=0x416cb8) returned 0x0 [0183.370] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0183.370] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0183.370] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0183.370] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0183.370] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0183.371] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0183.371] GetCurrentObject (hdc=0x3a010810, type=0x1) returned 0x1b00017 [0183.371] GetCurrentObject (hdc=0x3a010810, type=0x2) returned 0x1900010 [0183.371] GetCurrentObject (hdc=0x3a010810, type=0x7) returned 0x490500d1 [0183.371] GetCurrentObject (hdc=0x3a010810, type=0x6) returned 0x18a002e [0183.371] SaveDC (hdc=0x3a010810) returned 1 [0183.371] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c040813 [0183.371] GetClipRgn (hdc=0x3a010810, hrgn=0x4c040813) returned 0 [0183.371] SelectClipRgn (hdc=0x3a010810, hrgn=0x30040246) returned 2 [0183.371] DeleteObject (ho=0x4c040813) returned 1 [0183.371] DeleteObject (ho=0x30040246) returned 1 [0183.371] OffsetViewportOrgEx (in: hdc=0x3a010810, x=0, y=0, lppt=0x267fbc4 | out: lppt=0x267fbc4) returned 1 [0183.371] DrawThemeParentBackground () returned 0x0 [0183.371] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0183.371] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0183.371] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0183.371] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0183.371] GetSystemMetrics (nIndex=42) returned 0 [0183.371] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0183.371] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0183.371] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0183.372] GetCurrentObject (hdc=0x3a010810, type=0x1) returned 0x1b00017 [0183.372] GetCurrentObject (hdc=0x3a010810, type=0x2) returned 0x1900010 [0183.372] GetCurrentObject (hdc=0x3a010810, type=0x7) returned 0x490500d1 [0183.372] GetCurrentObject (hdc=0x3a010810, type=0x6) returned 0x18a002e [0183.372] SaveDC (hdc=0x3a010810) returned 2 [0183.372] GetNearestColor (hdc=0x3a010810, color=0xf5f5f5) returned 0xf5f5f5 [0183.372] CreateSolidBrush (color=0xf5f5f5) returned 0x98100244 [0183.372] FillRect (hDC=0x3a010810, lprc=0x1ee2d0, hbr=0x98100244) returned 1 [0183.372] DeleteObject (ho=0x98100244) returned 1 [0183.372] RestoreDC (hdc=0x3a010810, nSavedDC=-1) returned 1 [0183.372] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0183.372] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0183.372] GetSystemMetrics (nIndex=42) returned 0 [0183.372] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0183.372] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0183.372] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0183.372] GetCurrentObject (hdc=0x3a010810, type=0x1) returned 0x1b00017 [0183.372] GetCurrentObject (hdc=0x3a010810, type=0x2) returned 0x1900010 [0183.372] GetCurrentObject (hdc=0x3a010810, type=0x7) returned 0x490500d1 [0183.372] GetCurrentObject (hdc=0x3a010810, type=0x6) returned 0x18a002e [0183.372] SaveDC (hdc=0x3a010810) returned 2 [0183.372] GetNearestColor (hdc=0x3a010810, color=0xf5f5f5) returned 0xf5f5f5 [0183.373] CreateSolidBrush (color=0xf5f5f5) returned 0x99100244 [0183.373] FillRect (hDC=0x3a010810, lprc=0x1ee270, hbr=0x99100244) returned 1 [0183.373] DeleteObject (ho=0x99100244) returned 1 [0183.373] RestoreDC (hdc=0x3a010810, nSavedDC=-1) returned 1 [0183.373] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0183.373] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0183.373] GetSystemMetrics (nIndex=42) returned 0 [0183.373] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0183.373] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0183.373] RestoreDC (hdc=0x3a010810, nSavedDC=-1) returned 1 [0183.373] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3a010810) returned 0x0 [0183.373] IsAppThemed () returned 0x1 [0183.373] GetThemeAppProperties () returned 0x3 [0183.373] GetThemeAppProperties () returned 0x3 [0183.373] IsAppThemed () returned 0x1 [0183.373] GetThemeAppProperties () returned 0x3 [0183.373] GetThemeAppProperties () returned 0x3 [0183.373] IsThemePartDefined () returned 0x1 [0183.373] GdipCreateRegion (region=0x1ee764) returned 0x0 [0183.373] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0183.373] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0183.373] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0183.373] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0183.373] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0183.373] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0183.374] LocalFree (hMem=0x416cb8) returned 0x0 [0183.374] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0183.374] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0183.374] LocalFree (hMem=0x416cb8) returned 0x0 [0183.374] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0183.374] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0183.374] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0183.374] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0183.374] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0183.374] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0183.374] GetCurrentObject (hdc=0x3a010810, type=0x1) returned 0x1b00017 [0183.374] GetCurrentObject (hdc=0x3a010810, type=0x2) returned 0x1900010 [0183.374] GetCurrentObject (hdc=0x3a010810, type=0x7) returned 0x490500d1 [0183.374] GetCurrentObject (hdc=0x3a010810, type=0x6) returned 0x18a002e [0183.374] SaveDC (hdc=0x3a010810) returned 1 [0183.374] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x31040246 [0183.374] GetClipRgn (hdc=0x3a010810, hrgn=0x31040246) returned 0 [0183.374] SelectClipRgn (hdc=0x3a010810, hrgn=0x4e040813) returned 2 [0183.374] DeleteObject (ho=0x31040246) returned 1 [0183.374] DeleteObject (ho=0x4e040813) returned 1 [0183.374] OffsetViewportOrgEx (in: hdc=0x3a010810, x=0, y=0, lppt=0x2680404 | out: lppt=0x2680404) returned 1 [0183.374] IsAppThemed () returned 0x1 [0183.375] GetThemeAppProperties () returned 0x3 [0183.375] GetThemeAppProperties () returned 0x3 [0183.375] DrawThemeBackground () returned 0x0 [0183.375] RestoreDC (hdc=0x3a010810, nSavedDC=-1) returned 1 [0183.375] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3a010810) returned 0x0 [0183.375] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0183.375] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0183.375] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0183.375] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0183.375] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0183.375] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0183.375] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0183.375] LocalFree (hMem=0x416cb8) returned 0x0 [0183.375] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0183.375] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0183.375] LocalFree (hMem=0x416cb8) returned 0x0 [0183.375] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0183.375] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0183.375] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0183.375] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0183.376] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0183.376] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0183.376] GetCurrentObject (hdc=0x3a010810, type=0x1) returned 0x1b00017 [0183.376] GetCurrentObject (hdc=0x3a010810, type=0x2) returned 0x1900010 [0183.376] GetCurrentObject (hdc=0x3a010810, type=0x7) returned 0x490500d1 [0183.376] GetCurrentObject (hdc=0x3a010810, type=0x6) returned 0x18a002e [0183.376] SaveDC (hdc=0x3a010810) returned 1 [0183.376] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f040813 [0183.376] GetClipRgn (hdc=0x3a010810, hrgn=0x4f040813) returned 0 [0183.376] SelectClipRgn (hdc=0x3a010810, hrgn=0x32040246) returned 2 [0183.376] DeleteObject (ho=0x4f040813) returned 1 [0183.376] DeleteObject (ho=0x32040246) returned 1 [0183.376] OffsetViewportOrgEx (in: hdc=0x3a010810, x=0, y=0, lppt=0x26806d8 | out: lppt=0x26806d8) returned 1 [0183.376] IsAppThemed () returned 0x1 [0183.376] GetThemeAppProperties () returned 0x3 [0183.376] GetThemeAppProperties () returned 0x3 [0183.376] GetThemeBackgroundContentRect () returned 0x0 [0183.376] RestoreDC (hdc=0x3a010810, nSavedDC=-1) returned 1 [0183.376] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3a010810) returned 0x0 [0183.376] IsAppThemed () returned 0x1 [0183.376] GetThemeAppProperties () returned 0x3 [0183.376] GetThemeAppProperties () returned 0x3 [0183.376] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0183.376] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0183.376] GetCurrentObject (hdc=0x3a010810, type=0x1) returned 0x1b00017 [0183.377] GetCurrentObject (hdc=0x3a010810, type=0x2) returned 0x1900010 [0183.377] GetCurrentObject (hdc=0x3a010810, type=0x7) returned 0x490500d1 [0183.377] GetCurrentObject (hdc=0x3a010810, type=0x6) returned 0x18a002e [0183.377] SaveDC (hdc=0x3a010810) returned 1 [0183.377] GetTextAlign (hdc=0x3a010810) returned 0x0 [0183.377] GetTextColor (hdc=0x3a010810) returned 0x0 [0183.377] GetCurrentObject (hdc=0x3a010810, type=0x6) returned 0x18a002e [0183.377] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0183.377] SelectObject (hdc=0x3a010810, h=0x220a081a) returned 0x18a002e [0183.377] GetBkMode (hdc=0x3a010810) returned 2 [0183.377] SetBkMode (hdc=0x3a010810, mode=1) returned 2 [0183.377] DrawTextExW (in: hdc=0x3a010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2680a6c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0183.377] DrawTextExW (in: hdc=0x3a010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2680a6c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0183.377] RestoreDC (hdc=0x3a010810, nSavedDC=-1) returned 1 [0183.377] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3a010810) returned 0x0 [0183.377] GetFocus () returned 0x201d0 [0183.377] IsAppThemed () returned 0x1 [0183.377] GetThemeAppProperties () returned 0x3 [0183.378] GetThemeAppProperties () returned 0x3 [0183.378] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0183.378] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x3a010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0183.378] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3a010810) returned 0x0 [0183.378] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0183.378] SelectObject (hdc=0x3a010810, h=0x185000f) returned 0x490500d1 [0183.378] DeleteDC (hdc=0x3a010810) returned 1 [0183.378] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0183.378] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0183.378] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2680b68, cPoints=0x1 | out: lpPoints=0x2680b68) returned 42533703 [0183.378] WindowFromPoint (Point=0x386) returned 0x201d0 [0183.378] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900386) returned 0x1 [0183.378] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0183.378] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0183.378] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0183.378] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0183.378] GetSystemMetrics (nIndex=42) returned 0 [0183.378] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0183.378] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0183.378] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0183.378] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0183.378] GetCapture () returned 0x201d0 [0183.379] ReleaseCapture () returned 1 [0183.379] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0183.379] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0183.379] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900386) returned 0x1 [0183.379] IsWindowUnicode (hWnd=0x201d0) returned 1 [0183.379] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0183.379] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2900386) returned 0x1 [0183.379] SetCursor (hCursor=0x10003) returned 0x10003 [0183.379] TranslateMessage (lpMsg=0x1ef250) returned 0 [0183.379] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0183.379] GetKeyState (nVirtKey=1) returned 1 [0183.379] GetKeyState (nVirtKey=2) returned 0 [0183.379] GetKeyState (nVirtKey=4) returned 0 [0183.379] GetKeyState (nVirtKey=5) returned 0 [0183.379] GetKeyState (nVirtKey=6) returned 0 [0183.379] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0183.379] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0183.379] WaitMessage () returned 1 [0186.426] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0186.426] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603f0) returned 0x1 [0186.426] IsWindowUnicode (hWnd=0x201d0) returned 1 [0186.426] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0186.426] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603f0) returned 0x1 [0186.426] SetCursor (hCursor=0x10003) returned 0x10003 [0186.426] TranslateMessage (lpMsg=0x1ef250) returned 0 [0186.426] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0186.427] GetKeyState (nVirtKey=1) returned 1 [0186.427] GetKeyState (nVirtKey=2) returned 0 [0186.427] GetKeyState (nVirtKey=4) returned 0 [0186.427] GetKeyState (nVirtKey=5) returned 0 [0186.427] GetKeyState (nVirtKey=6) returned 0 [0186.427] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0186.427] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0186.427] WaitMessage () returned 1 [0186.502] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0186.502] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603f0) returned 0x1 [0186.503] IsWindowUnicode (hWnd=0x201d0) returned 1 [0186.503] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0186.503] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603f0) returned 0x1 [0186.503] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0186.503] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e502ab) returned 0x0 [0186.504] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0186.504] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0186.504] SetCursor (hCursor=0x10003) returned 0x10003 [0186.504] TranslateMessage (lpMsg=0x1ef250) returned 0 [0186.504] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0186.504] GetKeyState (nVirtKey=1) returned -128 [0186.504] GetKeyState (nVirtKey=2) returned 0 [0186.504] GetKeyState (nVirtKey=4) returned 0 [0186.504] GetKeyState (nVirtKey=5) returned 0 [0186.504] GetKeyState (nVirtKey=6) returned 0 [0186.504] IsWindowVisible (hWnd=0x201d0) returned 1 [0186.504] IsWindowEnabled (hWnd=0x201d0) returned 1 [0186.504] SetFocus (hWnd=0x201d0) returned 0x201d0 [0186.504] GetFocus () returned 0x201d0 [0186.504] GetFocus () returned 0x201d0 [0186.504] GetFocus () returned 0x201d0 [0186.504] GetKeyState (nVirtKey=1) returned -128 [0186.504] GetKeyState (nVirtKey=2) returned 0 [0186.504] GetKeyState (nVirtKey=4) returned 0 [0186.504] GetKeyState (nVirtKey=5) returned 0 [0186.504] GetKeyState (nVirtKey=6) returned 0 [0186.504] GetCapture () returned 0x0 [0186.504] SetCapture (hWnd=0x201d0) returned 0x0 [0186.504] GetKeyState (nVirtKey=1) returned -128 [0186.504] GetKeyState (nVirtKey=2) returned 0 [0186.504] GetKeyState (nVirtKey=4) returned 0 [0186.504] GetKeyState (nVirtKey=5) returned 0 [0186.505] GetKeyState (nVirtKey=6) returned 0 [0186.505] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0186.505] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0186.505] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0186.505] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0186.505] TranslateMessage (lpMsg=0x1ef250) returned 0 [0186.505] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0186.505] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0186.505] IsWindowUnicode (hWnd=0x201d0) returned 1 [0186.505] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0186.505] TranslateMessage (lpMsg=0x1ef250) returned 0 [0186.505] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0186.505] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2680c8c, cPoints=0x1 | out: lpPoints=0x2680c8c) returned 42533703 [0186.505] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0186.505] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0186.505] UpdateWindow (hWnd=0x201d0) returned 1 [0186.505] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0186.505] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0186.505] CreateCompatibleDC (hdc=0x160107c7) returned 0x3b010810 [0186.505] SelectObject (hdc=0x3b010810, h=0x490500d1) returned 0x185000f [0186.505] GdipCreateFromHDC (hdc=0x3b010810, graphics=0x1eea5c) returned 0x0 [0186.506] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0186.506] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0186.506] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0186.506] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0186.506] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0186.506] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0186.506] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0186.506] LocalFree (hMem=0x416cb8) returned 0x0 [0186.506] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0186.506] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0186.506] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0186.506] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0186.506] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0186.506] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd230dbd) returned 0x0 [0186.506] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0186.506] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0186.506] GetCurrentObject (hdc=0x3b010810, type=0x1) returned 0x1b00017 [0186.506] GetCurrentObject (hdc=0x3b010810, type=0x2) returned 0x1900010 [0186.507] GetCurrentObject (hdc=0x3b010810, type=0x7) returned 0x490500d1 [0186.507] GetCurrentObject (hdc=0x3b010810, type=0x6) returned 0x18a002e [0186.507] SaveDC (hdc=0x3b010810) returned 1 [0186.507] GetNearestColor (hdc=0x3b010810, color=0xf5f5f5) returned 0xf5f5f5 [0186.507] GetNearestColor (hdc=0x3b010810, color=0x515151) returned 0x515151 [0186.507] GetNearestColor (hdc=0x3b010810, color=0x0) returned 0x0 [0186.507] GetNearestColor (hdc=0x3b010810, color=0x515151) returned 0x515151 [0186.507] GetNearestColor (hdc=0x3b010810, color=0x0) returned 0x0 [0186.507] GetNearestColor (hdc=0x3b010810, color=0xfafafa) returned 0xfafafa [0186.507] GetNearestColor (hdc=0x3b010810, color=0xe0e0e0) returned 0xe0e0e0 [0186.507] GetNearestColor (hdc=0x3b010810, color=0xdcdcdc) returned 0xdcdcdc [0186.507] GetNearestColor (hdc=0x3b010810, color=0x0) returned 0x0 [0186.507] RestoreDC (hdc=0x3b010810, nSavedDC=-1) returned 1 [0186.507] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010810) returned 0x0 [0186.507] IsAppThemed () returned 0x1 [0186.507] GetThemeAppProperties () returned 0x3 [0186.507] GetThemeAppProperties () returned 0x3 [0186.507] IsAppThemed () returned 0x1 [0186.507] GetThemeAppProperties () returned 0x3 [0186.507] GetThemeAppProperties () returned 0x3 [0186.508] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2681390 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0186.508] IsAppThemed () returned 0x1 [0186.508] GetThemeAppProperties () returned 0x3 [0186.508] GetThemeAppProperties () returned 0x3 [0186.508] IsAppThemed () returned 0x1 [0186.508] GetThemeAppProperties () returned 0x3 [0186.508] GetThemeAppProperties () returned 0x3 [0186.508] IsAppThemed () returned 0x1 [0186.508] GetThemeAppProperties () returned 0x3 [0186.508] GetThemeAppProperties () returned 0x3 [0186.508] IsAppThemed () returned 0x1 [0186.508] GetThemeAppProperties () returned 0x3 [0186.508] GetThemeAppProperties () returned 0x3 [0186.508] IsThemePartDefined () returned 0x1 [0186.508] IsAppThemed () returned 0x1 [0186.508] GetThemeAppProperties () returned 0x3 [0186.508] GetThemeAppProperties () returned 0x3 [0186.508] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0186.508] IsAppThemed () returned 0x1 [0186.508] GetThemeAppProperties () returned 0x3 [0186.509] GetThemeAppProperties () returned 0x3 [0186.509] IsAppThemed () returned 0x1 [0186.509] GetThemeAppProperties () returned 0x3 [0186.509] GetThemeAppProperties () returned 0x3 [0186.509] IsThemePartDefined () returned 0x1 [0186.509] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0186.509] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0186.509] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0186.509] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0186.509] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0186.509] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0186.509] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0186.509] LocalFree (hMem=0x416cb8) returned 0x0 [0186.509] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0186.509] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0186.509] LocalFree (hMem=0x416cb8) returned 0x0 [0186.509] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0186.509] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0186.509] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0186.509] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0186.509] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0186.509] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0186.509] GetCurrentObject (hdc=0x3b010810, type=0x1) returned 0x1b00017 [0186.509] GetCurrentObject (hdc=0x3b010810, type=0x2) returned 0x1900010 [0186.509] GetCurrentObject (hdc=0x3b010810, type=0x7) returned 0x490500d1 [0186.509] GetCurrentObject (hdc=0x3b010810, type=0x6) returned 0x18a002e [0186.510] SaveDC (hdc=0x3b010810) returned 1 [0186.510] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x33040246 [0186.510] GetClipRgn (hdc=0x3b010810, hrgn=0x33040246) returned 0 [0186.510] SelectClipRgn (hdc=0x3b010810, hrgn=0x53040813) returned 2 [0186.510] DeleteObject (ho=0x33040246) returned 1 [0186.510] DeleteObject (ho=0x53040813) returned 1 [0186.510] OffsetViewportOrgEx (in: hdc=0x3b010810, x=0, y=0, lppt=0x2681a40 | out: lppt=0x2681a40) returned 1 [0186.510] DrawThemeParentBackground () returned 0x0 [0186.510] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0186.510] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0186.510] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0186.510] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0186.510] GetSystemMetrics (nIndex=42) returned 0 [0186.510] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0186.510] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0186.510] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0186.510] GetCurrentObject (hdc=0x3b010810, type=0x1) returned 0x1b00017 [0186.510] GetCurrentObject (hdc=0x3b010810, type=0x2) returned 0x1900010 [0186.510] GetCurrentObject (hdc=0x3b010810, type=0x7) returned 0x490500d1 [0186.510] GetCurrentObject (hdc=0x3b010810, type=0x6) returned 0x18a002e [0186.510] SaveDC (hdc=0x3b010810) returned 2 [0186.511] GetNearestColor (hdc=0x3b010810, color=0xf5f5f5) returned 0xf5f5f5 [0186.511] CreateSolidBrush (color=0xf5f5f5) returned 0x9a100244 [0186.511] FillRect (hDC=0x3b010810, lprc=0x1ee2d0, hbr=0x9a100244) returned 1 [0186.511] DeleteObject (ho=0x9a100244) returned 1 [0186.511] RestoreDC (hdc=0x3b010810, nSavedDC=-1) returned 1 [0186.511] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0186.511] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0186.511] GetSystemMetrics (nIndex=42) returned 0 [0186.511] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0186.511] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0186.511] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0186.511] GetCurrentObject (hdc=0x3b010810, type=0x1) returned 0x1b00017 [0186.511] GetCurrentObject (hdc=0x3b010810, type=0x2) returned 0x1900010 [0186.511] GetCurrentObject (hdc=0x3b010810, type=0x7) returned 0x490500d1 [0186.511] GetCurrentObject (hdc=0x3b010810, type=0x6) returned 0x18a002e [0186.511] SaveDC (hdc=0x3b010810) returned 2 [0186.511] GetNearestColor (hdc=0x3b010810, color=0xf5f5f5) returned 0xf5f5f5 [0186.511] CreateSolidBrush (color=0xf5f5f5) returned 0x9b100244 [0186.511] FillRect (hDC=0x3b010810, lprc=0x1ee270, hbr=0x9b100244) returned 1 [0186.512] DeleteObject (ho=0x9b100244) returned 1 [0186.512] RestoreDC (hdc=0x3b010810, nSavedDC=-1) returned 1 [0186.512] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0186.512] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0186.512] GetSystemMetrics (nIndex=42) returned 0 [0186.512] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0186.512] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0186.512] RestoreDC (hdc=0x3b010810, nSavedDC=-1) returned 1 [0186.512] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010810) returned 0x0 [0186.512] IsAppThemed () returned 0x1 [0186.512] GetThemeAppProperties () returned 0x3 [0186.512] GetThemeAppProperties () returned 0x3 [0186.512] IsAppThemed () returned 0x1 [0186.512] GetThemeAppProperties () returned 0x3 [0186.512] GetThemeAppProperties () returned 0x3 [0186.512] IsThemePartDefined () returned 0x1 [0186.512] GdipCreateRegion (region=0x1ee764) returned 0x0 [0186.512] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0186.512] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0186.512] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0186.512] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0186.512] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0186.512] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0186.512] LocalFree (hMem=0x416cb8) returned 0x0 [0186.512] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0186.512] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0186.513] LocalFree (hMem=0x416cb8) returned 0x0 [0186.513] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0186.513] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0186.513] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0186.513] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0186.513] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0186.513] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0186.513] GetCurrentObject (hdc=0x3b010810, type=0x1) returned 0x1b00017 [0186.513] GetCurrentObject (hdc=0x3b010810, type=0x2) returned 0x1900010 [0186.513] GetCurrentObject (hdc=0x3b010810, type=0x7) returned 0x490500d1 [0186.513] GetCurrentObject (hdc=0x3b010810, type=0x6) returned 0x18a002e [0186.513] SaveDC (hdc=0x3b010810) returned 1 [0186.513] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x54040813 [0186.513] GetClipRgn (hdc=0x3b010810, hrgn=0x54040813) returned 0 [0186.513] SelectClipRgn (hdc=0x3b010810, hrgn=0x35040246) returned 2 [0186.513] DeleteObject (ho=0x54040813) returned 1 [0186.513] DeleteObject (ho=0x35040246) returned 1 [0186.513] OffsetViewportOrgEx (in: hdc=0x3b010810, x=0, y=0, lppt=0x2682280 | out: lppt=0x2682280) returned 1 [0186.513] IsAppThemed () returned 0x1 [0186.513] GetThemeAppProperties () returned 0x3 [0186.513] GetThemeAppProperties () returned 0x3 [0186.513] DrawThemeBackground () returned 0x0 [0186.513] RestoreDC (hdc=0x3b010810, nSavedDC=-1) returned 1 [0186.514] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010810) returned 0x0 [0186.514] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0186.514] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0186.514] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0186.514] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0186.514] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0186.514] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0186.514] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0186.514] LocalFree (hMem=0x416cb8) returned 0x0 [0186.514] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0186.514] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0186.514] LocalFree (hMem=0x416cb8) returned 0x0 [0186.514] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0186.514] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0186.514] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0186.514] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0186.514] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0186.514] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0186.514] GetCurrentObject (hdc=0x3b010810, type=0x1) returned 0x1b00017 [0186.514] GetCurrentObject (hdc=0x3b010810, type=0x2) returned 0x1900010 [0186.514] GetCurrentObject (hdc=0x3b010810, type=0x7) returned 0x490500d1 [0186.514] GetCurrentObject (hdc=0x3b010810, type=0x6) returned 0x18a002e [0186.515] SaveDC (hdc=0x3b010810) returned 1 [0186.515] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x36040246 [0186.515] GetClipRgn (hdc=0x3b010810, hrgn=0x36040246) returned 0 [0186.515] SelectClipRgn (hdc=0x3b010810, hrgn=0x55040813) returned 2 [0186.515] DeleteObject (ho=0x36040246) returned 1 [0186.515] DeleteObject (ho=0x55040813) returned 1 [0186.515] OffsetViewportOrgEx (in: hdc=0x3b010810, x=0, y=0, lppt=0x2682554 | out: lppt=0x2682554) returned 1 [0186.515] IsAppThemed () returned 0x1 [0186.515] GetThemeAppProperties () returned 0x3 [0186.515] GetThemeAppProperties () returned 0x3 [0186.515] GetThemeBackgroundContentRect () returned 0x0 [0186.515] RestoreDC (hdc=0x3b010810, nSavedDC=-1) returned 1 [0186.515] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010810) returned 0x0 [0186.515] IsAppThemed () returned 0x1 [0186.515] GetThemeAppProperties () returned 0x3 [0186.515] GetThemeAppProperties () returned 0x3 [0186.515] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0186.515] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0186.515] GetCurrentObject (hdc=0x3b010810, type=0x1) returned 0x1b00017 [0186.515] GetCurrentObject (hdc=0x3b010810, type=0x2) returned 0x1900010 [0186.515] GetCurrentObject (hdc=0x3b010810, type=0x7) returned 0x490500d1 [0186.515] GetCurrentObject (hdc=0x3b010810, type=0x6) returned 0x18a002e [0186.515] SaveDC (hdc=0x3b010810) returned 1 [0186.515] GetTextAlign (hdc=0x3b010810) returned 0x0 [0186.515] GetTextColor (hdc=0x3b010810) returned 0x0 [0186.516] GetCurrentObject (hdc=0x3b010810, type=0x6) returned 0x18a002e [0186.516] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0186.516] SelectObject (hdc=0x3b010810, h=0x220a081a) returned 0x18a002e [0186.516] GetBkMode (hdc=0x3b010810) returned 2 [0186.516] SetBkMode (hdc=0x3b010810, mode=1) returned 2 [0186.516] DrawTextExW (in: hdc=0x3b010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26828e8 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0186.516] DrawTextExW (in: hdc=0x3b010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26828e8 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0186.516] RestoreDC (hdc=0x3b010810, nSavedDC=-1) returned 1 [0186.516] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010810) returned 0x0 [0186.516] GetFocus () returned 0x201d0 [0186.516] IsAppThemed () returned 0x1 [0186.516] GetThemeAppProperties () returned 0x3 [0186.516] GetThemeAppProperties () returned 0x3 [0186.516] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0186.516] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x3b010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0186.516] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3b010810) returned 0x0 [0186.517] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0186.517] SelectObject (hdc=0x3b010810, h=0x185000f) returned 0x490500d1 [0186.517] DeleteDC (hdc=0x3b010810) returned 1 [0186.517] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0186.517] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0186.517] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26829e4, cPoints=0x1 | out: lpPoints=0x26829e4) returned 42533703 [0186.517] WindowFromPoint (Point=0x3f0) returned 0x201d0 [0186.517] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603f0) returned 0x1 [0186.517] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0186.517] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0186.517] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0186.517] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0186.517] GetSystemMetrics (nIndex=42) returned 0 [0186.517] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0186.517] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0186.517] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0186.517] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0186.517] GetCapture () returned 0x201d0 [0186.517] ReleaseCapture () returned 1 [0186.517] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0186.518] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0186.518] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603f0) returned 0x1 [0186.518] IsWindowUnicode (hWnd=0x201d0) returned 1 [0186.518] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0186.518] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603f0) returned 0x1 [0186.518] SetCursor (hCursor=0x10003) returned 0x10003 [0186.518] TranslateMessage (lpMsg=0x1ef250) returned 0 [0186.518] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0186.518] GetKeyState (nVirtKey=1) returned 0 [0186.518] GetKeyState (nVirtKey=2) returned 0 [0186.518] GetKeyState (nVirtKey=4) returned 0 [0186.518] GetKeyState (nVirtKey=5) returned 0 [0186.518] GetKeyState (nVirtKey=6) returned 0 [0186.518] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0186.518] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0186.518] WaitMessage () returned 1 [0189.547] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0189.547] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603da) returned 0x1 [0189.547] IsWindowUnicode (hWnd=0x201d0) returned 1 [0189.547] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0189.547] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603da) returned 0x1 [0189.547] SetCursor (hCursor=0x10003) returned 0x10003 [0189.547] TranslateMessage (lpMsg=0x1ef250) returned 0 [0189.547] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0189.547] GetKeyState (nVirtKey=1) returned 0 [0189.547] GetKeyState (nVirtKey=2) returned 0 [0189.547] GetKeyState (nVirtKey=4) returned 0 [0189.547] GetKeyState (nVirtKey=5) returned 0 [0189.547] GetKeyState (nVirtKey=6) returned 0 [0189.547] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0189.548] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0189.548] WaitMessage () returned 1 [0189.605] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0189.605] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603da) returned 0x1 [0189.605] IsWindowUnicode (hWnd=0x201d0) returned 1 [0189.605] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0189.605] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603da) returned 0x1 [0189.605] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0189.605] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e50295) returned 0x0 [0189.605] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0189.606] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0189.607] SetCursor (hCursor=0x10003) returned 0x10003 [0189.607] TranslateMessage (lpMsg=0x1ef250) returned 0 [0189.607] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0189.607] GetKeyState (nVirtKey=1) returned -127 [0189.607] GetKeyState (nVirtKey=2) returned 0 [0189.607] GetKeyState (nVirtKey=4) returned 0 [0189.607] GetKeyState (nVirtKey=5) returned 0 [0189.607] GetKeyState (nVirtKey=6) returned 0 [0189.607] IsWindowVisible (hWnd=0x201d0) returned 1 [0189.607] IsWindowEnabled (hWnd=0x201d0) returned 1 [0189.607] SetFocus (hWnd=0x201d0) returned 0x201d0 [0189.607] GetFocus () returned 0x201d0 [0189.607] GetFocus () returned 0x201d0 [0189.607] GetFocus () returned 0x201d0 [0189.607] GetKeyState (nVirtKey=1) returned -127 [0189.607] GetKeyState (nVirtKey=2) returned 0 [0189.607] GetKeyState (nVirtKey=4) returned 0 [0189.607] GetKeyState (nVirtKey=5) returned 0 [0189.607] GetKeyState (nVirtKey=6) returned 0 [0189.607] GetCapture () returned 0x0 [0189.607] SetCapture (hWnd=0x201d0) returned 0x0 [0189.607] GetKeyState (nVirtKey=1) returned -127 [0189.607] GetKeyState (nVirtKey=2) returned 0 [0189.607] GetKeyState (nVirtKey=4) returned 0 [0189.607] GetKeyState (nVirtKey=5) returned 0 [0189.607] GetKeyState (nVirtKey=6) returned 0 [0189.607] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0189.607] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0189.608] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0189.608] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0189.608] TranslateMessage (lpMsg=0x1ef250) returned 0 [0189.608] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0189.608] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0189.608] IsWindowUnicode (hWnd=0x201d0) returned 1 [0189.608] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0189.608] TranslateMessage (lpMsg=0x1ef250) returned 0 [0189.608] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0189.608] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2682b08, cPoints=0x1 | out: lpPoints=0x2682b08) returned 42533703 [0189.608] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0189.608] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0189.608] UpdateWindow (hWnd=0x201d0) returned 1 [0189.608] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0189.608] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0189.608] CreateCompatibleDC (hdc=0x160107c7) returned 0x3c010810 [0189.608] SelectObject (hdc=0x3c010810, h=0x490500d1) returned 0x185000f [0189.608] GdipCreateFromHDC (hdc=0x3c010810, graphics=0x1eea5c) returned 0x0 [0189.608] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0189.609] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0189.609] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0189.609] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0189.609] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0189.609] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0189.609] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0189.609] LocalFree (hMem=0x416cb8) returned 0x0 [0189.609] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0189.609] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0189.609] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0189.609] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0189.609] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0189.609] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd210dbd) returned 0x0 [0189.609] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0189.609] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0189.609] GetCurrentObject (hdc=0x3c010810, type=0x1) returned 0x1b00017 [0189.609] GetCurrentObject (hdc=0x3c010810, type=0x2) returned 0x1900010 [0189.609] GetCurrentObject (hdc=0x3c010810, type=0x7) returned 0x490500d1 [0189.609] GetCurrentObject (hdc=0x3c010810, type=0x6) returned 0x18a002e [0189.609] SaveDC (hdc=0x3c010810) returned 1 [0189.609] GetNearestColor (hdc=0x3c010810, color=0xf5f5f5) returned 0xf5f5f5 [0189.610] GetNearestColor (hdc=0x3c010810, color=0x515151) returned 0x515151 [0189.610] GetNearestColor (hdc=0x3c010810, color=0x0) returned 0x0 [0189.610] GetNearestColor (hdc=0x3c010810, color=0x515151) returned 0x515151 [0189.610] GetNearestColor (hdc=0x3c010810, color=0x0) returned 0x0 [0189.610] GetNearestColor (hdc=0x3c010810, color=0xfafafa) returned 0xfafafa [0189.610] GetNearestColor (hdc=0x3c010810, color=0xe0e0e0) returned 0xe0e0e0 [0189.610] GetNearestColor (hdc=0x3c010810, color=0xdcdcdc) returned 0xdcdcdc [0189.610] GetNearestColor (hdc=0x3c010810, color=0x0) returned 0x0 [0189.610] RestoreDC (hdc=0x3c010810, nSavedDC=-1) returned 1 [0189.610] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3c010810) returned 0x0 [0189.610] IsAppThemed () returned 0x1 [0189.610] GetThemeAppProperties () returned 0x3 [0189.610] GetThemeAppProperties () returned 0x3 [0189.610] IsAppThemed () returned 0x1 [0189.610] GetThemeAppProperties () returned 0x3 [0189.610] GetThemeAppProperties () returned 0x3 [0189.610] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x268320c | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0189.611] IsAppThemed () returned 0x1 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] IsAppThemed () returned 0x1 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] IsAppThemed () returned 0x1 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] IsAppThemed () returned 0x1 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] IsThemePartDefined () returned 0x1 [0189.611] IsAppThemed () returned 0x1 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0189.611] IsAppThemed () returned 0x1 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] IsAppThemed () returned 0x1 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] GetThemeAppProperties () returned 0x3 [0189.611] IsThemePartDefined () returned 0x1 [0189.611] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0189.611] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0189.611] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0189.611] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0189.611] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0189.611] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0189.611] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0189.611] LocalFree (hMem=0x416cb8) returned 0x0 [0189.612] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0189.612] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0189.612] LocalFree (hMem=0x416cb8) returned 0x0 [0189.612] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0189.612] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0189.612] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0189.612] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0189.612] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0189.612] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0189.612] GetCurrentObject (hdc=0x3c010810, type=0x1) returned 0x1b00017 [0189.612] GetCurrentObject (hdc=0x3c010810, type=0x2) returned 0x1900010 [0189.612] GetCurrentObject (hdc=0x3c010810, type=0x7) returned 0x490500d1 [0189.612] GetCurrentObject (hdc=0x3c010810, type=0x6) returned 0x18a002e [0189.612] SaveDC (hdc=0x3c010810) returned 1 [0189.612] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x56040813 [0189.612] GetClipRgn (hdc=0x3c010810, hrgn=0x56040813) returned 0 [0189.612] SelectClipRgn (hdc=0x3c010810, hrgn=0x3a040246) returned 2 [0189.612] DeleteObject (ho=0x56040813) returned 1 [0189.612] DeleteObject (ho=0x3a040246) returned 1 [0189.612] OffsetViewportOrgEx (in: hdc=0x3c010810, x=0, y=0, lppt=0x26838bc | out: lppt=0x26838bc) returned 1 [0189.612] DrawThemeParentBackground () returned 0x0 [0189.613] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0189.613] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0189.613] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0189.613] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0189.613] GetSystemMetrics (nIndex=42) returned 0 [0189.613] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0189.613] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0189.613] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0189.613] GetCurrentObject (hdc=0x3c010810, type=0x1) returned 0x1b00017 [0189.613] GetCurrentObject (hdc=0x3c010810, type=0x2) returned 0x1900010 [0189.613] GetCurrentObject (hdc=0x3c010810, type=0x7) returned 0x490500d1 [0189.613] GetCurrentObject (hdc=0x3c010810, type=0x6) returned 0x18a002e [0189.613] SaveDC (hdc=0x3c010810) returned 2 [0189.613] GetNearestColor (hdc=0x3c010810, color=0xf5f5f5) returned 0xf5f5f5 [0189.613] CreateSolidBrush (color=0xf5f5f5) returned 0x9c100244 [0189.613] FillRect (hDC=0x3c010810, lprc=0x1ee2d0, hbr=0x9c100244) returned 1 [0189.613] DeleteObject (ho=0x9c100244) returned 1 [0189.613] RestoreDC (hdc=0x3c010810, nSavedDC=-1) returned 1 [0189.613] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0189.613] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0189.613] GetSystemMetrics (nIndex=42) returned 0 [0189.613] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0189.613] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0189.614] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0189.614] GetCurrentObject (hdc=0x3c010810, type=0x1) returned 0x1b00017 [0189.614] GetCurrentObject (hdc=0x3c010810, type=0x2) returned 0x1900010 [0189.614] GetCurrentObject (hdc=0x3c010810, type=0x7) returned 0x490500d1 [0189.614] GetCurrentObject (hdc=0x3c010810, type=0x6) returned 0x18a002e [0189.614] SaveDC (hdc=0x3c010810) returned 2 [0189.614] GetNearestColor (hdc=0x3c010810, color=0xf5f5f5) returned 0xf5f5f5 [0189.614] CreateSolidBrush (color=0xf5f5f5) returned 0x9d100244 [0189.614] FillRect (hDC=0x3c010810, lprc=0x1ee270, hbr=0x9d100244) returned 1 [0189.614] DeleteObject (ho=0x9d100244) returned 1 [0189.614] RestoreDC (hdc=0x3c010810, nSavedDC=-1) returned 1 [0189.614] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0189.614] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0189.614] GetSystemMetrics (nIndex=42) returned 0 [0189.614] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0189.614] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0189.614] RestoreDC (hdc=0x3c010810, nSavedDC=-1) returned 1 [0189.614] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3c010810) returned 0x0 [0189.614] IsAppThemed () returned 0x1 [0189.614] GetThemeAppProperties () returned 0x3 [0189.614] GetThemeAppProperties () returned 0x3 [0189.614] IsAppThemed () returned 0x1 [0189.614] GetThemeAppProperties () returned 0x3 [0189.614] GetThemeAppProperties () returned 0x3 [0189.615] IsThemePartDefined () returned 0x1 [0189.615] GdipCreateRegion (region=0x1ee764) returned 0x0 [0189.615] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0189.615] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0189.615] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0189.615] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0189.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0189.615] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0189.615] LocalFree (hMem=0x416cb8) returned 0x0 [0189.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0189.615] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0189.615] LocalFree (hMem=0x416cb8) returned 0x0 [0189.615] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0189.615] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0189.615] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0189.615] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0189.615] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0189.615] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0189.615] GetCurrentObject (hdc=0x3c010810, type=0x1) returned 0x1b00017 [0189.615] GetCurrentObject (hdc=0x3c010810, type=0x2) returned 0x1900010 [0189.615] GetCurrentObject (hdc=0x3c010810, type=0x7) returned 0x490500d1 [0189.615] GetCurrentObject (hdc=0x3c010810, type=0x6) returned 0x18a002e [0189.615] SaveDC (hdc=0x3c010810) returned 1 [0189.616] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b040246 [0189.616] GetClipRgn (hdc=0x3c010810, hrgn=0x3b040246) returned 0 [0189.616] SelectClipRgn (hdc=0x3c010810, hrgn=0x58040813) returned 2 [0189.616] DeleteObject (ho=0x3b040246) returned 1 [0189.616] DeleteObject (ho=0x58040813) returned 1 [0189.616] OffsetViewportOrgEx (in: hdc=0x3c010810, x=0, y=0, lppt=0x26840fc | out: lppt=0x26840fc) returned 1 [0189.616] IsAppThemed () returned 0x1 [0189.616] GetThemeAppProperties () returned 0x3 [0189.616] GetThemeAppProperties () returned 0x3 [0189.616] DrawThemeBackground () returned 0x0 [0189.616] RestoreDC (hdc=0x3c010810, nSavedDC=-1) returned 1 [0189.616] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3c010810) returned 0x0 [0189.616] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0189.616] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0189.616] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0189.616] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0189.616] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0189.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0189.616] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0189.616] LocalFree (hMem=0x416cb8) returned 0x0 [0189.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0189.616] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0189.616] LocalFree (hMem=0x416cb8) returned 0x0 [0189.617] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0189.617] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0189.617] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0189.617] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0189.617] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0189.617] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0189.617] GetCurrentObject (hdc=0x3c010810, type=0x1) returned 0x1b00017 [0189.617] GetCurrentObject (hdc=0x3c010810, type=0x2) returned 0x1900010 [0189.617] GetCurrentObject (hdc=0x3c010810, type=0x7) returned 0x490500d1 [0189.617] GetCurrentObject (hdc=0x3c010810, type=0x6) returned 0x18a002e [0189.617] SaveDC (hdc=0x3c010810) returned 1 [0189.617] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x59040813 [0189.617] GetClipRgn (hdc=0x3c010810, hrgn=0x59040813) returned 0 [0189.617] SelectClipRgn (hdc=0x3c010810, hrgn=0x3c040246) returned 2 [0189.617] DeleteObject (ho=0x59040813) returned 1 [0189.617] DeleteObject (ho=0x3c040246) returned 1 [0189.617] OffsetViewportOrgEx (in: hdc=0x3c010810, x=0, y=0, lppt=0x26843d0 | out: lppt=0x26843d0) returned 1 [0189.617] IsAppThemed () returned 0x1 [0189.617] GetThemeAppProperties () returned 0x3 [0189.617] GetThemeAppProperties () returned 0x3 [0189.617] GetThemeBackgroundContentRect () returned 0x0 [0189.617] RestoreDC (hdc=0x3c010810, nSavedDC=-1) returned 1 [0189.617] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3c010810) returned 0x0 [0189.618] IsAppThemed () returned 0x1 [0189.618] GetThemeAppProperties () returned 0x3 [0189.618] GetThemeAppProperties () returned 0x3 [0189.618] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0189.618] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0189.618] GetCurrentObject (hdc=0x3c010810, type=0x1) returned 0x1b00017 [0189.618] GetCurrentObject (hdc=0x3c010810, type=0x2) returned 0x1900010 [0189.618] GetCurrentObject (hdc=0x3c010810, type=0x7) returned 0x490500d1 [0189.618] GetCurrentObject (hdc=0x3c010810, type=0x6) returned 0x18a002e [0189.618] SaveDC (hdc=0x3c010810) returned 1 [0189.618] GetTextAlign (hdc=0x3c010810) returned 0x0 [0189.618] GetTextColor (hdc=0x3c010810) returned 0x0 [0189.618] GetCurrentObject (hdc=0x3c010810, type=0x6) returned 0x18a002e [0189.618] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0189.618] SelectObject (hdc=0x3c010810, h=0x220a081a) returned 0x18a002e [0189.618] GetBkMode (hdc=0x3c010810) returned 2 [0189.618] SetBkMode (hdc=0x3c010810, mode=1) returned 2 [0189.618] DrawTextExW (in: hdc=0x3c010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2684764 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0189.618] DrawTextExW (in: hdc=0x3c010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2684764 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0189.619] RestoreDC (hdc=0x3c010810, nSavedDC=-1) returned 1 [0189.619] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3c010810) returned 0x0 [0189.619] GetFocus () returned 0x201d0 [0189.619] IsAppThemed () returned 0x1 [0189.619] GetThemeAppProperties () returned 0x3 [0189.619] GetThemeAppProperties () returned 0x3 [0189.619] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0189.619] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x3c010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0189.619] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3c010810) returned 0x0 [0189.619] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0189.619] SelectObject (hdc=0x3c010810, h=0x185000f) returned 0x490500d1 [0189.619] DeleteDC (hdc=0x3c010810) returned 1 [0189.619] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0189.619] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0189.619] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2684860, cPoints=0x1 | out: lpPoints=0x2684860) returned 42533703 [0189.619] WindowFromPoint (Point=0x3da) returned 0x201d0 [0189.619] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603da) returned 0x1 [0189.619] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0189.620] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0189.620] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0189.620] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0189.620] GetSystemMetrics (nIndex=42) returned 0 [0189.620] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0189.620] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0189.620] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0189.620] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0189.620] GetCapture () returned 0x201d0 [0189.620] ReleaseCapture () returned 1 [0189.620] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0189.620] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0189.620] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603da) returned 0x1 [0189.620] IsWindowUnicode (hWnd=0x201d0) returned 1 [0189.620] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0189.620] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29603da) returned 0x1 [0189.620] SetCursor (hCursor=0x10003) returned 0x10003 [0189.620] TranslateMessage (lpMsg=0x1ef250) returned 0 [0189.620] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0189.620] GetKeyState (nVirtKey=1) returned 1 [0189.620] GetKeyState (nVirtKey=2) returned 0 [0189.620] GetKeyState (nVirtKey=4) returned 0 [0189.620] GetKeyState (nVirtKey=5) returned 0 [0189.620] GetKeyState (nVirtKey=6) returned 0 [0189.620] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0189.620] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0189.621] WaitMessage () returned 1 [0192.619] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0192.619] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0392) returned 0x1 [0192.619] IsWindowUnicode (hWnd=0x201d0) returned 1 [0192.619] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0192.619] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0392) returned 0x1 [0192.619] SetCursor (hCursor=0x10003) returned 0x10003 [0192.619] TranslateMessage (lpMsg=0x1ef250) returned 0 [0192.619] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0192.619] GetKeyState (nVirtKey=1) returned 1 [0192.619] GetKeyState (nVirtKey=2) returned 0 [0192.619] GetKeyState (nVirtKey=4) returned 0 [0192.619] GetKeyState (nVirtKey=5) returned 0 [0192.619] GetKeyState (nVirtKey=6) returned 0 [0192.619] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0192.619] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0192.619] WaitMessage () returned 1 [0192.697] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0192.697] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0392) returned 0x1 [0192.697] IsWindowUnicode (hWnd=0x201d0) returned 1 [0192.697] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0192.697] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0392) returned 0x1 [0192.697] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0192.697] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dc024d) returned 0x0 [0192.698] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0192.698] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0192.698] SetCursor (hCursor=0x10003) returned 0x10003 [0192.698] TranslateMessage (lpMsg=0x1ef250) returned 0 [0192.698] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0192.698] GetKeyState (nVirtKey=1) returned -128 [0192.698] GetKeyState (nVirtKey=2) returned 0 [0192.698] GetKeyState (nVirtKey=4) returned 0 [0192.698] GetKeyState (nVirtKey=5) returned 0 [0192.698] GetKeyState (nVirtKey=6) returned 0 [0192.698] IsWindowVisible (hWnd=0x201d0) returned 1 [0192.698] IsWindowEnabled (hWnd=0x201d0) returned 1 [0192.698] SetFocus (hWnd=0x201d0) returned 0x201d0 [0192.698] GetFocus () returned 0x201d0 [0192.698] GetFocus () returned 0x201d0 [0192.698] GetFocus () returned 0x201d0 [0192.698] GetKeyState (nVirtKey=1) returned -128 [0192.698] GetKeyState (nVirtKey=2) returned 0 [0192.698] GetKeyState (nVirtKey=4) returned 0 [0192.698] GetKeyState (nVirtKey=5) returned 0 [0192.698] GetKeyState (nVirtKey=6) returned 0 [0192.698] GetCapture () returned 0x0 [0192.698] SetCapture (hWnd=0x201d0) returned 0x0 [0192.698] GetKeyState (nVirtKey=1) returned -128 [0192.699] GetKeyState (nVirtKey=2) returned 0 [0192.699] GetKeyState (nVirtKey=4) returned 0 [0192.699] GetKeyState (nVirtKey=5) returned 0 [0192.699] GetKeyState (nVirtKey=6) returned 0 [0192.699] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0192.699] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0192.699] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0192.699] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0192.699] TranslateMessage (lpMsg=0x1ef250) returned 0 [0192.699] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0192.699] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0192.699] IsWindowUnicode (hWnd=0x201d0) returned 1 [0192.699] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0192.699] TranslateMessage (lpMsg=0x1ef250) returned 0 [0192.699] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0192.699] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2684984, cPoints=0x1 | out: lpPoints=0x2684984) returned 42533703 [0192.699] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0192.699] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0192.699] UpdateWindow (hWnd=0x201d0) returned 1 [0192.699] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0192.700] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0192.700] CreateCompatibleDC (hdc=0x160107c7) returned 0x3d010810 [0192.700] SelectObject (hdc=0x3d010810, h=0x490500d1) returned 0x185000f [0192.700] GdipCreateFromHDC (hdc=0x3d010810, graphics=0x1eea5c) returned 0x0 [0192.700] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0192.701] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0192.701] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0192.701] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0192.701] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0192.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0192.701] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0192.701] LocalFree (hMem=0x416cb8) returned 0x0 [0192.701] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0192.701] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0192.701] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0192.701] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0192.701] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0192.701] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd1f0dbd) returned 0x0 [0192.701] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0192.701] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0192.701] GetCurrentObject (hdc=0x3d010810, type=0x1) returned 0x1b00017 [0192.701] GetCurrentObject (hdc=0x3d010810, type=0x2) returned 0x1900010 [0192.701] GetCurrentObject (hdc=0x3d010810, type=0x7) returned 0x490500d1 [0192.701] GetCurrentObject (hdc=0x3d010810, type=0x6) returned 0x18a002e [0192.701] SaveDC (hdc=0x3d010810) returned 1 [0192.701] GetNearestColor (hdc=0x3d010810, color=0xf5f5f5) returned 0xf5f5f5 [0192.702] GetNearestColor (hdc=0x3d010810, color=0x515151) returned 0x515151 [0192.702] GetNearestColor (hdc=0x3d010810, color=0x0) returned 0x0 [0192.702] GetNearestColor (hdc=0x3d010810, color=0x515151) returned 0x515151 [0192.702] GetNearestColor (hdc=0x3d010810, color=0x0) returned 0x0 [0192.702] GetNearestColor (hdc=0x3d010810, color=0xfafafa) returned 0xfafafa [0192.702] GetNearestColor (hdc=0x3d010810, color=0xe0e0e0) returned 0xe0e0e0 [0192.702] GetNearestColor (hdc=0x3d010810, color=0xdcdcdc) returned 0xdcdcdc [0192.702] GetNearestColor (hdc=0x3d010810, color=0x0) returned 0x0 [0192.702] RestoreDC (hdc=0x3d010810, nSavedDC=-1) returned 1 [0192.702] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3d010810) returned 0x0 [0192.702] IsAppThemed () returned 0x1 [0192.702] GetThemeAppProperties () returned 0x3 [0192.702] GetThemeAppProperties () returned 0x3 [0192.702] IsAppThemed () returned 0x1 [0192.702] GetThemeAppProperties () returned 0x3 [0192.702] GetThemeAppProperties () returned 0x3 [0192.702] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2685088 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0192.703] IsAppThemed () returned 0x1 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] IsAppThemed () returned 0x1 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] IsAppThemed () returned 0x1 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] IsAppThemed () returned 0x1 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] IsThemePartDefined () returned 0x1 [0192.703] IsAppThemed () returned 0x1 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0192.703] IsAppThemed () returned 0x1 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] IsAppThemed () returned 0x1 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] GetThemeAppProperties () returned 0x3 [0192.703] IsThemePartDefined () returned 0x1 [0192.703] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0192.703] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0192.703] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0192.704] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0192.704] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0192.704] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0192.704] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0192.704] LocalFree (hMem=0x416cb8) returned 0x0 [0192.704] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0192.704] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0192.704] LocalFree (hMem=0x416cb8) returned 0x0 [0192.704] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0192.704] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0192.704] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0192.704] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0192.704] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0192.704] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0192.704] GetCurrentObject (hdc=0x3d010810, type=0x1) returned 0x1b00017 [0192.704] GetCurrentObject (hdc=0x3d010810, type=0x2) returned 0x1900010 [0192.704] GetCurrentObject (hdc=0x3d010810, type=0x7) returned 0x490500d1 [0192.704] GetCurrentObject (hdc=0x3d010810, type=0x6) returned 0x18a002e [0192.704] SaveDC (hdc=0x3d010810) returned 1 [0192.704] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d040246 [0192.704] GetClipRgn (hdc=0x3d010810, hrgn=0x3d040246) returned 0 [0192.704] SelectClipRgn (hdc=0x3d010810, hrgn=0x5d040813) returned 2 [0192.704] DeleteObject (ho=0x3d040246) returned 1 [0192.705] DeleteObject (ho=0x5d040813) returned 1 [0192.705] OffsetViewportOrgEx (in: hdc=0x3d010810, x=0, y=0, lppt=0x2685738 | out: lppt=0x2685738) returned 1 [0192.705] DrawThemeParentBackground () returned 0x0 [0192.705] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0192.705] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0192.705] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0192.705] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0192.705] GetSystemMetrics (nIndex=42) returned 0 [0192.705] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0192.705] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0192.705] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0192.705] GetCurrentObject (hdc=0x3d010810, type=0x1) returned 0x1b00017 [0192.705] GetCurrentObject (hdc=0x3d010810, type=0x2) returned 0x1900010 [0192.705] GetCurrentObject (hdc=0x3d010810, type=0x7) returned 0x490500d1 [0192.705] GetCurrentObject (hdc=0x3d010810, type=0x6) returned 0x18a002e [0192.705] SaveDC (hdc=0x3d010810) returned 2 [0192.705] GetNearestColor (hdc=0x3d010810, color=0xf5f5f5) returned 0xf5f5f5 [0192.705] CreateSolidBrush (color=0xf5f5f5) returned 0x9e100244 [0192.705] FillRect (hDC=0x3d010810, lprc=0x1ee2d0, hbr=0x9e100244) returned 1 [0192.706] DeleteObject (ho=0x9e100244) returned 1 [0192.706] RestoreDC (hdc=0x3d010810, nSavedDC=-1) returned 1 [0192.706] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0192.706] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0192.706] GetSystemMetrics (nIndex=42) returned 0 [0192.706] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0192.706] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0192.706] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0192.706] GetCurrentObject (hdc=0x3d010810, type=0x1) returned 0x1b00017 [0192.706] GetCurrentObject (hdc=0x3d010810, type=0x2) returned 0x1900010 [0192.706] GetCurrentObject (hdc=0x3d010810, type=0x7) returned 0x490500d1 [0192.706] GetCurrentObject (hdc=0x3d010810, type=0x6) returned 0x18a002e [0192.706] SaveDC (hdc=0x3d010810) returned 2 [0192.706] GetNearestColor (hdc=0x3d010810, color=0xf5f5f5) returned 0xf5f5f5 [0192.706] CreateSolidBrush (color=0xf5f5f5) returned 0x9f100244 [0192.706] FillRect (hDC=0x3d010810, lprc=0x1ee270, hbr=0x9f100244) returned 1 [0192.706] DeleteObject (ho=0x9f100244) returned 1 [0192.707] RestoreDC (hdc=0x3d010810, nSavedDC=-1) returned 1 [0192.707] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0192.707] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0192.707] GetSystemMetrics (nIndex=42) returned 0 [0192.707] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0192.707] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0192.707] RestoreDC (hdc=0x3d010810, nSavedDC=-1) returned 1 [0192.707] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3d010810) returned 0x0 [0192.707] IsAppThemed () returned 0x1 [0192.707] GetThemeAppProperties () returned 0x3 [0192.707] GetThemeAppProperties () returned 0x3 [0192.707] IsAppThemed () returned 0x1 [0192.707] GetThemeAppProperties () returned 0x3 [0192.707] GetThemeAppProperties () returned 0x3 [0192.707] IsThemePartDefined () returned 0x1 [0192.707] GdipCreateRegion (region=0x1ee764) returned 0x0 [0192.707] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0192.707] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0192.707] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0192.707] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0192.707] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0192.707] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0192.707] LocalFree (hMem=0x416cb8) returned 0x0 [0192.707] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0192.707] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0192.707] LocalFree (hMem=0x416cb8) returned 0x0 [0192.708] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0192.708] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0192.708] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0192.708] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0192.708] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0192.708] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0192.708] GetCurrentObject (hdc=0x3d010810, type=0x1) returned 0x1b00017 [0192.708] GetCurrentObject (hdc=0x3d010810, type=0x2) returned 0x1900010 [0192.708] GetCurrentObject (hdc=0x3d010810, type=0x7) returned 0x490500d1 [0192.708] GetCurrentObject (hdc=0x3d010810, type=0x6) returned 0x18a002e [0192.708] SaveDC (hdc=0x3d010810) returned 1 [0192.708] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e040813 [0192.708] GetClipRgn (hdc=0x3d010810, hrgn=0x5e040813) returned 0 [0192.708] SelectClipRgn (hdc=0x3d010810, hrgn=0x3f040246) returned 2 [0192.708] DeleteObject (ho=0x5e040813) returned 1 [0192.708] DeleteObject (ho=0x3f040246) returned 1 [0192.708] OffsetViewportOrgEx (in: hdc=0x3d010810, x=0, y=0, lppt=0x2685f78 | out: lppt=0x2685f78) returned 1 [0192.708] IsAppThemed () returned 0x1 [0192.708] GetThemeAppProperties () returned 0x3 [0192.708] GetThemeAppProperties () returned 0x3 [0192.708] DrawThemeBackground () returned 0x0 [0192.709] RestoreDC (hdc=0x3d010810, nSavedDC=-1) returned 1 [0192.709] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3d010810) returned 0x0 [0192.709] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0192.709] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0192.709] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0192.709] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0192.709] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0192.709] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0192.709] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0192.709] LocalFree (hMem=0x416cb8) returned 0x0 [0192.709] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0192.709] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0192.709] LocalFree (hMem=0x416cb8) returned 0x0 [0192.709] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0192.709] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0192.709] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0192.709] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0192.709] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0192.710] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0192.710] GetCurrentObject (hdc=0x3d010810, type=0x1) returned 0x1b00017 [0192.710] GetCurrentObject (hdc=0x3d010810, type=0x2) returned 0x1900010 [0192.710] GetCurrentObject (hdc=0x3d010810, type=0x7) returned 0x490500d1 [0192.710] GetCurrentObject (hdc=0x3d010810, type=0x6) returned 0x18a002e [0192.710] SaveDC (hdc=0x3d010810) returned 1 [0192.710] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x40040246 [0192.710] GetClipRgn (hdc=0x3d010810, hrgn=0x40040246) returned 0 [0192.710] SelectClipRgn (hdc=0x3d010810, hrgn=0x5f040813) returned 2 [0192.710] DeleteObject (ho=0x40040246) returned 1 [0192.710] DeleteObject (ho=0x5f040813) returned 1 [0192.710] OffsetViewportOrgEx (in: hdc=0x3d010810, x=0, y=0, lppt=0x268624c | out: lppt=0x268624c) returned 1 [0192.710] IsAppThemed () returned 0x1 [0192.710] GetThemeAppProperties () returned 0x3 [0192.710] GetThemeAppProperties () returned 0x3 [0192.710] GetThemeBackgroundContentRect () returned 0x0 [0192.710] RestoreDC (hdc=0x3d010810, nSavedDC=-1) returned 1 [0192.710] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3d010810) returned 0x0 [0192.710] IsAppThemed () returned 0x1 [0192.710] GetThemeAppProperties () returned 0x3 [0192.710] GetThemeAppProperties () returned 0x3 [0192.710] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0192.710] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0192.710] GetCurrentObject (hdc=0x3d010810, type=0x1) returned 0x1b00017 [0192.710] GetCurrentObject (hdc=0x3d010810, type=0x2) returned 0x1900010 [0192.711] GetCurrentObject (hdc=0x3d010810, type=0x7) returned 0x490500d1 [0192.711] GetCurrentObject (hdc=0x3d010810, type=0x6) returned 0x18a002e [0192.711] SaveDC (hdc=0x3d010810) returned 1 [0192.711] GetTextAlign (hdc=0x3d010810) returned 0x0 [0192.711] GetTextColor (hdc=0x3d010810) returned 0x0 [0192.711] GetCurrentObject (hdc=0x3d010810, type=0x6) returned 0x18a002e [0192.711] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0192.711] SelectObject (hdc=0x3d010810, h=0x220a081a) returned 0x18a002e [0192.711] GetBkMode (hdc=0x3d010810) returned 2 [0192.711] SetBkMode (hdc=0x3d010810, mode=1) returned 2 [0192.711] DrawTextExW (in: hdc=0x3d010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26865e0 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0192.711] DrawTextExW (in: hdc=0x3d010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26865e0 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0192.712] RestoreDC (hdc=0x3d010810, nSavedDC=-1) returned 1 [0192.713] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3d010810) returned 0x0 [0192.713] GetFocus () returned 0x201d0 [0192.713] IsAppThemed () returned 0x1 [0192.713] GetThemeAppProperties () returned 0x3 [0192.713] GetThemeAppProperties () returned 0x3 [0192.713] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0192.713] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x3d010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0192.714] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3d010810) returned 0x0 [0192.714] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0192.714] SelectObject (hdc=0x3d010810, h=0x185000f) returned 0x490500d1 [0192.714] DeleteDC (hdc=0x3d010810) returned 1 [0192.714] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0192.714] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0192.714] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26866dc, cPoints=0x1 | out: lpPoints=0x26866dc) returned 42533703 [0192.714] WindowFromPoint (Point=0x392) returned 0x201d0 [0192.714] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0392) returned 0x1 [0192.714] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0192.714] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0192.714] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0192.714] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0192.714] GetSystemMetrics (nIndex=42) returned 0 [0192.714] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0192.714] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0192.714] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0192.714] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0192.714] GetCapture () returned 0x201d0 [0192.714] ReleaseCapture () returned 1 [0192.714] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0192.715] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0192.715] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0392) returned 0x1 [0192.715] IsWindowUnicode (hWnd=0x201d0) returned 1 [0192.715] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0192.715] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28d0392) returned 0x1 [0192.715] SetCursor (hCursor=0x10003) returned 0x10003 [0192.715] TranslateMessage (lpMsg=0x1ef250) returned 0 [0192.715] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0192.715] GetKeyState (nVirtKey=1) returned 0 [0192.715] GetKeyState (nVirtKey=2) returned 0 [0192.715] GetKeyState (nVirtKey=4) returned 0 [0192.715] GetKeyState (nVirtKey=5) returned 0 [0192.715] GetKeyState (nVirtKey=6) returned 0 [0192.715] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0192.715] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0192.715] WaitMessage () returned 1 [0195.740] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0195.740] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103b5) returned 0x1 [0195.740] IsWindowUnicode (hWnd=0x201d0) returned 1 [0195.740] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0195.740] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103b5) returned 0x1 [0195.740] SetCursor (hCursor=0x10003) returned 0x10003 [0195.740] TranslateMessage (lpMsg=0x1ef250) returned 0 [0195.740] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0195.740] GetKeyState (nVirtKey=1) returned 0 [0195.740] GetKeyState (nVirtKey=2) returned 0 [0195.740] GetKeyState (nVirtKey=4) returned 0 [0195.740] GetKeyState (nVirtKey=5) returned 0 [0195.740] GetKeyState (nVirtKey=6) returned 0 [0195.740] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0195.740] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0195.740] WaitMessage () returned 1 [0195.798] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0195.798] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103b5) returned 0x1 [0195.799] IsWindowUnicode (hWnd=0x201d0) returned 1 [0195.799] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0195.799] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103b5) returned 0x1 [0195.799] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0195.799] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e00270) returned 0x0 [0195.799] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0195.799] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0195.800] SetCursor (hCursor=0x10003) returned 0x10003 [0195.800] TranslateMessage (lpMsg=0x1ef250) returned 0 [0195.800] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0195.800] GetKeyState (nVirtKey=1) returned -127 [0195.800] GetKeyState (nVirtKey=2) returned 0 [0195.800] GetKeyState (nVirtKey=4) returned 0 [0195.800] GetKeyState (nVirtKey=5) returned 0 [0195.800] GetKeyState (nVirtKey=6) returned 0 [0195.800] IsWindowVisible (hWnd=0x201d0) returned 1 [0195.800] IsWindowEnabled (hWnd=0x201d0) returned 1 [0195.800] SetFocus (hWnd=0x201d0) returned 0x201d0 [0195.800] GetFocus () returned 0x201d0 [0195.800] GetFocus () returned 0x201d0 [0195.800] GetFocus () returned 0x201d0 [0195.800] GetKeyState (nVirtKey=1) returned -127 [0195.800] GetKeyState (nVirtKey=2) returned 0 [0195.800] GetKeyState (nVirtKey=4) returned 0 [0195.800] GetKeyState (nVirtKey=5) returned 0 [0195.800] GetKeyState (nVirtKey=6) returned 0 [0195.800] GetCapture () returned 0x0 [0195.800] SetCapture (hWnd=0x201d0) returned 0x0 [0195.800] GetKeyState (nVirtKey=1) returned -127 [0195.800] GetKeyState (nVirtKey=2) returned 0 [0195.800] GetKeyState (nVirtKey=4) returned 0 [0195.800] GetKeyState (nVirtKey=5) returned 0 [0195.800] GetKeyState (nVirtKey=6) returned 0 [0195.800] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0195.800] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0195.801] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0195.801] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0195.801] TranslateMessage (lpMsg=0x1ef250) returned 0 [0195.801] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0195.801] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0195.801] IsWindowUnicode (hWnd=0x201d0) returned 1 [0195.801] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0195.801] TranslateMessage (lpMsg=0x1ef250) returned 0 [0195.801] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0195.801] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2686800, cPoints=0x1 | out: lpPoints=0x2686800) returned 42533703 [0195.801] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0195.801] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0195.801] UpdateWindow (hWnd=0x201d0) returned 1 [0195.801] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0195.801] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0195.801] CreateCompatibleDC (hdc=0x160107c7) returned 0x3e010810 [0195.801] SelectObject (hdc=0x3e010810, h=0x490500d1) returned 0x185000f [0195.801] GdipCreateFromHDC (hdc=0x3e010810, graphics=0x1eea5c) returned 0x0 [0195.802] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0195.802] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0195.802] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0195.802] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0195.802] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0195.802] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0195.802] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0195.802] LocalFree (hMem=0x416cb8) returned 0x0 [0195.802] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0195.802] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0195.802] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0195.802] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0195.802] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0195.802] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd1d0dbd) returned 0x0 [0195.802] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0195.802] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0195.802] GetCurrentObject (hdc=0x3e010810, type=0x1) returned 0x1b00017 [0195.803] GetCurrentObject (hdc=0x3e010810, type=0x2) returned 0x1900010 [0195.803] GetCurrentObject (hdc=0x3e010810, type=0x7) returned 0x490500d1 [0195.803] GetCurrentObject (hdc=0x3e010810, type=0x6) returned 0x18a002e [0195.803] SaveDC (hdc=0x3e010810) returned 1 [0195.803] GetNearestColor (hdc=0x3e010810, color=0xf5f5f5) returned 0xf5f5f5 [0195.803] GetNearestColor (hdc=0x3e010810, color=0x515151) returned 0x515151 [0195.803] GetNearestColor (hdc=0x3e010810, color=0x0) returned 0x0 [0195.803] GetNearestColor (hdc=0x3e010810, color=0x515151) returned 0x515151 [0195.803] GetNearestColor (hdc=0x3e010810, color=0x0) returned 0x0 [0195.803] GetNearestColor (hdc=0x3e010810, color=0xfafafa) returned 0xfafafa [0195.803] GetNearestColor (hdc=0x3e010810, color=0xe0e0e0) returned 0xe0e0e0 [0195.803] GetNearestColor (hdc=0x3e010810, color=0xdcdcdc) returned 0xdcdcdc [0195.803] GetNearestColor (hdc=0x3e010810, color=0x0) returned 0x0 [0195.803] RestoreDC (hdc=0x3e010810, nSavedDC=-1) returned 1 [0195.803] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3e010810) returned 0x0 [0195.804] IsAppThemed () returned 0x1 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] IsAppThemed () returned 0x1 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2686f04 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0195.804] IsAppThemed () returned 0x1 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] IsAppThemed () returned 0x1 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] IsAppThemed () returned 0x1 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] IsAppThemed () returned 0x1 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] IsThemePartDefined () returned 0x1 [0195.804] IsAppThemed () returned 0x1 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0195.804] IsAppThemed () returned 0x1 [0195.804] GetThemeAppProperties () returned 0x3 [0195.804] GetThemeAppProperties () returned 0x3 [0195.805] IsAppThemed () returned 0x1 [0195.805] GetThemeAppProperties () returned 0x3 [0195.805] GetThemeAppProperties () returned 0x3 [0195.805] IsThemePartDefined () returned 0x1 [0195.805] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0195.805] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0195.805] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0195.805] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0195.805] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0195.805] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0195.805] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0195.805] LocalFree (hMem=0x416cb8) returned 0x0 [0195.805] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0195.805] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0195.805] LocalFree (hMem=0x416cb8) returned 0x0 [0195.805] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0195.805] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0195.805] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0195.805] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0195.805] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0195.806] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0195.806] GetCurrentObject (hdc=0x3e010810, type=0x1) returned 0x1b00017 [0195.806] GetCurrentObject (hdc=0x3e010810, type=0x2) returned 0x1900010 [0195.806] GetCurrentObject (hdc=0x3e010810, type=0x7) returned 0x490500d1 [0195.806] GetCurrentObject (hdc=0x3e010810, type=0x6) returned 0x18a002e [0195.806] SaveDC (hdc=0x3e010810) returned 1 [0195.806] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x60040813 [0195.806] GetClipRgn (hdc=0x3e010810, hrgn=0x60040813) returned 0 [0195.806] SelectClipRgn (hdc=0x3e010810, hrgn=0x44040246) returned 2 [0195.806] DeleteObject (ho=0x60040813) returned 1 [0195.806] DeleteObject (ho=0x44040246) returned 1 [0195.806] OffsetViewportOrgEx (in: hdc=0x3e010810, x=0, y=0, lppt=0x26875b4 | out: lppt=0x26875b4) returned 1 [0195.806] DrawThemeParentBackground () returned 0x0 [0195.806] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0195.806] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0195.806] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0195.806] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0195.806] GetSystemMetrics (nIndex=42) returned 0 [0195.806] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0195.806] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0195.807] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0195.807] GetCurrentObject (hdc=0x3e010810, type=0x1) returned 0x1b00017 [0195.807] GetCurrentObject (hdc=0x3e010810, type=0x2) returned 0x1900010 [0195.807] GetCurrentObject (hdc=0x3e010810, type=0x7) returned 0x490500d1 [0195.807] GetCurrentObject (hdc=0x3e010810, type=0x6) returned 0x18a002e [0195.807] SaveDC (hdc=0x3e010810) returned 2 [0195.807] GetNearestColor (hdc=0x3e010810, color=0xf5f5f5) returned 0xf5f5f5 [0195.807] CreateSolidBrush (color=0xf5f5f5) returned 0xa0100244 [0195.807] FillRect (hDC=0x3e010810, lprc=0x1ee2d0, hbr=0xa0100244) returned 1 [0195.807] DeleteObject (ho=0xa0100244) returned 1 [0195.807] RestoreDC (hdc=0x3e010810, nSavedDC=-1) returned 1 [0195.807] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0195.807] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0195.807] GetSystemMetrics (nIndex=42) returned 0 [0195.807] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0195.807] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0195.807] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0195.808] GetCurrentObject (hdc=0x3e010810, type=0x1) returned 0x1b00017 [0195.808] GetCurrentObject (hdc=0x3e010810, type=0x2) returned 0x1900010 [0195.808] GetCurrentObject (hdc=0x3e010810, type=0x7) returned 0x490500d1 [0195.808] GetCurrentObject (hdc=0x3e010810, type=0x6) returned 0x18a002e [0195.808] SaveDC (hdc=0x3e010810) returned 2 [0195.808] GetNearestColor (hdc=0x3e010810, color=0xf5f5f5) returned 0xf5f5f5 [0195.808] CreateSolidBrush (color=0xf5f5f5) returned 0xa1100244 [0195.808] FillRect (hDC=0x3e010810, lprc=0x1ee270, hbr=0xa1100244) returned 1 [0195.808] DeleteObject (ho=0xa1100244) returned 1 [0195.808] RestoreDC (hdc=0x3e010810, nSavedDC=-1) returned 1 [0195.808] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0195.808] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0195.808] GetSystemMetrics (nIndex=42) returned 0 [0195.808] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0195.808] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0195.808] RestoreDC (hdc=0x3e010810, nSavedDC=-1) returned 1 [0195.808] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3e010810) returned 0x0 [0195.808] IsAppThemed () returned 0x1 [0195.809] GetThemeAppProperties () returned 0x3 [0195.809] GetThemeAppProperties () returned 0x3 [0195.809] IsAppThemed () returned 0x1 [0195.809] GetThemeAppProperties () returned 0x3 [0195.809] GetThemeAppProperties () returned 0x3 [0195.809] IsThemePartDefined () returned 0x1 [0195.809] GdipCreateRegion (region=0x1ee764) returned 0x0 [0195.809] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0195.809] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0195.809] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0195.809] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0195.809] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0195.809] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0195.809] LocalFree (hMem=0x416cb8) returned 0x0 [0195.809] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0195.809] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0195.809] LocalFree (hMem=0x416cb8) returned 0x0 [0195.809] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0195.809] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0195.809] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0195.809] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0195.809] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0195.809] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0195.809] GetCurrentObject (hdc=0x3e010810, type=0x1) returned 0x1b00017 [0195.809] GetCurrentObject (hdc=0x3e010810, type=0x2) returned 0x1900010 [0195.809] GetCurrentObject (hdc=0x3e010810, type=0x7) returned 0x490500d1 [0195.810] GetCurrentObject (hdc=0x3e010810, type=0x6) returned 0x18a002e [0195.810] SaveDC (hdc=0x3e010810) returned 1 [0195.810] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x45040246 [0195.810] GetClipRgn (hdc=0x3e010810, hrgn=0x45040246) returned 0 [0195.810] SelectClipRgn (hdc=0x3e010810, hrgn=0x62040813) returned 2 [0195.810] DeleteObject (ho=0x45040246) returned 1 [0195.810] DeleteObject (ho=0x62040813) returned 1 [0195.810] OffsetViewportOrgEx (in: hdc=0x3e010810, x=0, y=0, lppt=0x2687df4 | out: lppt=0x2687df4) returned 1 [0195.810] IsAppThemed () returned 0x1 [0195.810] GetThemeAppProperties () returned 0x3 [0195.810] GetThemeAppProperties () returned 0x3 [0195.810] DrawThemeBackground () returned 0x0 [0195.810] RestoreDC (hdc=0x3e010810, nSavedDC=-1) returned 1 [0195.810] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3e010810) returned 0x0 [0195.810] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0195.810] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0195.810] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0195.810] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0195.810] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0195.810] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0195.810] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0195.810] LocalFree (hMem=0x416cb8) returned 0x0 [0195.810] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0195.810] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0195.811] LocalFree (hMem=0x416cb8) returned 0x0 [0195.811] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0195.811] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0195.811] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0195.811] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0195.811] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0195.811] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0195.811] GetCurrentObject (hdc=0x3e010810, type=0x1) returned 0x1b00017 [0195.811] GetCurrentObject (hdc=0x3e010810, type=0x2) returned 0x1900010 [0195.811] GetCurrentObject (hdc=0x3e010810, type=0x7) returned 0x490500d1 [0195.811] GetCurrentObject (hdc=0x3e010810, type=0x6) returned 0x18a002e [0195.811] SaveDC (hdc=0x3e010810) returned 1 [0195.811] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x63040813 [0195.811] GetClipRgn (hdc=0x3e010810, hrgn=0x63040813) returned 0 [0195.811] SelectClipRgn (hdc=0x3e010810, hrgn=0x46040246) returned 2 [0195.811] DeleteObject (ho=0x63040813) returned 1 [0195.811] DeleteObject (ho=0x46040246) returned 1 [0195.811] OffsetViewportOrgEx (in: hdc=0x3e010810, x=0, y=0, lppt=0x26880c8 | out: lppt=0x26880c8) returned 1 [0195.811] IsAppThemed () returned 0x1 [0195.811] GetThemeAppProperties () returned 0x3 [0195.811] GetThemeAppProperties () returned 0x3 [0195.811] GetThemeBackgroundContentRect () returned 0x0 [0195.811] RestoreDC (hdc=0x3e010810, nSavedDC=-1) returned 1 [0195.811] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3e010810) returned 0x0 [0195.812] IsAppThemed () returned 0x1 [0195.812] GetThemeAppProperties () returned 0x3 [0195.812] GetThemeAppProperties () returned 0x3 [0195.812] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0195.812] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0195.812] GetCurrentObject (hdc=0x3e010810, type=0x1) returned 0x1b00017 [0195.812] GetCurrentObject (hdc=0x3e010810, type=0x2) returned 0x1900010 [0195.812] GetCurrentObject (hdc=0x3e010810, type=0x7) returned 0x490500d1 [0195.812] GetCurrentObject (hdc=0x3e010810, type=0x6) returned 0x18a002e [0195.812] SaveDC (hdc=0x3e010810) returned 1 [0195.812] GetTextAlign (hdc=0x3e010810) returned 0x0 [0195.812] GetTextColor (hdc=0x3e010810) returned 0x0 [0195.812] GetCurrentObject (hdc=0x3e010810, type=0x6) returned 0x18a002e [0195.812] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0195.812] SelectObject (hdc=0x3e010810, h=0x220a081a) returned 0x18a002e [0195.812] GetBkMode (hdc=0x3e010810) returned 2 [0195.812] SetBkMode (hdc=0x3e010810, mode=1) returned 2 [0195.812] DrawTextExW (in: hdc=0x3e010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x268845c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0195.813] DrawTextExW (in: hdc=0x3e010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x268845c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0195.813] RestoreDC (hdc=0x3e010810, nSavedDC=-1) returned 1 [0195.813] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3e010810) returned 0x0 [0195.813] GetFocus () returned 0x201d0 [0195.813] IsAppThemed () returned 0x1 [0195.813] GetThemeAppProperties () returned 0x3 [0195.813] GetThemeAppProperties () returned 0x3 [0195.813] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0195.813] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x3e010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0195.813] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3e010810) returned 0x0 [0195.813] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0195.813] SelectObject (hdc=0x3e010810, h=0x185000f) returned 0x490500d1 [0195.813] DeleteDC (hdc=0x3e010810) returned 1 [0195.813] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0195.813] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0195.813] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2688558, cPoints=0x1 | out: lpPoints=0x2688558) returned 42533703 [0195.813] WindowFromPoint (Point=0x3b5) returned 0x201d0 [0195.813] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103b5) returned 0x1 [0195.813] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0195.813] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0195.814] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0195.814] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0195.814] GetSystemMetrics (nIndex=42) returned 0 [0195.814] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0195.814] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0195.814] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0195.814] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0195.814] GetCapture () returned 0x201d0 [0195.814] ReleaseCapture () returned 1 [0195.814] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0195.814] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0195.814] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103b5) returned 0x1 [0195.814] IsWindowUnicode (hWnd=0x201d0) returned 1 [0195.814] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0195.814] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103b5) returned 0x1 [0195.814] SetCursor (hCursor=0x10003) returned 0x10003 [0195.814] TranslateMessage (lpMsg=0x1ef250) returned 0 [0195.814] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0195.814] GetKeyState (nVirtKey=1) returned 1 [0195.814] GetKeyState (nVirtKey=2) returned 0 [0195.814] GetKeyState (nVirtKey=4) returned 0 [0195.814] GetKeyState (nVirtKey=5) returned 0 [0195.814] GetKeyState (nVirtKey=6) returned 0 [0195.814] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0195.814] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0195.814] WaitMessage () returned 1 [0198.860] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0198.860] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0198.860] IsWindowUnicode (hWnd=0x201d0) returned 1 [0198.860] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0198.860] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0198.860] SetCursor (hCursor=0x10003) returned 0x10003 [0198.860] TranslateMessage (lpMsg=0x1ef250) returned 0 [0198.860] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0198.860] GetKeyState (nVirtKey=1) returned 1 [0198.860] GetKeyState (nVirtKey=2) returned 0 [0198.860] GetKeyState (nVirtKey=4) returned 0 [0198.860] GetKeyState (nVirtKey=5) returned 0 [0198.860] GetKeyState (nVirtKey=6) returned 0 [0198.860] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0198.860] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0198.860] WaitMessage () returned 1 [0198.918] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0198.920] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0198.920] IsWindowUnicode (hWnd=0x201d0) returned 1 [0198.920] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0198.920] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0198.920] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0198.920] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e00297) returned 0x0 [0198.920] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0198.920] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0198.921] SetCursor (hCursor=0x10003) returned 0x10003 [0198.921] TranslateMessage (lpMsg=0x1ef250) returned 0 [0198.921] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0198.921] GetKeyState (nVirtKey=1) returned -128 [0198.921] GetKeyState (nVirtKey=2) returned 0 [0198.921] GetKeyState (nVirtKey=4) returned 0 [0198.921] GetKeyState (nVirtKey=5) returned 0 [0198.921] GetKeyState (nVirtKey=6) returned 0 [0198.921] IsWindowVisible (hWnd=0x201d0) returned 1 [0198.921] IsWindowEnabled (hWnd=0x201d0) returned 1 [0198.921] SetFocus (hWnd=0x201d0) returned 0x201d0 [0198.921] GetFocus () returned 0x201d0 [0198.921] GetFocus () returned 0x201d0 [0198.921] GetFocus () returned 0x201d0 [0198.921] GetKeyState (nVirtKey=1) returned -128 [0198.921] GetKeyState (nVirtKey=2) returned 0 [0198.921] GetKeyState (nVirtKey=4) returned 0 [0198.921] GetKeyState (nVirtKey=5) returned 0 [0198.921] GetKeyState (nVirtKey=6) returned 0 [0198.921] GetCapture () returned 0x0 [0198.921] SetCapture (hWnd=0x201d0) returned 0x0 [0198.921] GetKeyState (nVirtKey=1) returned -128 [0198.921] GetKeyState (nVirtKey=2) returned 0 [0198.921] GetKeyState (nVirtKey=4) returned 0 [0198.922] GetKeyState (nVirtKey=5) returned 0 [0198.922] GetKeyState (nVirtKey=6) returned 0 [0198.922] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0198.922] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0198.922] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0198.922] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0198.922] TranslateMessage (lpMsg=0x1ef250) returned 0 [0198.922] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0198.922] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0198.922] IsWindowUnicode (hWnd=0x201d0) returned 1 [0198.922] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0198.922] TranslateMessage (lpMsg=0x1ef250) returned 0 [0198.922] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0198.922] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x268867c, cPoints=0x1 | out: lpPoints=0x268867c) returned 42533703 [0198.922] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0198.922] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0198.922] UpdateWindow (hWnd=0x201d0) returned 1 [0198.923] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0198.923] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0198.923] CreateCompatibleDC (hdc=0x160107c7) returned 0x3f010810 [0198.923] SelectObject (hdc=0x3f010810, h=0x490500d1) returned 0x185000f [0198.923] GdipCreateFromHDC (hdc=0x3f010810, graphics=0x1eea5c) returned 0x0 [0198.924] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0198.924] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0198.924] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0198.924] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0198.924] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0198.924] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0198.924] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0198.925] LocalFree (hMem=0x416cb8) returned 0x0 [0198.925] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0198.925] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0198.925] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0198.925] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0198.925] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0198.925] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd1b0dbd) returned 0x0 [0198.925] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0198.925] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0198.925] GetCurrentObject (hdc=0x3f010810, type=0x1) returned 0x1b00017 [0198.925] GetCurrentObject (hdc=0x3f010810, type=0x2) returned 0x1900010 [0198.925] GetCurrentObject (hdc=0x3f010810, type=0x7) returned 0x490500d1 [0198.925] GetCurrentObject (hdc=0x3f010810, type=0x6) returned 0x18a002e [0198.926] SaveDC (hdc=0x3f010810) returned 1 [0198.926] GetNearestColor (hdc=0x3f010810, color=0xf5f5f5) returned 0xf5f5f5 [0198.926] GetNearestColor (hdc=0x3f010810, color=0x515151) returned 0x515151 [0198.926] GetNearestColor (hdc=0x3f010810, color=0x0) returned 0x0 [0198.926] GetNearestColor (hdc=0x3f010810, color=0x515151) returned 0x515151 [0198.926] GetNearestColor (hdc=0x3f010810, color=0x0) returned 0x0 [0198.926] GetNearestColor (hdc=0x3f010810, color=0xfafafa) returned 0xfafafa [0198.926] GetNearestColor (hdc=0x3f010810, color=0xe0e0e0) returned 0xe0e0e0 [0198.926] GetNearestColor (hdc=0x3f010810, color=0xdcdcdc) returned 0xdcdcdc [0198.926] GetNearestColor (hdc=0x3f010810, color=0x0) returned 0x0 [0198.926] RestoreDC (hdc=0x3f010810, nSavedDC=-1) returned 1 [0198.926] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3f010810) returned 0x0 [0198.927] IsAppThemed () returned 0x1 [0198.927] GetThemeAppProperties () returned 0x3 [0198.927] GetThemeAppProperties () returned 0x3 [0198.927] IsAppThemed () returned 0x1 [0198.927] GetThemeAppProperties () returned 0x3 [0198.927] GetThemeAppProperties () returned 0x3 [0198.927] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2688d80 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0198.927] IsAppThemed () returned 0x1 [0198.927] GetThemeAppProperties () returned 0x3 [0198.927] GetThemeAppProperties () returned 0x3 [0198.927] IsAppThemed () returned 0x1 [0198.927] GetThemeAppProperties () returned 0x3 [0198.927] GetThemeAppProperties () returned 0x3 [0198.927] IsAppThemed () returned 0x1 [0198.927] GetThemeAppProperties () returned 0x3 [0198.927] GetThemeAppProperties () returned 0x3 [0198.928] IsAppThemed () returned 0x1 [0198.928] GetThemeAppProperties () returned 0x3 [0198.928] GetThemeAppProperties () returned 0x3 [0198.928] IsThemePartDefined () returned 0x1 [0198.928] IsAppThemed () returned 0x1 [0198.928] GetThemeAppProperties () returned 0x3 [0198.928] GetThemeAppProperties () returned 0x3 [0198.928] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0198.928] IsAppThemed () returned 0x1 [0198.928] GetThemeAppProperties () returned 0x3 [0198.928] GetThemeAppProperties () returned 0x3 [0198.928] IsAppThemed () returned 0x1 [0198.928] GetThemeAppProperties () returned 0x3 [0198.928] GetThemeAppProperties () returned 0x3 [0198.928] IsThemePartDefined () returned 0x1 [0198.928] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0198.928] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0198.928] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0198.928] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0198.928] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0198.928] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0198.928] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0198.928] LocalFree (hMem=0x416cb8) returned 0x0 [0198.928] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0198.928] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0198.928] LocalFree (hMem=0x416cb8) returned 0x0 [0198.928] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0198.928] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0198.929] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0198.929] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0198.929] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0198.929] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0198.929] GetCurrentObject (hdc=0x3f010810, type=0x1) returned 0x1b00017 [0198.929] GetCurrentObject (hdc=0x3f010810, type=0x2) returned 0x1900010 [0198.929] GetCurrentObject (hdc=0x3f010810, type=0x7) returned 0x490500d1 [0198.929] GetCurrentObject (hdc=0x3f010810, type=0x6) returned 0x18a002e [0198.929] SaveDC (hdc=0x3f010810) returned 1 [0198.929] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x47040246 [0198.929] GetClipRgn (hdc=0x3f010810, hrgn=0x47040246) returned 0 [0198.929] SelectClipRgn (hdc=0x3f010810, hrgn=0x67040813) returned 2 [0198.929] DeleteObject (ho=0x47040246) returned 1 [0198.929] DeleteObject (ho=0x67040813) returned 1 [0198.929] OffsetViewportOrgEx (in: hdc=0x3f010810, x=0, y=0, lppt=0x2689430 | out: lppt=0x2689430) returned 1 [0198.929] DrawThemeParentBackground () returned 0x0 [0198.929] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0198.929] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0198.929] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0198.930] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0198.930] GetSystemMetrics (nIndex=42) returned 0 [0198.930] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0198.930] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0198.930] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0198.930] GetCurrentObject (hdc=0x3f010810, type=0x1) returned 0x1b00017 [0198.930] GetCurrentObject (hdc=0x3f010810, type=0x2) returned 0x1900010 [0198.930] GetCurrentObject (hdc=0x3f010810, type=0x7) returned 0x490500d1 [0198.930] GetCurrentObject (hdc=0x3f010810, type=0x6) returned 0x18a002e [0198.930] SaveDC (hdc=0x3f010810) returned 2 [0198.930] GetNearestColor (hdc=0x3f010810, color=0xf5f5f5) returned 0xf5f5f5 [0198.930] CreateSolidBrush (color=0xf5f5f5) returned 0xa2100244 [0198.930] FillRect (hDC=0x3f010810, lprc=0x1ee2d0, hbr=0xa2100244) returned 1 [0198.930] DeleteObject (ho=0xa2100244) returned 1 [0198.930] RestoreDC (hdc=0x3f010810, nSavedDC=-1) returned 1 [0198.930] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0198.930] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0198.930] GetSystemMetrics (nIndex=42) returned 0 [0198.930] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0198.930] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0198.931] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0198.931] GetCurrentObject (hdc=0x3f010810, type=0x1) returned 0x1b00017 [0198.931] GetCurrentObject (hdc=0x3f010810, type=0x2) returned 0x1900010 [0198.931] GetCurrentObject (hdc=0x3f010810, type=0x7) returned 0x490500d1 [0198.931] GetCurrentObject (hdc=0x3f010810, type=0x6) returned 0x18a002e [0198.931] SaveDC (hdc=0x3f010810) returned 2 [0198.931] GetNearestColor (hdc=0x3f010810, color=0xf5f5f5) returned 0xf5f5f5 [0198.931] CreateSolidBrush (color=0xf5f5f5) returned 0xa3100244 [0198.931] FillRect (hDC=0x3f010810, lprc=0x1ee270, hbr=0xa3100244) returned 1 [0198.931] DeleteObject (ho=0xa3100244) returned 1 [0198.931] RestoreDC (hdc=0x3f010810, nSavedDC=-1) returned 1 [0198.931] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0198.931] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0198.931] GetSystemMetrics (nIndex=42) returned 0 [0198.931] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0198.931] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0198.931] RestoreDC (hdc=0x3f010810, nSavedDC=-1) returned 1 [0198.931] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3f010810) returned 0x0 [0198.931] IsAppThemed () returned 0x1 [0198.931] GetThemeAppProperties () returned 0x3 [0198.931] GetThemeAppProperties () returned 0x3 [0198.931] IsAppThemed () returned 0x1 [0198.931] GetThemeAppProperties () returned 0x3 [0198.932] GetThemeAppProperties () returned 0x3 [0198.932] IsThemePartDefined () returned 0x1 [0198.932] GdipCreateRegion (region=0x1ee764) returned 0x0 [0198.932] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0198.932] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0198.932] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0198.932] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0198.932] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0198.932] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0198.932] LocalFree (hMem=0x416cb8) returned 0x0 [0198.932] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0198.932] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0198.932] LocalFree (hMem=0x416cb8) returned 0x0 [0198.932] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0198.932] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0198.932] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0198.932] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0198.932] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0198.932] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0198.932] GetCurrentObject (hdc=0x3f010810, type=0x1) returned 0x1b00017 [0198.932] GetCurrentObject (hdc=0x3f010810, type=0x2) returned 0x1900010 [0198.932] GetCurrentObject (hdc=0x3f010810, type=0x7) returned 0x490500d1 [0198.932] GetCurrentObject (hdc=0x3f010810, type=0x6) returned 0x18a002e [0198.932] SaveDC (hdc=0x3f010810) returned 1 [0198.932] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x68040813 [0198.933] GetClipRgn (hdc=0x3f010810, hrgn=0x68040813) returned 0 [0198.933] SelectClipRgn (hdc=0x3f010810, hrgn=0x49040246) returned 2 [0198.933] DeleteObject (ho=0x68040813) returned 1 [0198.933] DeleteObject (ho=0x49040246) returned 1 [0198.933] OffsetViewportOrgEx (in: hdc=0x3f010810, x=0, y=0, lppt=0x2689c70 | out: lppt=0x2689c70) returned 1 [0198.933] IsAppThemed () returned 0x1 [0198.933] GetThemeAppProperties () returned 0x3 [0198.933] GetThemeAppProperties () returned 0x3 [0198.933] DrawThemeBackground () returned 0x0 [0198.933] RestoreDC (hdc=0x3f010810, nSavedDC=-1) returned 1 [0198.933] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3f010810) returned 0x0 [0198.933] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0198.933] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0198.933] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0198.933] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0198.933] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0198.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0198.933] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0198.933] LocalFree (hMem=0x416cb8) returned 0x0 [0198.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0198.933] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0198.933] LocalFree (hMem=0x416cb8) returned 0x0 [0198.933] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0198.933] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0198.934] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0198.934] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0198.934] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0198.934] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0198.934] GetCurrentObject (hdc=0x3f010810, type=0x1) returned 0x1b00017 [0198.934] GetCurrentObject (hdc=0x3f010810, type=0x2) returned 0x1900010 [0198.934] GetCurrentObject (hdc=0x3f010810, type=0x7) returned 0x490500d1 [0198.934] GetCurrentObject (hdc=0x3f010810, type=0x6) returned 0x18a002e [0198.934] SaveDC (hdc=0x3f010810) returned 1 [0198.934] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4a040246 [0198.934] GetClipRgn (hdc=0x3f010810, hrgn=0x4a040246) returned 0 [0198.934] SelectClipRgn (hdc=0x3f010810, hrgn=0x69040813) returned 2 [0198.934] DeleteObject (ho=0x4a040246) returned 1 [0198.934] DeleteObject (ho=0x69040813) returned 1 [0198.934] OffsetViewportOrgEx (in: hdc=0x3f010810, x=0, y=0, lppt=0x2689f44 | out: lppt=0x2689f44) returned 1 [0198.934] IsAppThemed () returned 0x1 [0198.934] GetThemeAppProperties () returned 0x3 [0198.934] GetThemeAppProperties () returned 0x3 [0198.934] GetThemeBackgroundContentRect () returned 0x0 [0198.934] RestoreDC (hdc=0x3f010810, nSavedDC=-1) returned 1 [0198.934] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3f010810) returned 0x0 [0198.934] IsAppThemed () returned 0x1 [0198.934] GetThemeAppProperties () returned 0x3 [0198.934] GetThemeAppProperties () returned 0x3 [0198.934] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0198.935] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0198.935] GetCurrentObject (hdc=0x3f010810, type=0x1) returned 0x1b00017 [0198.935] GetCurrentObject (hdc=0x3f010810, type=0x2) returned 0x1900010 [0198.935] GetCurrentObject (hdc=0x3f010810, type=0x7) returned 0x490500d1 [0198.935] GetCurrentObject (hdc=0x3f010810, type=0x6) returned 0x18a002e [0198.935] SaveDC (hdc=0x3f010810) returned 1 [0198.935] GetTextAlign (hdc=0x3f010810) returned 0x0 [0198.935] GetTextColor (hdc=0x3f010810) returned 0x0 [0198.935] GetCurrentObject (hdc=0x3f010810, type=0x6) returned 0x18a002e [0198.935] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0198.935] SelectObject (hdc=0x3f010810, h=0x220a081a) returned 0x18a002e [0198.935] GetBkMode (hdc=0x3f010810) returned 2 [0198.935] SetBkMode (hdc=0x3f010810, mode=1) returned 2 [0198.935] DrawTextExW (in: hdc=0x3f010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x268a2d8 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0198.935] DrawTextExW (in: hdc=0x3f010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x268a2d8 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0198.936] RestoreDC (hdc=0x3f010810, nSavedDC=-1) returned 1 [0198.936] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3f010810) returned 0x0 [0198.936] GetFocus () returned 0x201d0 [0198.936] IsAppThemed () returned 0x1 [0198.936] GetThemeAppProperties () returned 0x3 [0198.936] GetThemeAppProperties () returned 0x3 [0198.936] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0198.936] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x3f010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0198.936] GdipReleaseDC (graphics=0x504fbc8, hdc=0x3f010810) returned 0x0 [0198.936] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0198.936] SelectObject (hdc=0x3f010810, h=0x185000f) returned 0x490500d1 [0198.936] DeleteDC (hdc=0x3f010810) returned 1 [0198.936] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0198.936] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0198.936] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x268a3d4, cPoints=0x1 | out: lpPoints=0x268a3d4) returned 42533703 [0198.936] WindowFromPoint (Point=0x3dc) returned 0x201d0 [0198.936] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0198.937] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0198.937] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0198.937] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0198.937] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0198.937] GetSystemMetrics (nIndex=42) returned 0 [0198.937] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0198.937] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0198.937] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0198.937] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0198.937] GetCapture () returned 0x201d0 [0198.937] ReleaseCapture () returned 1 [0198.937] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0198.937] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0198.937] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0198.937] IsWindowUnicode (hWnd=0x201d0) returned 1 [0198.937] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0198.937] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103dc) returned 0x1 [0198.938] SetCursor (hCursor=0x10003) returned 0x10003 [0198.938] TranslateMessage (lpMsg=0x1ef250) returned 0 [0198.938] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0198.938] GetKeyState (nVirtKey=1) returned 0 [0198.938] GetKeyState (nVirtKey=2) returned 0 [0198.938] GetKeyState (nVirtKey=4) returned 0 [0198.938] GetKeyState (nVirtKey=5) returned 0 [0198.938] GetKeyState (nVirtKey=6) returned 0 [0198.938] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0198.938] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0198.938] WaitMessage () returned 1 [0201.980] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0201.980] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0201.980] IsWindowUnicode (hWnd=0x201d0) returned 1 [0201.980] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0201.980] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0201.980] SetCursor (hCursor=0x10003) returned 0x10003 [0201.980] TranslateMessage (lpMsg=0x1ef250) returned 0 [0201.980] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0201.980] GetKeyState (nVirtKey=1) returned 0 [0201.980] GetKeyState (nVirtKey=2) returned 0 [0201.980] GetKeyState (nVirtKey=4) returned 0 [0201.980] GetKeyState (nVirtKey=5) returned 0 [0201.980] GetKeyState (nVirtKey=6) returned 0 [0201.980] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0201.980] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0201.981] WaitMessage () returned 1 [0202.056] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0202.056] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0202.056] IsWindowUnicode (hWnd=0x201d0) returned 1 [0202.056] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0202.056] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0202.056] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0202.056] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e4023e) returned 0x0 [0202.057] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0202.057] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0202.057] SetCursor (hCursor=0x10003) returned 0x10003 [0202.057] TranslateMessage (lpMsg=0x1ef250) returned 0 [0202.057] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0202.057] GetKeyState (nVirtKey=1) returned -127 [0202.057] GetKeyState (nVirtKey=2) returned 0 [0202.057] GetKeyState (nVirtKey=4) returned 0 [0202.057] GetKeyState (nVirtKey=5) returned 0 [0202.057] GetKeyState (nVirtKey=6) returned 0 [0202.057] IsWindowVisible (hWnd=0x201d0) returned 1 [0202.057] IsWindowEnabled (hWnd=0x201d0) returned 1 [0202.057] SetFocus (hWnd=0x201d0) returned 0x201d0 [0202.057] GetFocus () returned 0x201d0 [0202.057] GetFocus () returned 0x201d0 [0202.057] GetFocus () returned 0x201d0 [0202.057] GetKeyState (nVirtKey=1) returned -127 [0202.057] GetKeyState (nVirtKey=2) returned 0 [0202.057] GetKeyState (nVirtKey=4) returned 0 [0202.057] GetKeyState (nVirtKey=5) returned 0 [0202.057] GetKeyState (nVirtKey=6) returned 0 [0202.057] GetCapture () returned 0x0 [0202.057] SetCapture (hWnd=0x201d0) returned 0x0 [0202.057] GetKeyState (nVirtKey=1) returned -127 [0202.057] GetKeyState (nVirtKey=2) returned 0 [0202.058] GetKeyState (nVirtKey=4) returned 0 [0202.058] GetKeyState (nVirtKey=5) returned 0 [0202.058] GetKeyState (nVirtKey=6) returned 0 [0202.058] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0202.058] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0202.058] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0202.058] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0202.058] TranslateMessage (lpMsg=0x1ef250) returned 0 [0202.058] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0202.058] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0202.058] IsWindowUnicode (hWnd=0x201d0) returned 1 [0202.058] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0202.058] TranslateMessage (lpMsg=0x1ef250) returned 0 [0202.058] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0202.058] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x268a4f8, cPoints=0x1 | out: lpPoints=0x268a4f8) returned 42533703 [0202.058] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0202.058] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0202.058] UpdateWindow (hWnd=0x201d0) returned 1 [0202.058] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0202.058] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0202.058] CreateCompatibleDC (hdc=0x160107c7) returned 0x40010810 [0202.058] SelectObject (hdc=0x40010810, h=0x490500d1) returned 0x185000f [0202.058] GdipCreateFromHDC (hdc=0x40010810, graphics=0x1eea5c) returned 0x0 [0202.058] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0202.059] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0202.059] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0202.059] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0202.059] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0202.059] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0202.059] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0202.059] LocalFree (hMem=0x416cb8) returned 0x0 [0202.059] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0202.059] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0202.059] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0202.059] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0202.059] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0202.059] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd190dbd) returned 0x0 [0202.059] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0202.059] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0202.059] GetCurrentObject (hdc=0x40010810, type=0x1) returned 0x1b00017 [0202.059] GetCurrentObject (hdc=0x40010810, type=0x2) returned 0x1900010 [0202.059] GetCurrentObject (hdc=0x40010810, type=0x7) returned 0x490500d1 [0202.059] GetCurrentObject (hdc=0x40010810, type=0x6) returned 0x18a002e [0202.059] SaveDC (hdc=0x40010810) returned 1 [0202.060] GetNearestColor (hdc=0x40010810, color=0xf5f5f5) returned 0xf5f5f5 [0202.060] GetNearestColor (hdc=0x40010810, color=0x515151) returned 0x515151 [0202.060] GetNearestColor (hdc=0x40010810, color=0x0) returned 0x0 [0202.060] GetNearestColor (hdc=0x40010810, color=0x515151) returned 0x515151 [0202.060] GetNearestColor (hdc=0x40010810, color=0x0) returned 0x0 [0202.060] GetNearestColor (hdc=0x40010810, color=0xfafafa) returned 0xfafafa [0202.060] GetNearestColor (hdc=0x40010810, color=0xe0e0e0) returned 0xe0e0e0 [0202.060] GetNearestColor (hdc=0x40010810, color=0xdcdcdc) returned 0xdcdcdc [0202.060] GetNearestColor (hdc=0x40010810, color=0x0) returned 0x0 [0202.060] RestoreDC (hdc=0x40010810, nSavedDC=-1) returned 1 [0202.060] GdipReleaseDC (graphics=0x504fbc8, hdc=0x40010810) returned 0x0 [0202.060] IsAppThemed () returned 0x1 [0202.060] GetThemeAppProperties () returned 0x3 [0202.060] GetThemeAppProperties () returned 0x3 [0202.060] IsAppThemed () returned 0x1 [0202.060] GetThemeAppProperties () returned 0x3 [0202.060] GetThemeAppProperties () returned 0x3 [0202.060] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x268abfc | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0202.061] IsAppThemed () returned 0x1 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] IsAppThemed () returned 0x1 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] IsAppThemed () returned 0x1 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] IsAppThemed () returned 0x1 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] IsThemePartDefined () returned 0x1 [0202.061] IsAppThemed () returned 0x1 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0202.061] IsAppThemed () returned 0x1 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] IsAppThemed () returned 0x1 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] GetThemeAppProperties () returned 0x3 [0202.061] IsThemePartDefined () returned 0x1 [0202.061] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0202.061] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0202.061] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0202.061] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0202.061] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0202.061] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0202.061] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0202.061] LocalFree (hMem=0x416cb8) returned 0x0 [0202.062] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0202.062] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0202.062] LocalFree (hMem=0x416cb8) returned 0x0 [0202.062] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0202.062] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0202.062] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0202.062] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0202.062] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0202.062] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0202.062] GetCurrentObject (hdc=0x40010810, type=0x1) returned 0x1b00017 [0202.062] GetCurrentObject (hdc=0x40010810, type=0x2) returned 0x1900010 [0202.062] GetCurrentObject (hdc=0x40010810, type=0x7) returned 0x490500d1 [0202.062] GetCurrentObject (hdc=0x40010810, type=0x6) returned 0x18a002e [0202.062] SaveDC (hdc=0x40010810) returned 1 [0202.062] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a040813 [0202.062] GetClipRgn (hdc=0x40010810, hrgn=0x6a040813) returned 0 [0202.062] SelectClipRgn (hdc=0x40010810, hrgn=0x4e040246) returned 2 [0202.062] DeleteObject (ho=0x6a040813) returned 1 [0202.062] DeleteObject (ho=0x4e040246) returned 1 [0202.062] OffsetViewportOrgEx (in: hdc=0x40010810, x=0, y=0, lppt=0x268b2ac | out: lppt=0x268b2ac) returned 1 [0202.062] DrawThemeParentBackground () returned 0x0 [0202.062] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0202.063] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0202.063] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0202.063] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0202.063] GetSystemMetrics (nIndex=42) returned 0 [0202.063] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0202.063] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0202.063] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0202.063] GetCurrentObject (hdc=0x40010810, type=0x1) returned 0x1b00017 [0202.063] GetCurrentObject (hdc=0x40010810, type=0x2) returned 0x1900010 [0202.063] GetCurrentObject (hdc=0x40010810, type=0x7) returned 0x490500d1 [0202.063] GetCurrentObject (hdc=0x40010810, type=0x6) returned 0x18a002e [0202.063] SaveDC (hdc=0x40010810) returned 2 [0202.063] GetNearestColor (hdc=0x40010810, color=0xf5f5f5) returned 0xf5f5f5 [0202.063] CreateSolidBrush (color=0xf5f5f5) returned 0xa4100244 [0202.063] FillRect (hDC=0x40010810, lprc=0x1ee2d0, hbr=0xa4100244) returned 1 [0202.063] DeleteObject (ho=0xa4100244) returned 1 [0202.063] RestoreDC (hdc=0x40010810, nSavedDC=-1) returned 1 [0202.063] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0202.063] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0202.063] GetSystemMetrics (nIndex=42) returned 0 [0202.063] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0202.063] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0202.064] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0202.064] GetCurrentObject (hdc=0x40010810, type=0x1) returned 0x1b00017 [0202.064] GetCurrentObject (hdc=0x40010810, type=0x2) returned 0x1900010 [0202.064] GetCurrentObject (hdc=0x40010810, type=0x7) returned 0x490500d1 [0202.064] GetCurrentObject (hdc=0x40010810, type=0x6) returned 0x18a002e [0202.064] SaveDC (hdc=0x40010810) returned 2 [0202.064] GetNearestColor (hdc=0x40010810, color=0xf5f5f5) returned 0xf5f5f5 [0202.064] CreateSolidBrush (color=0xf5f5f5) returned 0xa5100244 [0202.064] FillRect (hDC=0x40010810, lprc=0x1ee270, hbr=0xa5100244) returned 1 [0202.064] DeleteObject (ho=0xa5100244) returned 1 [0202.064] RestoreDC (hdc=0x40010810, nSavedDC=-1) returned 1 [0202.064] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0202.064] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0202.064] GetSystemMetrics (nIndex=42) returned 0 [0202.064] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0202.064] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0202.064] RestoreDC (hdc=0x40010810, nSavedDC=-1) returned 1 [0202.064] GdipReleaseDC (graphics=0x504fbc8, hdc=0x40010810) returned 0x0 [0202.064] IsAppThemed () returned 0x1 [0202.064] GetThemeAppProperties () returned 0x3 [0202.064] GetThemeAppProperties () returned 0x3 [0202.064] IsAppThemed () returned 0x1 [0202.064] GetThemeAppProperties () returned 0x3 [0202.064] GetThemeAppProperties () returned 0x3 [0202.064] IsThemePartDefined () returned 0x1 [0202.064] GdipCreateRegion (region=0x1ee764) returned 0x0 [0202.065] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0202.065] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0202.065] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0202.065] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0202.065] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0202.065] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0202.065] LocalFree (hMem=0x416cb8) returned 0x0 [0202.065] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0202.065] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0202.065] LocalFree (hMem=0x416cb8) returned 0x0 [0202.065] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0202.065] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0202.065] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0202.065] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0202.065] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0202.065] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0202.065] GetCurrentObject (hdc=0x40010810, type=0x1) returned 0x1b00017 [0202.065] GetCurrentObject (hdc=0x40010810, type=0x2) returned 0x1900010 [0202.065] GetCurrentObject (hdc=0x40010810, type=0x7) returned 0x490500d1 [0202.065] GetCurrentObject (hdc=0x40010810, type=0x6) returned 0x18a002e [0202.065] SaveDC (hdc=0x40010810) returned 1 [0202.065] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f040246 [0202.065] GetClipRgn (hdc=0x40010810, hrgn=0x4f040246) returned 0 [0202.065] SelectClipRgn (hdc=0x40010810, hrgn=0x6c040813) returned 2 [0202.066] DeleteObject (ho=0x4f040246) returned 1 [0202.066] DeleteObject (ho=0x6c040813) returned 1 [0202.066] OffsetViewportOrgEx (in: hdc=0x40010810, x=0, y=0, lppt=0x268baec | out: lppt=0x268baec) returned 1 [0202.066] IsAppThemed () returned 0x1 [0202.066] GetThemeAppProperties () returned 0x3 [0202.066] GetThemeAppProperties () returned 0x3 [0202.066] DrawThemeBackground () returned 0x0 [0202.066] RestoreDC (hdc=0x40010810, nSavedDC=-1) returned 1 [0202.066] GdipReleaseDC (graphics=0x504fbc8, hdc=0x40010810) returned 0x0 [0202.066] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0202.066] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0202.066] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0202.066] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0202.066] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0202.066] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0202.066] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0202.066] LocalFree (hMem=0x416cb8) returned 0x0 [0202.066] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0202.066] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0202.066] LocalFree (hMem=0x416cb8) returned 0x0 [0202.066] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0202.066] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0202.066] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0202.066] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0202.067] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0202.067] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0202.067] GetCurrentObject (hdc=0x40010810, type=0x1) returned 0x1b00017 [0202.067] GetCurrentObject (hdc=0x40010810, type=0x2) returned 0x1900010 [0202.067] GetCurrentObject (hdc=0x40010810, type=0x7) returned 0x490500d1 [0202.067] GetCurrentObject (hdc=0x40010810, type=0x6) returned 0x18a002e [0202.067] SaveDC (hdc=0x40010810) returned 1 [0202.067] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d040813 [0202.067] GetClipRgn (hdc=0x40010810, hrgn=0x6d040813) returned 0 [0202.067] SelectClipRgn (hdc=0x40010810, hrgn=0x50040246) returned 2 [0202.067] DeleteObject (ho=0x6d040813) returned 1 [0202.067] DeleteObject (ho=0x50040246) returned 1 [0202.067] OffsetViewportOrgEx (in: hdc=0x40010810, x=0, y=0, lppt=0x268bdc0 | out: lppt=0x268bdc0) returned 1 [0202.067] IsAppThemed () returned 0x1 [0202.067] GetThemeAppProperties () returned 0x3 [0202.067] GetThemeAppProperties () returned 0x3 [0202.067] GetThemeBackgroundContentRect () returned 0x0 [0202.067] RestoreDC (hdc=0x40010810, nSavedDC=-1) returned 1 [0202.067] GdipReleaseDC (graphics=0x504fbc8, hdc=0x40010810) returned 0x0 [0202.067] IsAppThemed () returned 0x1 [0202.067] GetThemeAppProperties () returned 0x3 [0202.067] GetThemeAppProperties () returned 0x3 [0202.067] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0202.067] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0202.067] GetCurrentObject (hdc=0x40010810, type=0x1) returned 0x1b00017 [0202.067] GetCurrentObject (hdc=0x40010810, type=0x2) returned 0x1900010 [0202.068] GetCurrentObject (hdc=0x40010810, type=0x7) returned 0x490500d1 [0202.068] GetCurrentObject (hdc=0x40010810, type=0x6) returned 0x18a002e [0202.068] SaveDC (hdc=0x40010810) returned 1 [0202.068] GetTextAlign (hdc=0x40010810) returned 0x0 [0202.068] GetTextColor (hdc=0x40010810) returned 0x0 [0202.068] GetCurrentObject (hdc=0x40010810, type=0x6) returned 0x18a002e [0202.068] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0202.068] SelectObject (hdc=0x40010810, h=0x220a081a) returned 0x18a002e [0202.068] GetBkMode (hdc=0x40010810) returned 2 [0202.068] SetBkMode (hdc=0x40010810, mode=1) returned 2 [0202.068] DrawTextExW (in: hdc=0x40010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x268c154 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0202.068] DrawTextExW (in: hdc=0x40010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x268c154 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0202.068] RestoreDC (hdc=0x40010810, nSavedDC=-1) returned 1 [0202.068] GdipReleaseDC (graphics=0x504fbc8, hdc=0x40010810) returned 0x0 [0202.068] GetFocus () returned 0x201d0 [0202.068] IsAppThemed () returned 0x1 [0202.068] GetThemeAppProperties () returned 0x3 [0202.068] GetThemeAppProperties () returned 0x3 [0202.069] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0202.069] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x40010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0202.069] GdipReleaseDC (graphics=0x504fbc8, hdc=0x40010810) returned 0x0 [0202.069] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0202.069] SelectObject (hdc=0x40010810, h=0x185000f) returned 0x490500d1 [0202.069] DeleteDC (hdc=0x40010810) returned 1 [0202.069] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0202.069] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0202.069] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x268c250, cPoints=0x1 | out: lpPoints=0x268c250) returned 42533703 [0202.069] WindowFromPoint (Point=0x383) returned 0x201d0 [0202.069] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0202.069] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0202.069] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0202.069] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0202.069] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0202.069] GetSystemMetrics (nIndex=42) returned 0 [0202.069] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0202.069] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0202.069] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0202.069] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0202.069] GetCapture () returned 0x201d0 [0202.069] ReleaseCapture () returned 1 [0202.070] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0202.070] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0202.070] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0202.070] IsWindowUnicode (hWnd=0x201d0) returned 1 [0202.070] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0202.070] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0202.070] SetCursor (hCursor=0x10003) returned 0x10003 [0202.070] TranslateMessage (lpMsg=0x1ef250) returned 0 [0202.070] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0202.070] GetKeyState (nVirtKey=1) returned 1 [0202.070] GetKeyState (nVirtKey=2) returned 0 [0202.070] GetKeyState (nVirtKey=4) returned 0 [0202.070] GetKeyState (nVirtKey=5) returned 0 [0202.070] GetKeyState (nVirtKey=6) returned 0 [0202.070] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0202.070] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0202.070] WaitMessage () returned 1 [0205.099] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0205.099] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703a5) returned 0x1 [0205.099] IsWindowUnicode (hWnd=0x201d0) returned 1 [0205.099] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0205.099] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703a5) returned 0x1 [0205.099] SetCursor (hCursor=0x10003) returned 0x10003 [0205.099] TranslateMessage (lpMsg=0x1ef250) returned 0 [0205.099] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0205.099] GetKeyState (nVirtKey=1) returned 1 [0205.099] GetKeyState (nVirtKey=2) returned 0 [0205.099] GetKeyState (nVirtKey=4) returned 0 [0205.099] GetKeyState (nVirtKey=5) returned 0 [0205.099] GetKeyState (nVirtKey=6) returned 0 [0205.099] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0205.099] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0205.099] WaitMessage () returned 1 [0205.176] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0205.176] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703a5) returned 0x1 [0205.177] IsWindowUnicode (hWnd=0x201d0) returned 1 [0205.177] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0205.177] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703a5) returned 0x1 [0205.177] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0205.177] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e60260) returned 0x0 [0205.177] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0205.177] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0205.177] SetCursor (hCursor=0x10003) returned 0x10003 [0205.177] TranslateMessage (lpMsg=0x1ef250) returned 0 [0205.177] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0205.177] GetKeyState (nVirtKey=1) returned -128 [0205.177] GetKeyState (nVirtKey=2) returned 0 [0205.177] GetKeyState (nVirtKey=4) returned 0 [0205.177] GetKeyState (nVirtKey=5) returned 0 [0205.177] GetKeyState (nVirtKey=6) returned 0 [0205.177] IsWindowVisible (hWnd=0x201d0) returned 1 [0205.177] IsWindowEnabled (hWnd=0x201d0) returned 1 [0205.178] SetFocus (hWnd=0x201d0) returned 0x201d0 [0205.178] GetFocus () returned 0x201d0 [0205.178] GetFocus () returned 0x201d0 [0205.178] GetFocus () returned 0x201d0 [0205.178] GetKeyState (nVirtKey=1) returned -128 [0205.178] GetKeyState (nVirtKey=2) returned 0 [0205.178] GetKeyState (nVirtKey=4) returned 0 [0205.178] GetKeyState (nVirtKey=5) returned 0 [0205.178] GetKeyState (nVirtKey=6) returned 0 [0205.178] GetCapture () returned 0x0 [0205.178] SetCapture (hWnd=0x201d0) returned 0x0 [0205.178] GetKeyState (nVirtKey=1) returned -128 [0205.178] GetKeyState (nVirtKey=2) returned 0 [0205.178] GetKeyState (nVirtKey=4) returned 0 [0205.178] GetKeyState (nVirtKey=5) returned 0 [0205.178] GetKeyState (nVirtKey=6) returned 0 [0205.178] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0205.178] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0205.178] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0205.178] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0205.178] TranslateMessage (lpMsg=0x1ef250) returned 0 [0205.178] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0205.178] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0205.178] IsWindowUnicode (hWnd=0x201d0) returned 1 [0205.178] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0205.178] TranslateMessage (lpMsg=0x1ef250) returned 0 [0205.178] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0205.178] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x268c374, cPoints=0x1 | out: lpPoints=0x268c374) returned 42533703 [0205.178] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0205.178] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0205.178] UpdateWindow (hWnd=0x201d0) returned 1 [0205.178] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0205.178] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0205.179] CreateCompatibleDC (hdc=0x160107c7) returned 0x41010810 [0205.179] SelectObject (hdc=0x41010810, h=0x490500d1) returned 0x185000f [0205.179] GdipCreateFromHDC (hdc=0x41010810, graphics=0x1eea5c) returned 0x0 [0205.179] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0205.179] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0205.179] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0205.179] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0205.179] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0205.179] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0205.179] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0205.179] LocalFree (hMem=0x416cb8) returned 0x0 [0205.179] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0205.179] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0205.179] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0205.179] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0205.179] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0205.179] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd170dbd) returned 0x0 [0205.179] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0205.179] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0205.180] GetCurrentObject (hdc=0x41010810, type=0x1) returned 0x1b00017 [0205.180] GetCurrentObject (hdc=0x41010810, type=0x2) returned 0x1900010 [0205.180] GetCurrentObject (hdc=0x41010810, type=0x7) returned 0x490500d1 [0205.180] GetCurrentObject (hdc=0x41010810, type=0x6) returned 0x18a002e [0205.180] SaveDC (hdc=0x41010810) returned 1 [0205.180] GetNearestColor (hdc=0x41010810, color=0xf5f5f5) returned 0xf5f5f5 [0205.180] GetNearestColor (hdc=0x41010810, color=0x515151) returned 0x515151 [0205.180] GetNearestColor (hdc=0x41010810, color=0x0) returned 0x0 [0205.180] GetNearestColor (hdc=0x41010810, color=0x515151) returned 0x515151 [0205.180] GetNearestColor (hdc=0x41010810, color=0x0) returned 0x0 [0205.180] GetNearestColor (hdc=0x41010810, color=0xfafafa) returned 0xfafafa [0205.180] GetNearestColor (hdc=0x41010810, color=0xe0e0e0) returned 0xe0e0e0 [0205.180] GetNearestColor (hdc=0x41010810, color=0xdcdcdc) returned 0xdcdcdc [0205.181] GetNearestColor (hdc=0x41010810, color=0x0) returned 0x0 [0205.181] RestoreDC (hdc=0x41010810, nSavedDC=-1) returned 1 [0205.181] GdipReleaseDC (graphics=0x504fbc8, hdc=0x41010810) returned 0x0 [0205.181] IsAppThemed () returned 0x1 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] IsAppThemed () returned 0x1 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x268ca78 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0205.181] IsAppThemed () returned 0x1 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] IsAppThemed () returned 0x1 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] IsAppThemed () returned 0x1 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] IsAppThemed () returned 0x1 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] IsThemePartDefined () returned 0x1 [0205.181] IsAppThemed () returned 0x1 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0205.181] IsAppThemed () returned 0x1 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] IsAppThemed () returned 0x1 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] GetThemeAppProperties () returned 0x3 [0205.181] IsThemePartDefined () returned 0x1 [0205.181] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0205.182] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0205.182] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0205.182] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0205.182] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0205.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0205.182] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0205.182] LocalFree (hMem=0x416cb8) returned 0x0 [0205.182] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0205.182] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0205.182] LocalFree (hMem=0x416cb8) returned 0x0 [0205.182] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0205.182] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0205.182] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0205.182] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0205.182] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0205.182] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0205.182] GetCurrentObject (hdc=0x41010810, type=0x1) returned 0x1b00017 [0205.182] GetCurrentObject (hdc=0x41010810, type=0x2) returned 0x1900010 [0205.182] GetCurrentObject (hdc=0x41010810, type=0x7) returned 0x490500d1 [0205.182] GetCurrentObject (hdc=0x41010810, type=0x6) returned 0x18a002e [0205.182] SaveDC (hdc=0x41010810) returned 1 [0205.182] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x51040246 [0205.182] GetClipRgn (hdc=0x41010810, hrgn=0x51040246) returned 0 [0205.182] SelectClipRgn (hdc=0x41010810, hrgn=0x71040813) returned 2 [0205.183] DeleteObject (ho=0x51040246) returned 1 [0205.183] DeleteObject (ho=0x71040813) returned 1 [0205.183] OffsetViewportOrgEx (in: hdc=0x41010810, x=0, y=0, lppt=0x268d128 | out: lppt=0x268d128) returned 1 [0205.183] DrawThemeParentBackground () returned 0x0 [0205.183] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0205.183] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0205.183] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0205.183] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0205.183] GetSystemMetrics (nIndex=42) returned 0 [0205.183] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0205.183] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0205.183] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0205.183] GetCurrentObject (hdc=0x41010810, type=0x1) returned 0x1b00017 [0205.183] GetCurrentObject (hdc=0x41010810, type=0x2) returned 0x1900010 [0205.183] GetCurrentObject (hdc=0x41010810, type=0x7) returned 0x490500d1 [0205.183] GetCurrentObject (hdc=0x41010810, type=0x6) returned 0x18a002e [0205.183] SaveDC (hdc=0x41010810) returned 2 [0205.183] GetNearestColor (hdc=0x41010810, color=0xf5f5f5) returned 0xf5f5f5 [0205.183] CreateSolidBrush (color=0xf5f5f5) returned 0xa6100244 [0205.183] FillRect (hDC=0x41010810, lprc=0x1ee2d0, hbr=0xa6100244) returned 1 [0205.183] DeleteObject (ho=0xa6100244) returned 1 [0205.183] RestoreDC (hdc=0x41010810, nSavedDC=-1) returned 1 [0205.184] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0205.184] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0205.184] GetSystemMetrics (nIndex=42) returned 0 [0205.184] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0205.184] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0205.184] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0205.184] GetCurrentObject (hdc=0x41010810, type=0x1) returned 0x1b00017 [0205.184] GetCurrentObject (hdc=0x41010810, type=0x2) returned 0x1900010 [0205.184] GetCurrentObject (hdc=0x41010810, type=0x7) returned 0x490500d1 [0205.184] GetCurrentObject (hdc=0x41010810, type=0x6) returned 0x18a002e [0205.184] SaveDC (hdc=0x41010810) returned 2 [0205.184] GetNearestColor (hdc=0x41010810, color=0xf5f5f5) returned 0xf5f5f5 [0205.184] CreateSolidBrush (color=0xf5f5f5) returned 0xa7100244 [0205.184] FillRect (hDC=0x41010810, lprc=0x1ee270, hbr=0xa7100244) returned 1 [0205.184] DeleteObject (ho=0xa7100244) returned 1 [0205.184] RestoreDC (hdc=0x41010810, nSavedDC=-1) returned 1 [0205.184] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0205.184] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0205.184] GetSystemMetrics (nIndex=42) returned 0 [0205.184] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0205.184] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0205.184] RestoreDC (hdc=0x41010810, nSavedDC=-1) returned 1 [0205.185] GdipReleaseDC (graphics=0x504fbc8, hdc=0x41010810) returned 0x0 [0205.185] IsAppThemed () returned 0x1 [0205.185] GetThemeAppProperties () returned 0x3 [0205.185] GetThemeAppProperties () returned 0x3 [0205.185] IsAppThemed () returned 0x1 [0205.185] GetThemeAppProperties () returned 0x3 [0205.185] GetThemeAppProperties () returned 0x3 [0205.185] IsThemePartDefined () returned 0x1 [0205.185] GdipCreateRegion (region=0x1ee764) returned 0x0 [0205.185] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0205.185] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0205.185] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0205.185] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0205.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0205.185] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0205.185] LocalFree (hMem=0x416cb8) returned 0x0 [0205.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0205.185] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0205.185] LocalFree (hMem=0x416cb8) returned 0x0 [0205.185] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0205.185] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0205.185] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0205.185] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0205.185] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0205.185] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0205.185] GetCurrentObject (hdc=0x41010810, type=0x1) returned 0x1b00017 [0205.186] GetCurrentObject (hdc=0x41010810, type=0x2) returned 0x1900010 [0205.186] GetCurrentObject (hdc=0x41010810, type=0x7) returned 0x490500d1 [0205.186] GetCurrentObject (hdc=0x41010810, type=0x6) returned 0x18a002e [0205.186] SaveDC (hdc=0x41010810) returned 1 [0205.186] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x72040813 [0205.186] GetClipRgn (hdc=0x41010810, hrgn=0x72040813) returned 0 [0205.186] SelectClipRgn (hdc=0x41010810, hrgn=0x53040246) returned 2 [0205.186] DeleteObject (ho=0x72040813) returned 1 [0205.186] DeleteObject (ho=0x53040246) returned 1 [0205.186] OffsetViewportOrgEx (in: hdc=0x41010810, x=0, y=0, lppt=0x268d968 | out: lppt=0x268d968) returned 1 [0205.186] IsAppThemed () returned 0x1 [0205.186] GetThemeAppProperties () returned 0x3 [0205.186] GetThemeAppProperties () returned 0x3 [0205.186] DrawThemeBackground () returned 0x0 [0205.186] RestoreDC (hdc=0x41010810, nSavedDC=-1) returned 1 [0205.186] GdipReleaseDC (graphics=0x504fbc8, hdc=0x41010810) returned 0x0 [0205.186] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0205.186] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0205.186] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0205.186] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0205.186] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0205.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0205.186] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0205.187] LocalFree (hMem=0x416cb8) returned 0x0 [0205.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0205.187] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0205.187] LocalFree (hMem=0x416cb8) returned 0x0 [0205.187] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0205.187] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0205.187] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0205.187] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0205.187] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0205.187] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0205.187] GetCurrentObject (hdc=0x41010810, type=0x1) returned 0x1b00017 [0205.187] GetCurrentObject (hdc=0x41010810, type=0x2) returned 0x1900010 [0205.187] GetCurrentObject (hdc=0x41010810, type=0x7) returned 0x490500d1 [0205.187] GetCurrentObject (hdc=0x41010810, type=0x6) returned 0x18a002e [0205.187] SaveDC (hdc=0x41010810) returned 1 [0205.187] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x54040246 [0205.187] GetClipRgn (hdc=0x41010810, hrgn=0x54040246) returned 0 [0205.187] SelectClipRgn (hdc=0x41010810, hrgn=0x73040813) returned 2 [0205.187] DeleteObject (ho=0x54040246) returned 1 [0205.187] DeleteObject (ho=0x73040813) returned 1 [0205.187] OffsetViewportOrgEx (in: hdc=0x41010810, x=0, y=0, lppt=0x268dc3c | out: lppt=0x268dc3c) returned 1 [0205.187] IsAppThemed () returned 0x1 [0205.187] GetThemeAppProperties () returned 0x3 [0205.188] GetThemeAppProperties () returned 0x3 [0205.188] GetThemeBackgroundContentRect () returned 0x0 [0205.188] RestoreDC (hdc=0x41010810, nSavedDC=-1) returned 1 [0205.188] GdipReleaseDC (graphics=0x504fbc8, hdc=0x41010810) returned 0x0 [0205.188] IsAppThemed () returned 0x1 [0205.188] GetThemeAppProperties () returned 0x3 [0205.188] GetThemeAppProperties () returned 0x3 [0205.188] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0205.188] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0205.188] GetCurrentObject (hdc=0x41010810, type=0x1) returned 0x1b00017 [0205.188] GetCurrentObject (hdc=0x41010810, type=0x2) returned 0x1900010 [0205.188] GetCurrentObject (hdc=0x41010810, type=0x7) returned 0x490500d1 [0205.188] GetCurrentObject (hdc=0x41010810, type=0x6) returned 0x18a002e [0205.188] SaveDC (hdc=0x41010810) returned 1 [0205.188] GetTextAlign (hdc=0x41010810) returned 0x0 [0205.188] GetTextColor (hdc=0x41010810) returned 0x0 [0205.188] GetCurrentObject (hdc=0x41010810, type=0x6) returned 0x18a002e [0205.188] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0205.188] SelectObject (hdc=0x41010810, h=0x220a081a) returned 0x18a002e [0205.188] GetBkMode (hdc=0x41010810) returned 2 [0205.188] SetBkMode (hdc=0x41010810, mode=1) returned 2 [0205.188] DrawTextExW (in: hdc=0x41010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x268dfd0 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0205.189] DrawTextExW (in: hdc=0x41010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x268dfd0 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0205.189] RestoreDC (hdc=0x41010810, nSavedDC=-1) returned 1 [0205.189] GdipReleaseDC (graphics=0x504fbc8, hdc=0x41010810) returned 0x0 [0205.189] GetFocus () returned 0x201d0 [0205.189] IsAppThemed () returned 0x1 [0205.189] GetThemeAppProperties () returned 0x3 [0205.189] GetThemeAppProperties () returned 0x3 [0205.189] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0205.189] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x41010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0205.189] GdipReleaseDC (graphics=0x504fbc8, hdc=0x41010810) returned 0x0 [0205.189] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0205.189] SelectObject (hdc=0x41010810, h=0x185000f) returned 0x490500d1 [0205.189] DeleteDC (hdc=0x41010810) returned 1 [0205.189] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0205.189] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0205.189] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x268e0cc, cPoints=0x1 | out: lpPoints=0x268e0cc) returned 42533703 [0205.189] WindowFromPoint (Point=0x3a5) returned 0x201d0 [0205.189] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703a5) returned 0x1 [0205.189] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0205.190] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0205.190] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0205.190] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0205.190] GetSystemMetrics (nIndex=42) returned 0 [0205.190] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0205.190] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0205.190] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0205.190] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0205.190] GetCapture () returned 0x201d0 [0205.190] ReleaseCapture () returned 1 [0205.190] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0205.190] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0205.190] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703a5) returned 0x1 [0205.190] IsWindowUnicode (hWnd=0x201d0) returned 1 [0205.190] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0205.190] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703a5) returned 0x1 [0205.190] SetCursor (hCursor=0x10003) returned 0x10003 [0205.190] TranslateMessage (lpMsg=0x1ef250) returned 0 [0205.190] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0205.190] GetKeyState (nVirtKey=1) returned 0 [0205.190] GetKeyState (nVirtKey=2) returned 0 [0205.190] GetKeyState (nVirtKey=4) returned 0 [0205.190] GetKeyState (nVirtKey=5) returned 0 [0205.190] GetKeyState (nVirtKey=6) returned 0 [0205.190] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0205.191] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0205.191] WaitMessage () returned 1 [0208.219] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0208.219] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950392) returned 0x1 [0208.220] IsWindowUnicode (hWnd=0x201d0) returned 1 [0208.220] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0208.220] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950392) returned 0x1 [0208.220] SetCursor (hCursor=0x10003) returned 0x10003 [0208.220] TranslateMessage (lpMsg=0x1ef250) returned 0 [0208.220] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0208.220] GetKeyState (nVirtKey=1) returned 0 [0208.220] GetKeyState (nVirtKey=2) returned 0 [0208.220] GetKeyState (nVirtKey=4) returned 0 [0208.220] GetKeyState (nVirtKey=5) returned 0 [0208.220] GetKeyState (nVirtKey=6) returned 0 [0208.220] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0208.220] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0208.220] WaitMessage () returned 1 [0208.299] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0208.299] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950392) returned 0x1 [0208.299] IsWindowUnicode (hWnd=0x201d0) returned 1 [0208.299] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0208.299] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950392) returned 0x1 [0208.299] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0208.299] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e4024d) returned 0x0 [0208.299] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0208.299] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0208.300] SetCursor (hCursor=0x10003) returned 0x10003 [0208.300] TranslateMessage (lpMsg=0x1ef250) returned 0 [0208.300] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0208.300] GetKeyState (nVirtKey=1) returned -127 [0208.300] GetKeyState (nVirtKey=2) returned 0 [0208.300] GetKeyState (nVirtKey=4) returned 0 [0208.300] GetKeyState (nVirtKey=5) returned 0 [0208.300] GetKeyState (nVirtKey=6) returned 0 [0208.300] IsWindowVisible (hWnd=0x201d0) returned 1 [0208.300] IsWindowEnabled (hWnd=0x201d0) returned 1 [0208.300] SetFocus (hWnd=0x201d0) returned 0x201d0 [0208.300] GetFocus () returned 0x201d0 [0208.300] GetFocus () returned 0x201d0 [0208.300] GetFocus () returned 0x201d0 [0208.300] GetKeyState (nVirtKey=1) returned -127 [0208.300] GetKeyState (nVirtKey=2) returned 0 [0208.300] GetKeyState (nVirtKey=4) returned 0 [0208.300] GetKeyState (nVirtKey=5) returned 0 [0208.300] GetKeyState (nVirtKey=6) returned 0 [0208.300] GetCapture () returned 0x0 [0208.300] SetCapture (hWnd=0x201d0) returned 0x0 [0208.300] GetKeyState (nVirtKey=1) returned -127 [0208.300] GetKeyState (nVirtKey=2) returned 0 [0208.300] GetKeyState (nVirtKey=4) returned 0 [0208.300] GetKeyState (nVirtKey=5) returned 0 [0208.300] GetKeyState (nVirtKey=6) returned 0 [0208.300] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0208.300] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0208.301] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0208.301] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0208.301] TranslateMessage (lpMsg=0x1ef250) returned 0 [0208.301] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0208.301] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0208.301] IsWindowUnicode (hWnd=0x201d0) returned 1 [0208.301] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0208.301] TranslateMessage (lpMsg=0x1ef250) returned 0 [0208.301] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0208.301] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x268e1f0, cPoints=0x1 | out: lpPoints=0x268e1f0) returned 42533703 [0208.301] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0208.301] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0208.301] UpdateWindow (hWnd=0x201d0) returned 1 [0208.301] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0208.301] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0208.301] CreateCompatibleDC (hdc=0x160107c7) returned 0x42010810 [0208.301] SelectObject (hdc=0x42010810, h=0x490500d1) returned 0x185000f [0208.301] GdipCreateFromHDC (hdc=0x42010810, graphics=0x1eea5c) returned 0x0 [0208.302] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0208.302] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0208.302] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0208.302] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0208.302] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0208.302] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0208.302] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0208.302] LocalFree (hMem=0x416cb8) returned 0x0 [0208.302] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0208.302] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0208.302] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0208.302] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0208.302] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0208.302] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd150dbd) returned 0x0 [0208.302] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0208.302] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0208.302] GetCurrentObject (hdc=0x42010810, type=0x1) returned 0x1b00017 [0208.302] GetCurrentObject (hdc=0x42010810, type=0x2) returned 0x1900010 [0208.303] GetCurrentObject (hdc=0x42010810, type=0x7) returned 0x490500d1 [0208.303] GetCurrentObject (hdc=0x42010810, type=0x6) returned 0x18a002e [0208.303] SaveDC (hdc=0x42010810) returned 1 [0208.303] GetNearestColor (hdc=0x42010810, color=0xf5f5f5) returned 0xf5f5f5 [0208.303] GetNearestColor (hdc=0x42010810, color=0x515151) returned 0x515151 [0208.303] GetNearestColor (hdc=0x42010810, color=0x0) returned 0x0 [0208.303] GetNearestColor (hdc=0x42010810, color=0x515151) returned 0x515151 [0208.303] GetNearestColor (hdc=0x42010810, color=0x0) returned 0x0 [0208.303] GetNearestColor (hdc=0x42010810, color=0xfafafa) returned 0xfafafa [0208.303] GetNearestColor (hdc=0x42010810, color=0xe0e0e0) returned 0xe0e0e0 [0208.303] GetNearestColor (hdc=0x42010810, color=0xdcdcdc) returned 0xdcdcdc [0208.303] GetNearestColor (hdc=0x42010810, color=0x0) returned 0x0 [0208.303] RestoreDC (hdc=0x42010810, nSavedDC=-1) returned 1 [0208.303] GdipReleaseDC (graphics=0x504fbc8, hdc=0x42010810) returned 0x0 [0208.303] IsAppThemed () returned 0x1 [0208.303] GetThemeAppProperties () returned 0x3 [0208.303] GetThemeAppProperties () returned 0x3 [0208.304] IsAppThemed () returned 0x1 [0208.304] GetThemeAppProperties () returned 0x3 [0208.304] GetThemeAppProperties () returned 0x3 [0208.304] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x268e8f4 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0208.304] IsAppThemed () returned 0x1 [0208.304] GetThemeAppProperties () returned 0x3 [0208.304] GetThemeAppProperties () returned 0x3 [0208.304] IsAppThemed () returned 0x1 [0208.304] GetThemeAppProperties () returned 0x3 [0208.304] GetThemeAppProperties () returned 0x3 [0208.304] IsAppThemed () returned 0x1 [0208.304] GetThemeAppProperties () returned 0x3 [0208.304] GetThemeAppProperties () returned 0x3 [0208.304] IsAppThemed () returned 0x1 [0208.304] GetThemeAppProperties () returned 0x3 [0208.304] GetThemeAppProperties () returned 0x3 [0208.304] IsThemePartDefined () returned 0x1 [0208.305] IsAppThemed () returned 0x1 [0208.305] GetThemeAppProperties () returned 0x3 [0208.305] GetThemeAppProperties () returned 0x3 [0208.305] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0208.305] IsAppThemed () returned 0x1 [0208.305] GetThemeAppProperties () returned 0x3 [0208.305] GetThemeAppProperties () returned 0x3 [0208.305] IsAppThemed () returned 0x1 [0208.305] GetThemeAppProperties () returned 0x3 [0208.305] GetThemeAppProperties () returned 0x3 [0208.305] IsThemePartDefined () returned 0x1 [0208.305] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0208.305] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0208.305] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0208.305] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0208.305] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0208.305] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0208.305] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0208.305] LocalFree (hMem=0x416cb8) returned 0x0 [0208.305] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0208.305] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0208.305] LocalFree (hMem=0x416cb8) returned 0x0 [0208.305] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0208.305] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0208.305] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0208.305] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0208.305] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0208.305] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0208.306] GetCurrentObject (hdc=0x42010810, type=0x1) returned 0x1b00017 [0208.306] GetCurrentObject (hdc=0x42010810, type=0x2) returned 0x1900010 [0208.306] GetCurrentObject (hdc=0x42010810, type=0x7) returned 0x490500d1 [0208.306] GetCurrentObject (hdc=0x42010810, type=0x6) returned 0x18a002e [0208.306] SaveDC (hdc=0x42010810) returned 1 [0208.306] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x74040813 [0208.306] GetClipRgn (hdc=0x42010810, hrgn=0x74040813) returned 0 [0208.306] SelectClipRgn (hdc=0x42010810, hrgn=0x58040246) returned 2 [0208.306] DeleteObject (ho=0x74040813) returned 1 [0208.306] DeleteObject (ho=0x58040246) returned 1 [0208.306] OffsetViewportOrgEx (in: hdc=0x42010810, x=0, y=0, lppt=0x268efa4 | out: lppt=0x268efa4) returned 1 [0208.306] DrawThemeParentBackground () returned 0x0 [0208.306] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0208.306] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0208.306] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0208.306] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0208.306] GetSystemMetrics (nIndex=42) returned 0 [0208.306] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0208.306] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0208.306] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0208.306] GetCurrentObject (hdc=0x42010810, type=0x1) returned 0x1b00017 [0208.307] GetCurrentObject (hdc=0x42010810, type=0x2) returned 0x1900010 [0208.307] GetCurrentObject (hdc=0x42010810, type=0x7) returned 0x490500d1 [0208.307] GetCurrentObject (hdc=0x42010810, type=0x6) returned 0x18a002e [0208.307] SaveDC (hdc=0x42010810) returned 2 [0208.307] GetNearestColor (hdc=0x42010810, color=0xf5f5f5) returned 0xf5f5f5 [0208.307] CreateSolidBrush (color=0xf5f5f5) returned 0xa8100244 [0208.307] FillRect (hDC=0x42010810, lprc=0x1ee2d0, hbr=0xa8100244) returned 1 [0208.307] DeleteObject (ho=0xa8100244) returned 1 [0208.307] RestoreDC (hdc=0x42010810, nSavedDC=-1) returned 1 [0208.307] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0208.307] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0208.307] GetSystemMetrics (nIndex=42) returned 0 [0208.307] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0208.307] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0208.307] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0208.307] GetCurrentObject (hdc=0x42010810, type=0x1) returned 0x1b00017 [0208.307] GetCurrentObject (hdc=0x42010810, type=0x2) returned 0x1900010 [0208.307] GetCurrentObject (hdc=0x42010810, type=0x7) returned 0x490500d1 [0208.307] GetCurrentObject (hdc=0x42010810, type=0x6) returned 0x18a002e [0208.307] SaveDC (hdc=0x42010810) returned 2 [0208.308] GetNearestColor (hdc=0x42010810, color=0xf5f5f5) returned 0xf5f5f5 [0208.308] CreateSolidBrush (color=0xf5f5f5) returned 0xa9100244 [0208.308] FillRect (hDC=0x42010810, lprc=0x1ee270, hbr=0xa9100244) returned 1 [0208.308] DeleteObject (ho=0xa9100244) returned 1 [0208.308] RestoreDC (hdc=0x42010810, nSavedDC=-1) returned 1 [0208.308] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0208.308] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0208.308] GetSystemMetrics (nIndex=42) returned 0 [0208.308] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0208.308] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0208.308] RestoreDC (hdc=0x42010810, nSavedDC=-1) returned 1 [0208.308] GdipReleaseDC (graphics=0x504fbc8, hdc=0x42010810) returned 0x0 [0208.308] IsAppThemed () returned 0x1 [0208.308] GetThemeAppProperties () returned 0x3 [0208.308] GetThemeAppProperties () returned 0x3 [0208.308] IsAppThemed () returned 0x1 [0208.308] GetThemeAppProperties () returned 0x3 [0208.308] GetThemeAppProperties () returned 0x3 [0208.308] IsThemePartDefined () returned 0x1 [0208.308] GdipCreateRegion (region=0x1ee764) returned 0x0 [0208.308] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0208.308] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0208.308] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0208.308] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0208.308] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0208.309] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0208.309] LocalFree (hMem=0x416cb8) returned 0x0 [0208.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0208.309] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0208.309] LocalFree (hMem=0x416cb8) returned 0x0 [0208.309] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0208.309] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0208.309] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0208.309] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0208.309] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0208.309] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0208.309] GetCurrentObject (hdc=0x42010810, type=0x1) returned 0x1b00017 [0208.309] GetCurrentObject (hdc=0x42010810, type=0x2) returned 0x1900010 [0208.309] GetCurrentObject (hdc=0x42010810, type=0x7) returned 0x490500d1 [0208.309] GetCurrentObject (hdc=0x42010810, type=0x6) returned 0x18a002e [0208.309] SaveDC (hdc=0x42010810) returned 1 [0208.309] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x59040246 [0208.309] GetClipRgn (hdc=0x42010810, hrgn=0x59040246) returned 0 [0208.309] SelectClipRgn (hdc=0x42010810, hrgn=0x76040813) returned 2 [0208.309] DeleteObject (ho=0x59040246) returned 1 [0208.309] DeleteObject (ho=0x76040813) returned 1 [0208.309] OffsetViewportOrgEx (in: hdc=0x42010810, x=0, y=0, lppt=0x268f7e4 | out: lppt=0x268f7e4) returned 1 [0208.310] IsAppThemed () returned 0x1 [0208.310] GetThemeAppProperties () returned 0x3 [0208.310] GetThemeAppProperties () returned 0x3 [0208.310] DrawThemeBackground () returned 0x0 [0208.310] RestoreDC (hdc=0x42010810, nSavedDC=-1) returned 1 [0208.310] GdipReleaseDC (graphics=0x504fbc8, hdc=0x42010810) returned 0x0 [0208.310] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0208.310] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0208.310] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0208.310] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0208.310] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0208.310] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0208.310] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0208.310] LocalFree (hMem=0x416cb8) returned 0x0 [0208.310] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0208.310] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0208.310] LocalFree (hMem=0x416cb8) returned 0x0 [0208.310] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0208.310] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0208.310] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0208.310] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0208.310] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0208.311] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0208.311] GetCurrentObject (hdc=0x42010810, type=0x1) returned 0x1b00017 [0208.311] GetCurrentObject (hdc=0x42010810, type=0x2) returned 0x1900010 [0208.311] GetCurrentObject (hdc=0x42010810, type=0x7) returned 0x490500d1 [0208.311] GetCurrentObject (hdc=0x42010810, type=0x6) returned 0x18a002e [0208.311] SaveDC (hdc=0x42010810) returned 1 [0208.311] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x77040813 [0208.311] GetClipRgn (hdc=0x42010810, hrgn=0x77040813) returned 0 [0208.311] SelectClipRgn (hdc=0x42010810, hrgn=0x5a040246) returned 2 [0208.311] DeleteObject (ho=0x77040813) returned 1 [0208.311] DeleteObject (ho=0x5a040246) returned 1 [0208.311] OffsetViewportOrgEx (in: hdc=0x42010810, x=0, y=0, lppt=0x268fab8 | out: lppt=0x268fab8) returned 1 [0208.311] IsAppThemed () returned 0x1 [0208.311] GetThemeAppProperties () returned 0x3 [0208.311] GetThemeAppProperties () returned 0x3 [0208.311] GetThemeBackgroundContentRect () returned 0x0 [0208.311] RestoreDC (hdc=0x42010810, nSavedDC=-1) returned 1 [0208.311] GdipReleaseDC (graphics=0x504fbc8, hdc=0x42010810) returned 0x0 [0208.311] IsAppThemed () returned 0x1 [0208.311] GetThemeAppProperties () returned 0x3 [0208.311] GetThemeAppProperties () returned 0x3 [0208.311] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0208.311] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0208.311] GetCurrentObject (hdc=0x42010810, type=0x1) returned 0x1b00017 [0208.312] GetCurrentObject (hdc=0x42010810, type=0x2) returned 0x1900010 [0208.312] GetCurrentObject (hdc=0x42010810, type=0x7) returned 0x490500d1 [0208.312] GetCurrentObject (hdc=0x42010810, type=0x6) returned 0x18a002e [0208.312] SaveDC (hdc=0x42010810) returned 1 [0208.312] GetTextAlign (hdc=0x42010810) returned 0x0 [0208.312] GetTextColor (hdc=0x42010810) returned 0x0 [0208.312] GetCurrentObject (hdc=0x42010810, type=0x6) returned 0x18a002e [0208.312] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0208.312] SelectObject (hdc=0x42010810, h=0x220a081a) returned 0x18a002e [0208.312] GetBkMode (hdc=0x42010810) returned 2 [0208.312] SetBkMode (hdc=0x42010810, mode=1) returned 2 [0208.312] DrawTextExW (in: hdc=0x42010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x268fe4c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0208.312] DrawTextExW (in: hdc=0x42010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x268fe4c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0208.312] RestoreDC (hdc=0x42010810, nSavedDC=-1) returned 1 [0208.312] GdipReleaseDC (graphics=0x504fbc8, hdc=0x42010810) returned 0x0 [0208.312] GetFocus () returned 0x201d0 [0208.312] IsAppThemed () returned 0x1 [0208.313] GetThemeAppProperties () returned 0x3 [0208.313] GetThemeAppProperties () returned 0x3 [0208.313] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0208.313] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x42010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0208.313] GdipReleaseDC (graphics=0x504fbc8, hdc=0x42010810) returned 0x0 [0208.313] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0208.313] SelectObject (hdc=0x42010810, h=0x185000f) returned 0x490500d1 [0208.313] DeleteDC (hdc=0x42010810) returned 1 [0208.313] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0208.313] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0208.313] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x268ff48, cPoints=0x1 | out: lpPoints=0x268ff48) returned 42533703 [0208.313] WindowFromPoint (Point=0x392) returned 0x201d0 [0208.313] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950392) returned 0x1 [0208.313] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0208.313] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0208.313] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0208.313] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0208.313] GetSystemMetrics (nIndex=42) returned 0 [0208.313] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0208.313] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0208.314] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0208.314] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0208.314] GetCapture () returned 0x201d0 [0208.314] ReleaseCapture () returned 1 [0208.314] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0208.314] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0208.314] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950392) returned 0x1 [0208.314] IsWindowUnicode (hWnd=0x201d0) returned 1 [0208.314] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0208.314] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950392) returned 0x1 [0208.314] SetCursor (hCursor=0x10003) returned 0x10003 [0208.314] TranslateMessage (lpMsg=0x1ef250) returned 0 [0208.314] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0208.314] GetKeyState (nVirtKey=1) returned 1 [0208.314] GetKeyState (nVirtKey=2) returned 0 [0208.314] GetKeyState (nVirtKey=4) returned 0 [0208.314] GetKeyState (nVirtKey=5) returned 0 [0208.314] GetKeyState (nVirtKey=6) returned 0 [0208.314] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0208.314] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0208.314] WaitMessage () returned 1 [0211.338] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0211.338] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f038b) returned 0x1 [0211.338] IsWindowUnicode (hWnd=0x201d0) returned 1 [0211.338] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0211.339] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f038b) returned 0x1 [0211.339] SetCursor (hCursor=0x10003) returned 0x10003 [0211.339] TranslateMessage (lpMsg=0x1ef250) returned 0 [0211.339] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0211.339] GetKeyState (nVirtKey=1) returned 1 [0211.339] GetKeyState (nVirtKey=2) returned 0 [0211.339] GetKeyState (nVirtKey=4) returned 0 [0211.339] GetKeyState (nVirtKey=5) returned 0 [0211.339] GetKeyState (nVirtKey=6) returned 0 [0211.339] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0211.339] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0211.339] WaitMessage () returned 1 [0211.416] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0211.416] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f038b) returned 0x1 [0211.416] IsWindowUnicode (hWnd=0x201d0) returned 1 [0211.416] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0211.416] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f038b) returned 0x1 [0211.416] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0211.416] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1de0246) returned 0x0 [0211.416] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0211.416] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0211.416] SetCursor (hCursor=0x10003) returned 0x10003 [0211.416] TranslateMessage (lpMsg=0x1ef250) returned 0 [0211.416] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0211.416] GetKeyState (nVirtKey=1) returned -128 [0211.417] GetKeyState (nVirtKey=2) returned 0 [0211.417] GetKeyState (nVirtKey=4) returned 0 [0211.417] GetKeyState (nVirtKey=5) returned 0 [0211.417] GetKeyState (nVirtKey=6) returned 0 [0211.417] IsWindowVisible (hWnd=0x201d0) returned 1 [0211.417] IsWindowEnabled (hWnd=0x201d0) returned 1 [0211.417] SetFocus (hWnd=0x201d0) returned 0x201d0 [0211.417] GetFocus () returned 0x201d0 [0211.417] GetFocus () returned 0x201d0 [0211.417] GetFocus () returned 0x201d0 [0211.417] GetKeyState (nVirtKey=1) returned -128 [0211.417] GetKeyState (nVirtKey=2) returned 0 [0211.417] GetKeyState (nVirtKey=4) returned 0 [0211.417] GetKeyState (nVirtKey=5) returned 0 [0211.417] GetKeyState (nVirtKey=6) returned 0 [0211.417] GetCapture () returned 0x0 [0211.417] SetCapture (hWnd=0x201d0) returned 0x0 [0211.417] GetKeyState (nVirtKey=1) returned -128 [0211.417] GetKeyState (nVirtKey=2) returned 0 [0211.417] GetKeyState (nVirtKey=4) returned 0 [0211.417] GetKeyState (nVirtKey=5) returned 0 [0211.417] GetKeyState (nVirtKey=6) returned 0 [0211.417] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0211.417] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0211.417] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0211.418] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0211.418] TranslateMessage (lpMsg=0x1ef250) returned 0 [0211.418] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0211.418] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0211.418] IsWindowUnicode (hWnd=0x201d0) returned 1 [0211.418] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0211.418] TranslateMessage (lpMsg=0x1ef250) returned 0 [0211.418] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0211.418] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x269006c, cPoints=0x1 | out: lpPoints=0x269006c) returned 42533703 [0211.418] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0211.418] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0211.418] UpdateWindow (hWnd=0x201d0) returned 1 [0211.418] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0211.418] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0211.418] CreateCompatibleDC (hdc=0x160107c7) returned 0x43010810 [0211.418] SelectObject (hdc=0x43010810, h=0x490500d1) returned 0x185000f [0211.418] GdipCreateFromHDC (hdc=0x43010810, graphics=0x1eea5c) returned 0x0 [0211.418] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0211.418] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0211.418] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0211.418] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0211.418] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0211.418] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0211.419] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0211.419] LocalFree (hMem=0x416cb8) returned 0x0 [0211.419] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0211.419] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0211.419] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0211.419] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0211.419] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0211.419] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd130dbd) returned 0x0 [0211.419] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0211.419] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0211.419] GetCurrentObject (hdc=0x43010810, type=0x1) returned 0x1b00017 [0211.419] GetCurrentObject (hdc=0x43010810, type=0x2) returned 0x1900010 [0211.419] GetCurrentObject (hdc=0x43010810, type=0x7) returned 0x490500d1 [0211.419] GetCurrentObject (hdc=0x43010810, type=0x6) returned 0x18a002e [0211.419] SaveDC (hdc=0x43010810) returned 1 [0211.419] GetNearestColor (hdc=0x43010810, color=0xf5f5f5) returned 0xf5f5f5 [0211.419] GetNearestColor (hdc=0x43010810, color=0x515151) returned 0x515151 [0211.419] GetNearestColor (hdc=0x43010810, color=0x0) returned 0x0 [0211.419] GetNearestColor (hdc=0x43010810, color=0x515151) returned 0x515151 [0211.419] GetNearestColor (hdc=0x43010810, color=0x0) returned 0x0 [0211.420] GetNearestColor (hdc=0x43010810, color=0xfafafa) returned 0xfafafa [0211.420] GetNearestColor (hdc=0x43010810, color=0xe0e0e0) returned 0xe0e0e0 [0211.420] GetNearestColor (hdc=0x43010810, color=0xdcdcdc) returned 0xdcdcdc [0211.420] GetNearestColor (hdc=0x43010810, color=0x0) returned 0x0 [0211.420] RestoreDC (hdc=0x43010810, nSavedDC=-1) returned 1 [0211.420] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010810) returned 0x0 [0211.420] IsAppThemed () returned 0x1 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] IsAppThemed () returned 0x1 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2690770 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0211.420] IsAppThemed () returned 0x1 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] IsAppThemed () returned 0x1 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] IsAppThemed () returned 0x1 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] IsAppThemed () returned 0x1 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] GetThemeAppProperties () returned 0x3 [0211.420] IsThemePartDefined () returned 0x1 [0211.420] IsAppThemed () returned 0x1 [0211.421] GetThemeAppProperties () returned 0x3 [0211.421] GetThemeAppProperties () returned 0x3 [0211.421] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0211.421] IsAppThemed () returned 0x1 [0211.421] GetThemeAppProperties () returned 0x3 [0211.421] GetThemeAppProperties () returned 0x3 [0211.421] IsAppThemed () returned 0x1 [0211.421] GetThemeAppProperties () returned 0x3 [0211.421] GetThemeAppProperties () returned 0x3 [0211.421] IsThemePartDefined () returned 0x1 [0211.421] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0211.421] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0211.421] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0211.421] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0211.421] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0211.421] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0211.421] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0211.421] LocalFree (hMem=0x416cb8) returned 0x0 [0211.421] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0211.421] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0211.421] LocalFree (hMem=0x416cb8) returned 0x0 [0211.421] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0211.421] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0211.421] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0211.421] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0211.421] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0211.421] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0211.421] GetCurrentObject (hdc=0x43010810, type=0x1) returned 0x1b00017 [0211.421] GetCurrentObject (hdc=0x43010810, type=0x2) returned 0x1900010 [0211.422] GetCurrentObject (hdc=0x43010810, type=0x7) returned 0x490500d1 [0211.422] GetCurrentObject (hdc=0x43010810, type=0x6) returned 0x18a002e [0211.422] SaveDC (hdc=0x43010810) returned 1 [0211.422] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b040246 [0211.422] GetClipRgn (hdc=0x43010810, hrgn=0x5b040246) returned 0 [0211.422] SelectClipRgn (hdc=0x43010810, hrgn=0x7b040813) returned 2 [0211.422] DeleteObject (ho=0x5b040246) returned 1 [0211.422] DeleteObject (ho=0x7b040813) returned 1 [0211.422] OffsetViewportOrgEx (in: hdc=0x43010810, x=0, y=0, lppt=0x2690e20 | out: lppt=0x2690e20) returned 1 [0211.422] DrawThemeParentBackground () returned 0x0 [0211.422] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0211.422] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0211.422] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0211.422] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0211.422] GetSystemMetrics (nIndex=42) returned 0 [0211.422] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0211.422] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0211.422] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0211.422] GetCurrentObject (hdc=0x43010810, type=0x1) returned 0x1b00017 [0211.422] GetCurrentObject (hdc=0x43010810, type=0x2) returned 0x1900010 [0211.422] GetCurrentObject (hdc=0x43010810, type=0x7) returned 0x490500d1 [0211.422] GetCurrentObject (hdc=0x43010810, type=0x6) returned 0x18a002e [0211.422] SaveDC (hdc=0x43010810) returned 2 [0211.423] GetNearestColor (hdc=0x43010810, color=0xf5f5f5) returned 0xf5f5f5 [0211.423] CreateSolidBrush (color=0xf5f5f5) returned 0xaa100244 [0211.423] FillRect (hDC=0x43010810, lprc=0x1ee2d0, hbr=0xaa100244) returned 1 [0211.423] DeleteObject (ho=0xaa100244) returned 1 [0211.423] RestoreDC (hdc=0x43010810, nSavedDC=-1) returned 1 [0211.423] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0211.423] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0211.423] GetSystemMetrics (nIndex=42) returned 0 [0211.423] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0211.423] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0211.423] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0211.423] GetCurrentObject (hdc=0x43010810, type=0x1) returned 0x1b00017 [0211.423] GetCurrentObject (hdc=0x43010810, type=0x2) returned 0x1900010 [0211.423] GetCurrentObject (hdc=0x43010810, type=0x7) returned 0x490500d1 [0211.423] GetCurrentObject (hdc=0x43010810, type=0x6) returned 0x18a002e [0211.423] SaveDC (hdc=0x43010810) returned 2 [0211.423] GetNearestColor (hdc=0x43010810, color=0xf5f5f5) returned 0xf5f5f5 [0211.423] CreateSolidBrush (color=0xf5f5f5) returned 0xab100244 [0211.423] FillRect (hDC=0x43010810, lprc=0x1ee270, hbr=0xab100244) returned 1 [0211.423] DeleteObject (ho=0xab100244) returned 1 [0211.423] RestoreDC (hdc=0x43010810, nSavedDC=-1) returned 1 [0211.424] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0211.424] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0211.424] GetSystemMetrics (nIndex=42) returned 0 [0211.424] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0211.424] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0211.424] RestoreDC (hdc=0x43010810, nSavedDC=-1) returned 1 [0211.424] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010810) returned 0x0 [0211.424] IsAppThemed () returned 0x1 [0211.424] GetThemeAppProperties () returned 0x3 [0211.424] GetThemeAppProperties () returned 0x3 [0211.424] IsAppThemed () returned 0x1 [0211.424] GetThemeAppProperties () returned 0x3 [0211.424] GetThemeAppProperties () returned 0x3 [0211.424] IsThemePartDefined () returned 0x1 [0211.424] GdipCreateRegion (region=0x1ee764) returned 0x0 [0211.424] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0211.424] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0211.424] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0211.424] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0211.424] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0211.424] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0211.424] LocalFree (hMem=0x416cb8) returned 0x0 [0211.424] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0211.424] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0211.424] LocalFree (hMem=0x416cb8) returned 0x0 [0211.424] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0211.425] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0211.425] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0211.425] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0211.425] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0211.425] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0211.425] GetCurrentObject (hdc=0x43010810, type=0x1) returned 0x1b00017 [0211.425] GetCurrentObject (hdc=0x43010810, type=0x2) returned 0x1900010 [0211.425] GetCurrentObject (hdc=0x43010810, type=0x7) returned 0x490500d1 [0211.425] GetCurrentObject (hdc=0x43010810, type=0x6) returned 0x18a002e [0211.425] SaveDC (hdc=0x43010810) returned 1 [0211.425] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c040813 [0211.425] GetClipRgn (hdc=0x43010810, hrgn=0x7c040813) returned 0 [0211.425] SelectClipRgn (hdc=0x43010810, hrgn=0x5d040246) returned 2 [0211.425] DeleteObject (ho=0x7c040813) returned 1 [0211.425] DeleteObject (ho=0x5d040246) returned 1 [0211.425] OffsetViewportOrgEx (in: hdc=0x43010810, x=0, y=0, lppt=0x2691660 | out: lppt=0x2691660) returned 1 [0211.425] IsAppThemed () returned 0x1 [0211.425] GetThemeAppProperties () returned 0x3 [0211.425] GetThemeAppProperties () returned 0x3 [0211.425] DrawThemeBackground () returned 0x0 [0211.425] RestoreDC (hdc=0x43010810, nSavedDC=-1) returned 1 [0211.425] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010810) returned 0x0 [0211.425] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0211.425] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0211.426] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0211.426] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0211.426] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0211.426] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0211.426] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0211.426] LocalFree (hMem=0x416cb8) returned 0x0 [0211.426] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0211.426] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0211.426] LocalFree (hMem=0x416cb8) returned 0x0 [0211.426] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0211.426] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0211.426] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0211.426] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0211.426] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0211.426] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0211.426] GetCurrentObject (hdc=0x43010810, type=0x1) returned 0x1b00017 [0211.426] GetCurrentObject (hdc=0x43010810, type=0x2) returned 0x1900010 [0211.426] GetCurrentObject (hdc=0x43010810, type=0x7) returned 0x490500d1 [0211.426] GetCurrentObject (hdc=0x43010810, type=0x6) returned 0x18a002e [0211.426] SaveDC (hdc=0x43010810) returned 1 [0211.426] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e040246 [0211.426] GetClipRgn (hdc=0x43010810, hrgn=0x5e040246) returned 0 [0211.426] SelectClipRgn (hdc=0x43010810, hrgn=0x7d040813) returned 2 [0211.426] DeleteObject (ho=0x5e040246) returned 1 [0211.427] DeleteObject (ho=0x7d040813) returned 1 [0211.427] OffsetViewportOrgEx (in: hdc=0x43010810, x=0, y=0, lppt=0x2691934 | out: lppt=0x2691934) returned 1 [0211.427] IsAppThemed () returned 0x1 [0211.427] GetThemeAppProperties () returned 0x3 [0211.427] GetThemeAppProperties () returned 0x3 [0211.427] GetThemeBackgroundContentRect () returned 0x0 [0211.427] RestoreDC (hdc=0x43010810, nSavedDC=-1) returned 1 [0211.427] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010810) returned 0x0 [0211.427] IsAppThemed () returned 0x1 [0211.427] GetThemeAppProperties () returned 0x3 [0211.427] GetThemeAppProperties () returned 0x3 [0211.427] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0211.427] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0211.427] GetCurrentObject (hdc=0x43010810, type=0x1) returned 0x1b00017 [0211.427] GetCurrentObject (hdc=0x43010810, type=0x2) returned 0x1900010 [0211.427] GetCurrentObject (hdc=0x43010810, type=0x7) returned 0x490500d1 [0211.427] GetCurrentObject (hdc=0x43010810, type=0x6) returned 0x18a002e [0211.427] SaveDC (hdc=0x43010810) returned 1 [0211.427] GetTextAlign (hdc=0x43010810) returned 0x0 [0211.427] GetTextColor (hdc=0x43010810) returned 0x0 [0211.427] GetCurrentObject (hdc=0x43010810, type=0x6) returned 0x18a002e [0211.427] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0211.427] SelectObject (hdc=0x43010810, h=0x220a081a) returned 0x18a002e [0211.427] GetBkMode (hdc=0x43010810) returned 2 [0211.428] SetBkMode (hdc=0x43010810, mode=1) returned 2 [0211.428] DrawTextExW (in: hdc=0x43010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2691cc8 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0211.428] DrawTextExW (in: hdc=0x43010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2691cc8 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0211.428] RestoreDC (hdc=0x43010810, nSavedDC=-1) returned 1 [0211.428] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010810) returned 0x0 [0211.428] GetFocus () returned 0x201d0 [0211.428] IsAppThemed () returned 0x1 [0211.428] GetThemeAppProperties () returned 0x3 [0211.428] GetThemeAppProperties () returned 0x3 [0211.428] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0211.428] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x43010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0211.428] GdipReleaseDC (graphics=0x504fbc8, hdc=0x43010810) returned 0x0 [0211.428] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0211.428] SelectObject (hdc=0x43010810, h=0x185000f) returned 0x490500d1 [0211.428] DeleteDC (hdc=0x43010810) returned 1 [0211.428] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0211.428] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0211.429] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2691dc4, cPoints=0x1 | out: lpPoints=0x2691dc4) returned 42533703 [0211.429] WindowFromPoint (Point=0x38b) returned 0x201d0 [0211.429] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f038b) returned 0x1 [0211.429] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0211.429] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0211.429] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0211.429] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0211.429] GetSystemMetrics (nIndex=42) returned 0 [0211.429] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0211.429] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0211.429] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0211.429] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0211.429] GetCapture () returned 0x201d0 [0211.429] ReleaseCapture () returned 1 [0211.429] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0211.429] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0211.429] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f038b) returned 0x1 [0211.429] IsWindowUnicode (hWnd=0x201d0) returned 1 [0211.429] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0211.429] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f038b) returned 0x1 [0211.429] SetCursor (hCursor=0x10003) returned 0x10003 [0211.429] TranslateMessage (lpMsg=0x1ef250) returned 0 [0211.429] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0211.429] GetKeyState (nVirtKey=1) returned 0 [0211.430] GetKeyState (nVirtKey=2) returned 0 [0211.430] GetKeyState (nVirtKey=4) returned 0 [0211.430] GetKeyState (nVirtKey=5) returned 0 [0211.430] GetKeyState (nVirtKey=6) returned 0 [0211.430] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0211.430] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0211.430] WaitMessage () returned 1 [0214.459] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0214.459] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0391) returned 0x1 [0214.459] IsWindowUnicode (hWnd=0x201d0) returned 1 [0214.460] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0214.460] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0391) returned 0x1 [0214.460] SetCursor (hCursor=0x10003) returned 0x10003 [0214.460] TranslateMessage (lpMsg=0x1ef250) returned 0 [0214.460] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0214.460] GetKeyState (nVirtKey=1) returned 0 [0214.460] GetKeyState (nVirtKey=2) returned 0 [0214.460] GetKeyState (nVirtKey=4) returned 0 [0214.460] GetKeyState (nVirtKey=5) returned 0 [0214.460] GetKeyState (nVirtKey=6) returned 0 [0214.460] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0214.460] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0214.460] WaitMessage () returned 1 [0214.536] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0214.536] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0391) returned 0x1 [0214.536] IsWindowUnicode (hWnd=0x201d0) returned 1 [0214.536] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0214.536] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0391) returned 0x1 [0214.537] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0214.537] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1de024c) returned 0x0 [0214.537] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0214.537] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0214.537] SetCursor (hCursor=0x10003) returned 0x10003 [0214.537] TranslateMessage (lpMsg=0x1ef250) returned 0 [0214.537] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0214.537] GetKeyState (nVirtKey=1) returned -127 [0214.537] GetKeyState (nVirtKey=2) returned 0 [0214.537] GetKeyState (nVirtKey=4) returned 0 [0214.537] GetKeyState (nVirtKey=5) returned 0 [0214.537] GetKeyState (nVirtKey=6) returned 0 [0214.537] IsWindowVisible (hWnd=0x201d0) returned 1 [0214.537] IsWindowEnabled (hWnd=0x201d0) returned 1 [0214.537] SetFocus (hWnd=0x201d0) returned 0x201d0 [0214.537] GetFocus () returned 0x201d0 [0214.537] GetFocus () returned 0x201d0 [0214.537] GetFocus () returned 0x201d0 [0214.537] GetKeyState (nVirtKey=1) returned -127 [0214.537] GetKeyState (nVirtKey=2) returned 0 [0214.537] GetKeyState (nVirtKey=4) returned 0 [0214.537] GetKeyState (nVirtKey=5) returned 0 [0214.538] GetKeyState (nVirtKey=6) returned 0 [0214.538] GetCapture () returned 0x0 [0214.538] SetCapture (hWnd=0x201d0) returned 0x0 [0214.538] GetKeyState (nVirtKey=1) returned -127 [0214.538] GetKeyState (nVirtKey=2) returned 0 [0214.538] GetKeyState (nVirtKey=4) returned 0 [0214.538] GetKeyState (nVirtKey=5) returned 0 [0214.538] GetKeyState (nVirtKey=6) returned 0 [0214.538] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0214.538] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0214.538] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0214.538] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0214.538] TranslateMessage (lpMsg=0x1ef250) returned 0 [0214.538] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0214.538] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0214.538] IsWindowUnicode (hWnd=0x201d0) returned 1 [0214.538] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0214.538] TranslateMessage (lpMsg=0x1ef250) returned 0 [0214.538] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0214.538] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2691ee8, cPoints=0x1 | out: lpPoints=0x2691ee8) returned 42533703 [0214.538] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0214.538] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0214.538] UpdateWindow (hWnd=0x201d0) returned 1 [0214.538] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0214.538] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0214.538] CreateCompatibleDC (hdc=0x160107c7) returned 0x44010810 [0214.539] SelectObject (hdc=0x44010810, h=0x490500d1) returned 0x185000f [0214.539] GdipCreateFromHDC (hdc=0x44010810, graphics=0x1eea5c) returned 0x0 [0214.539] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0214.539] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0214.539] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0214.539] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0214.539] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0214.539] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0214.539] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0214.539] LocalFree (hMem=0x416cb8) returned 0x0 [0214.539] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0214.539] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0214.539] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0214.539] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0214.539] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0214.539] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd110dbd) returned 0x0 [0214.539] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0214.539] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0214.540] GetCurrentObject (hdc=0x44010810, type=0x1) returned 0x1b00017 [0214.540] GetCurrentObject (hdc=0x44010810, type=0x2) returned 0x1900010 [0214.540] GetCurrentObject (hdc=0x44010810, type=0x7) returned 0x490500d1 [0214.540] GetCurrentObject (hdc=0x44010810, type=0x6) returned 0x18a002e [0214.540] SaveDC (hdc=0x44010810) returned 1 [0214.540] GetNearestColor (hdc=0x44010810, color=0xf5f5f5) returned 0xf5f5f5 [0214.540] GetNearestColor (hdc=0x44010810, color=0x515151) returned 0x515151 [0214.540] GetNearestColor (hdc=0x44010810, color=0x0) returned 0x0 [0214.540] GetNearestColor (hdc=0x44010810, color=0x515151) returned 0x515151 [0214.540] GetNearestColor (hdc=0x44010810, color=0x0) returned 0x0 [0214.540] GetNearestColor (hdc=0x44010810, color=0xfafafa) returned 0xfafafa [0214.540] GetNearestColor (hdc=0x44010810, color=0xe0e0e0) returned 0xe0e0e0 [0214.540] GetNearestColor (hdc=0x44010810, color=0xdcdcdc) returned 0xdcdcdc [0214.540] GetNearestColor (hdc=0x44010810, color=0x0) returned 0x0 [0214.540] RestoreDC (hdc=0x44010810, nSavedDC=-1) returned 1 [0214.540] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010810) returned 0x0 [0214.540] IsAppThemed () returned 0x1 [0214.540] GetThemeAppProperties () returned 0x3 [0214.540] GetThemeAppProperties () returned 0x3 [0214.540] IsAppThemed () returned 0x1 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26925ec | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0214.541] IsAppThemed () returned 0x1 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] IsAppThemed () returned 0x1 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] IsAppThemed () returned 0x1 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] IsAppThemed () returned 0x1 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] IsThemePartDefined () returned 0x1 [0214.541] IsAppThemed () returned 0x1 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0214.541] IsAppThemed () returned 0x1 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] IsAppThemed () returned 0x1 [0214.541] GetThemeAppProperties () returned 0x3 [0214.541] GetThemeAppProperties () returned 0x3 [0214.542] IsThemePartDefined () returned 0x1 [0214.542] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0214.542] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0214.542] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0214.542] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0214.542] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0214.542] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0214.542] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0214.542] LocalFree (hMem=0x416cb8) returned 0x0 [0214.542] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0214.542] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0214.542] LocalFree (hMem=0x416cb8) returned 0x0 [0214.542] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0214.542] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0214.542] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0214.542] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0214.542] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0214.542] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0214.542] GetCurrentObject (hdc=0x44010810, type=0x1) returned 0x1b00017 [0214.542] GetCurrentObject (hdc=0x44010810, type=0x2) returned 0x1900010 [0214.542] GetCurrentObject (hdc=0x44010810, type=0x7) returned 0x490500d1 [0214.542] GetCurrentObject (hdc=0x44010810, type=0x6) returned 0x18a002e [0214.543] SaveDC (hdc=0x44010810) returned 1 [0214.543] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e040813 [0214.543] GetClipRgn (hdc=0x44010810, hrgn=0x7e040813) returned 0 [0214.543] SelectClipRgn (hdc=0x44010810, hrgn=0x62040246) returned 2 [0214.543] DeleteObject (ho=0x7e040813) returned 1 [0214.543] DeleteObject (ho=0x62040246) returned 1 [0214.543] OffsetViewportOrgEx (in: hdc=0x44010810, x=0, y=0, lppt=0x2692c9c | out: lppt=0x2692c9c) returned 1 [0214.543] DrawThemeParentBackground () returned 0x0 [0214.543] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0214.543] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0214.543] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0214.543] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0214.543] GetSystemMetrics (nIndex=42) returned 0 [0214.543] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0214.543] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0214.543] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0214.543] GetCurrentObject (hdc=0x44010810, type=0x1) returned 0x1b00017 [0214.543] GetCurrentObject (hdc=0x44010810, type=0x2) returned 0x1900010 [0214.543] GetCurrentObject (hdc=0x44010810, type=0x7) returned 0x490500d1 [0214.544] GetCurrentObject (hdc=0x44010810, type=0x6) returned 0x18a002e [0214.544] SaveDC (hdc=0x44010810) returned 2 [0214.544] GetNearestColor (hdc=0x44010810, color=0xf5f5f5) returned 0xf5f5f5 [0214.544] CreateSolidBrush (color=0xf5f5f5) returned 0xac100244 [0214.544] FillRect (hDC=0x44010810, lprc=0x1ee2d0, hbr=0xac100244) returned 1 [0214.544] DeleteObject (ho=0xac100244) returned 1 [0214.544] RestoreDC (hdc=0x44010810, nSavedDC=-1) returned 1 [0214.544] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0214.544] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0214.544] GetSystemMetrics (nIndex=42) returned 0 [0214.544] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0214.544] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0214.544] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0214.544] GetCurrentObject (hdc=0x44010810, type=0x1) returned 0x1b00017 [0214.544] GetCurrentObject (hdc=0x44010810, type=0x2) returned 0x1900010 [0214.544] GetCurrentObject (hdc=0x44010810, type=0x7) returned 0x490500d1 [0214.544] GetCurrentObject (hdc=0x44010810, type=0x6) returned 0x18a002e [0214.544] SaveDC (hdc=0x44010810) returned 2 [0214.545] GetNearestColor (hdc=0x44010810, color=0xf5f5f5) returned 0xf5f5f5 [0214.545] CreateSolidBrush (color=0xf5f5f5) returned 0xad100244 [0214.545] FillRect (hDC=0x44010810, lprc=0x1ee270, hbr=0xad100244) returned 1 [0214.545] DeleteObject (ho=0xad100244) returned 1 [0214.545] RestoreDC (hdc=0x44010810, nSavedDC=-1) returned 1 [0214.545] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0214.545] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0214.545] GetSystemMetrics (nIndex=42) returned 0 [0214.545] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0214.545] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0214.545] RestoreDC (hdc=0x44010810, nSavedDC=-1) returned 1 [0214.545] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010810) returned 0x0 [0214.545] IsAppThemed () returned 0x1 [0214.545] GetThemeAppProperties () returned 0x3 [0214.545] GetThemeAppProperties () returned 0x3 [0214.545] IsAppThemed () returned 0x1 [0214.545] GetThemeAppProperties () returned 0x3 [0214.545] GetThemeAppProperties () returned 0x3 [0214.545] IsThemePartDefined () returned 0x1 [0214.545] GdipCreateRegion (region=0x1ee764) returned 0x0 [0214.545] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0214.545] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0214.545] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0214.545] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0214.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0214.546] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0214.546] LocalFree (hMem=0x416cb8) returned 0x0 [0214.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0214.546] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0214.546] LocalFree (hMem=0x416cb8) returned 0x0 [0214.546] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0214.546] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0214.546] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0214.546] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0214.546] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0214.546] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0214.546] GetCurrentObject (hdc=0x44010810, type=0x1) returned 0x1b00017 [0214.546] GetCurrentObject (hdc=0x44010810, type=0x2) returned 0x1900010 [0214.546] GetCurrentObject (hdc=0x44010810, type=0x7) returned 0x490500d1 [0214.546] GetCurrentObject (hdc=0x44010810, type=0x6) returned 0x18a002e [0214.546] SaveDC (hdc=0x44010810) returned 1 [0214.546] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x63040246 [0214.546] GetClipRgn (hdc=0x44010810, hrgn=0x63040246) returned 0 [0214.546] SelectClipRgn (hdc=0x44010810, hrgn=0x80040813) returned 2 [0214.546] DeleteObject (ho=0x63040246) returned 1 [0214.546] DeleteObject (ho=0x80040813) returned 1 [0214.546] OffsetViewportOrgEx (in: hdc=0x44010810, x=0, y=0, lppt=0x26934dc | out: lppt=0x26934dc) returned 1 [0214.547] IsAppThemed () returned 0x1 [0214.547] GetThemeAppProperties () returned 0x3 [0214.547] GetThemeAppProperties () returned 0x3 [0214.547] DrawThemeBackground () returned 0x0 [0214.547] RestoreDC (hdc=0x44010810, nSavedDC=-1) returned 1 [0214.547] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010810) returned 0x0 [0214.547] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0214.547] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0214.547] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0214.547] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0214.547] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0214.547] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0214.547] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0214.547] LocalFree (hMem=0x416cb8) returned 0x0 [0214.547] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0214.547] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0214.547] LocalFree (hMem=0x416cb8) returned 0x0 [0214.547] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0214.547] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0214.547] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0214.547] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0214.547] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0214.548] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0214.548] GetCurrentObject (hdc=0x44010810, type=0x1) returned 0x1b00017 [0214.548] GetCurrentObject (hdc=0x44010810, type=0x2) returned 0x1900010 [0214.548] GetCurrentObject (hdc=0x44010810, type=0x7) returned 0x490500d1 [0214.548] GetCurrentObject (hdc=0x44010810, type=0x6) returned 0x18a002e [0214.548] SaveDC (hdc=0x44010810) returned 1 [0214.548] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x81040813 [0214.548] GetClipRgn (hdc=0x44010810, hrgn=0x81040813) returned 0 [0214.548] SelectClipRgn (hdc=0x44010810, hrgn=0x64040246) returned 2 [0214.548] DeleteObject (ho=0x81040813) returned 1 [0214.548] DeleteObject (ho=0x64040246) returned 1 [0214.548] OffsetViewportOrgEx (in: hdc=0x44010810, x=0, y=0, lppt=0x26937b0 | out: lppt=0x26937b0) returned 1 [0214.548] IsAppThemed () returned 0x1 [0214.548] GetThemeAppProperties () returned 0x3 [0214.548] GetThemeAppProperties () returned 0x3 [0214.548] GetThemeBackgroundContentRect () returned 0x0 [0214.548] RestoreDC (hdc=0x44010810, nSavedDC=-1) returned 1 [0214.548] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010810) returned 0x0 [0214.548] IsAppThemed () returned 0x1 [0214.548] GetThemeAppProperties () returned 0x3 [0214.548] GetThemeAppProperties () returned 0x3 [0214.548] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0214.548] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0214.548] GetCurrentObject (hdc=0x44010810, type=0x1) returned 0x1b00017 [0214.548] GetCurrentObject (hdc=0x44010810, type=0x2) returned 0x1900010 [0214.548] GetCurrentObject (hdc=0x44010810, type=0x7) returned 0x490500d1 [0214.549] GetCurrentObject (hdc=0x44010810, type=0x6) returned 0x18a002e [0214.549] SaveDC (hdc=0x44010810) returned 1 [0214.549] GetTextAlign (hdc=0x44010810) returned 0x0 [0214.549] GetTextColor (hdc=0x44010810) returned 0x0 [0214.549] GetCurrentObject (hdc=0x44010810, type=0x6) returned 0x18a002e [0214.549] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0214.549] SelectObject (hdc=0x44010810, h=0x220a081a) returned 0x18a002e [0214.549] GetBkMode (hdc=0x44010810) returned 2 [0214.549] SetBkMode (hdc=0x44010810, mode=1) returned 2 [0214.549] DrawTextExW (in: hdc=0x44010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x2693b44 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0214.549] DrawTextExW (in: hdc=0x44010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x2693b44 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0214.549] RestoreDC (hdc=0x44010810, nSavedDC=-1) returned 1 [0214.549] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010810) returned 0x0 [0214.549] GetFocus () returned 0x201d0 [0214.550] IsAppThemed () returned 0x1 [0214.550] GetThemeAppProperties () returned 0x3 [0214.550] GetThemeAppProperties () returned 0x3 [0214.550] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0214.550] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x44010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0214.550] GdipReleaseDC (graphics=0x504fbc8, hdc=0x44010810) returned 0x0 [0214.550] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0214.550] SelectObject (hdc=0x44010810, h=0x185000f) returned 0x490500d1 [0214.550] DeleteDC (hdc=0x44010810) returned 1 [0214.550] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0214.550] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0214.550] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2693c40, cPoints=0x1 | out: lpPoints=0x2693c40) returned 42533703 [0214.550] WindowFromPoint (Point=0x391) returned 0x201d0 [0214.550] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0391) returned 0x1 [0214.550] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0214.550] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0214.550] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0214.550] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0214.550] GetSystemMetrics (nIndex=42) returned 0 [0214.550] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0214.550] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0214.551] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0214.551] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0214.551] GetCapture () returned 0x201d0 [0214.551] ReleaseCapture () returned 1 [0214.551] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0214.551] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0214.551] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0391) returned 0x1 [0214.551] IsWindowUnicode (hWnd=0x201d0) returned 1 [0214.551] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0214.551] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0391) returned 0x1 [0214.551] SetCursor (hCursor=0x10003) returned 0x10003 [0214.551] TranslateMessage (lpMsg=0x1ef250) returned 0 [0214.551] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0214.551] GetKeyState (nVirtKey=1) returned 1 [0214.551] GetKeyState (nVirtKey=2) returned 0 [0214.551] GetKeyState (nVirtKey=4) returned 0 [0214.551] GetKeyState (nVirtKey=5) returned 0 [0214.551] GetKeyState (nVirtKey=6) returned 0 [0214.551] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0214.551] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0214.551] WaitMessage () returned 1 [0217.578] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0217.578] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0217.578] IsWindowUnicode (hWnd=0x201d0) returned 1 [0217.578] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0217.578] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0217.579] SetCursor (hCursor=0x10003) returned 0x10003 [0217.579] TranslateMessage (lpMsg=0x1ef250) returned 0 [0217.579] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0217.579] GetKeyState (nVirtKey=1) returned 1 [0217.579] GetKeyState (nVirtKey=2) returned 0 [0217.579] GetKeyState (nVirtKey=4) returned 0 [0217.579] GetKeyState (nVirtKey=5) returned 0 [0217.579] GetKeyState (nVirtKey=6) returned 0 [0217.579] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0217.579] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0217.579] WaitMessage () returned 1 [0217.656] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0217.656] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0217.656] IsWindowUnicode (hWnd=0x201d0) returned 1 [0217.656] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0217.656] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0217.656] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0217.656] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e4023e) returned 0x0 [0217.656] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0217.656] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0217.656] SetCursor (hCursor=0x10003) returned 0x10003 [0217.656] TranslateMessage (lpMsg=0x1ef250) returned 0 [0217.657] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0217.657] GetKeyState (nVirtKey=1) returned -128 [0217.657] GetKeyState (nVirtKey=2) returned 0 [0217.657] GetKeyState (nVirtKey=4) returned 0 [0217.657] GetKeyState (nVirtKey=5) returned 0 [0217.657] GetKeyState (nVirtKey=6) returned 0 [0217.657] IsWindowVisible (hWnd=0x201d0) returned 1 [0217.657] IsWindowEnabled (hWnd=0x201d0) returned 1 [0217.657] SetFocus (hWnd=0x201d0) returned 0x201d0 [0217.657] GetFocus () returned 0x201d0 [0217.657] GetFocus () returned 0x201d0 [0217.657] GetFocus () returned 0x201d0 [0217.657] GetKeyState (nVirtKey=1) returned -128 [0217.657] GetKeyState (nVirtKey=2) returned 0 [0217.657] GetKeyState (nVirtKey=4) returned 0 [0217.657] GetKeyState (nVirtKey=5) returned 0 [0217.657] GetKeyState (nVirtKey=6) returned 0 [0217.657] GetCapture () returned 0x0 [0217.657] SetCapture (hWnd=0x201d0) returned 0x0 [0217.657] GetKeyState (nVirtKey=1) returned -128 [0217.657] GetKeyState (nVirtKey=2) returned 0 [0217.657] GetKeyState (nVirtKey=4) returned 0 [0217.657] GetKeyState (nVirtKey=5) returned 0 [0217.657] GetKeyState (nVirtKey=6) returned 0 [0217.657] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0217.657] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0217.657] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0217.657] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0217.657] TranslateMessage (lpMsg=0x1ef250) returned 0 [0217.657] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0217.657] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0217.657] IsWindowUnicode (hWnd=0x201d0) returned 1 [0217.657] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0217.657] TranslateMessage (lpMsg=0x1ef250) returned 0 [0217.657] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0217.657] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2693d64, cPoints=0x1 | out: lpPoints=0x2693d64) returned 42533703 [0217.657] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0217.657] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0217.658] UpdateWindow (hWnd=0x201d0) returned 1 [0217.658] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0217.658] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0217.658] CreateCompatibleDC (hdc=0x160107c7) returned 0x45010810 [0217.658] SelectObject (hdc=0x45010810, h=0x490500d1) returned 0x185000f [0217.658] GdipCreateFromHDC (hdc=0x45010810, graphics=0x1eea5c) returned 0x0 [0217.658] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0217.658] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0217.658] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0217.658] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0217.658] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0217.658] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0217.658] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0217.658] LocalFree (hMem=0x416cb8) returned 0x0 [0217.658] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0217.658] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0217.658] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0217.658] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0217.658] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0217.659] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd0f0dbd) returned 0x0 [0217.659] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0217.659] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0217.659] GetCurrentObject (hdc=0x45010810, type=0x1) returned 0x1b00017 [0217.659] GetCurrentObject (hdc=0x45010810, type=0x2) returned 0x1900010 [0217.659] GetCurrentObject (hdc=0x45010810, type=0x7) returned 0x490500d1 [0217.659] GetCurrentObject (hdc=0x45010810, type=0x6) returned 0x18a002e [0217.659] SaveDC (hdc=0x45010810) returned 1 [0217.659] GetNearestColor (hdc=0x45010810, color=0xf5f5f5) returned 0xf5f5f5 [0217.659] GetNearestColor (hdc=0x45010810, color=0x515151) returned 0x515151 [0217.659] GetNearestColor (hdc=0x45010810, color=0x0) returned 0x0 [0217.659] GetNearestColor (hdc=0x45010810, color=0x515151) returned 0x515151 [0217.659] GetNearestColor (hdc=0x45010810, color=0x0) returned 0x0 [0217.659] GetNearestColor (hdc=0x45010810, color=0xfafafa) returned 0xfafafa [0217.659] GetNearestColor (hdc=0x45010810, color=0xe0e0e0) returned 0xe0e0e0 [0217.659] GetNearestColor (hdc=0x45010810, color=0xdcdcdc) returned 0xdcdcdc [0217.659] GetNearestColor (hdc=0x45010810, color=0x0) returned 0x0 [0217.660] RestoreDC (hdc=0x45010810, nSavedDC=-1) returned 1 [0217.660] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010810) returned 0x0 [0217.660] IsAppThemed () returned 0x1 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] IsAppThemed () returned 0x1 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2694468 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0217.660] IsAppThemed () returned 0x1 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] IsAppThemed () returned 0x1 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] IsAppThemed () returned 0x1 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] IsAppThemed () returned 0x1 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] IsThemePartDefined () returned 0x1 [0217.660] IsAppThemed () returned 0x1 [0217.660] GetThemeAppProperties () returned 0x3 [0217.660] GetThemeAppProperties () returned 0x3 [0217.661] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0217.661] IsAppThemed () returned 0x1 [0217.661] GetThemeAppProperties () returned 0x3 [0217.661] GetThemeAppProperties () returned 0x3 [0217.661] IsAppThemed () returned 0x1 [0217.661] GetThemeAppProperties () returned 0x3 [0217.661] GetThemeAppProperties () returned 0x3 [0217.661] IsThemePartDefined () returned 0x1 [0217.661] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0217.661] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0217.661] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0217.661] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0217.661] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0217.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0217.661] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0217.661] LocalFree (hMem=0x416cb8) returned 0x0 [0217.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0217.661] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0217.661] LocalFree (hMem=0x416cb8) returned 0x0 [0217.661] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0217.661] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0217.661] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0217.661] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0217.661] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0217.661] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0217.661] GetCurrentObject (hdc=0x45010810, type=0x1) returned 0x1b00017 [0217.661] GetCurrentObject (hdc=0x45010810, type=0x2) returned 0x1900010 [0217.662] GetCurrentObject (hdc=0x45010810, type=0x7) returned 0x490500d1 [0217.662] GetCurrentObject (hdc=0x45010810, type=0x6) returned 0x18a002e [0217.662] SaveDC (hdc=0x45010810) returned 1 [0217.662] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x65040246 [0217.662] GetClipRgn (hdc=0x45010810, hrgn=0x65040246) returned 0 [0217.662] SelectClipRgn (hdc=0x45010810, hrgn=0x85040813) returned 2 [0217.662] DeleteObject (ho=0x65040246) returned 1 [0217.662] DeleteObject (ho=0x85040813) returned 1 [0217.662] OffsetViewportOrgEx (in: hdc=0x45010810, x=0, y=0, lppt=0x2694b18 | out: lppt=0x2694b18) returned 1 [0217.662] DrawThemeParentBackground () returned 0x0 [0217.662] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0217.662] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0217.662] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0217.662] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0217.662] GetSystemMetrics (nIndex=42) returned 0 [0217.662] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0217.662] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0217.662] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0217.662] GetCurrentObject (hdc=0x45010810, type=0x1) returned 0x1b00017 [0217.662] GetCurrentObject (hdc=0x45010810, type=0x2) returned 0x1900010 [0217.663] GetCurrentObject (hdc=0x45010810, type=0x7) returned 0x490500d1 [0217.663] GetCurrentObject (hdc=0x45010810, type=0x6) returned 0x18a002e [0217.663] SaveDC (hdc=0x45010810) returned 2 [0217.663] GetNearestColor (hdc=0x45010810, color=0xf5f5f5) returned 0xf5f5f5 [0217.663] CreateSolidBrush (color=0xf5f5f5) returned 0xae100244 [0217.663] FillRect (hDC=0x45010810, lprc=0x1ee2d0, hbr=0xae100244) returned 1 [0217.663] DeleteObject (ho=0xae100244) returned 1 [0217.663] RestoreDC (hdc=0x45010810, nSavedDC=-1) returned 1 [0217.663] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0217.663] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0217.663] GetSystemMetrics (nIndex=42) returned 0 [0217.663] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0217.663] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0217.663] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0217.663] GetCurrentObject (hdc=0x45010810, type=0x1) returned 0x1b00017 [0217.663] GetCurrentObject (hdc=0x45010810, type=0x2) returned 0x1900010 [0217.663] GetCurrentObject (hdc=0x45010810, type=0x7) returned 0x490500d1 [0217.663] GetCurrentObject (hdc=0x45010810, type=0x6) returned 0x18a002e [0217.663] SaveDC (hdc=0x45010810) returned 2 [0217.663] GetNearestColor (hdc=0x45010810, color=0xf5f5f5) returned 0xf5f5f5 [0217.664] CreateSolidBrush (color=0xf5f5f5) returned 0xaf100244 [0217.664] FillRect (hDC=0x45010810, lprc=0x1ee270, hbr=0xaf100244) returned 1 [0217.664] DeleteObject (ho=0xaf100244) returned 1 [0217.664] RestoreDC (hdc=0x45010810, nSavedDC=-1) returned 1 [0217.664] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0217.664] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0217.664] GetSystemMetrics (nIndex=42) returned 0 [0217.664] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0217.664] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0217.664] RestoreDC (hdc=0x45010810, nSavedDC=-1) returned 1 [0217.664] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010810) returned 0x0 [0217.664] IsAppThemed () returned 0x1 [0217.664] GetThemeAppProperties () returned 0x3 [0217.664] GetThemeAppProperties () returned 0x3 [0217.664] IsAppThemed () returned 0x1 [0217.664] GetThemeAppProperties () returned 0x3 [0217.664] GetThemeAppProperties () returned 0x3 [0217.664] IsThemePartDefined () returned 0x1 [0217.664] GdipCreateRegion (region=0x1ee764) returned 0x0 [0217.664] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0217.664] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0217.664] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0217.664] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0217.665] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0217.665] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0217.665] LocalFree (hMem=0x416cb8) returned 0x0 [0217.665] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0217.665] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0217.665] LocalFree (hMem=0x416cb8) returned 0x0 [0217.665] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0217.665] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0217.665] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0217.665] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0217.665] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0217.665] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0217.665] GetCurrentObject (hdc=0x45010810, type=0x1) returned 0x1b00017 [0217.665] GetCurrentObject (hdc=0x45010810, type=0x2) returned 0x1900010 [0217.665] GetCurrentObject (hdc=0x45010810, type=0x7) returned 0x490500d1 [0217.665] GetCurrentObject (hdc=0x45010810, type=0x6) returned 0x18a002e [0217.665] SaveDC (hdc=0x45010810) returned 1 [0217.665] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x86040813 [0217.665] GetClipRgn (hdc=0x45010810, hrgn=0x86040813) returned 0 [0217.665] SelectClipRgn (hdc=0x45010810, hrgn=0x67040246) returned 2 [0217.666] DeleteObject (ho=0x86040813) returned 1 [0217.666] DeleteObject (ho=0x67040246) returned 1 [0217.666] OffsetViewportOrgEx (in: hdc=0x45010810, x=0, y=0, lppt=0x2695358 | out: lppt=0x2695358) returned 1 [0217.666] IsAppThemed () returned 0x1 [0217.666] GetThemeAppProperties () returned 0x3 [0217.666] GetThemeAppProperties () returned 0x3 [0217.666] DrawThemeBackground () returned 0x0 [0217.666] RestoreDC (hdc=0x45010810, nSavedDC=-1) returned 1 [0217.666] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010810) returned 0x0 [0217.666] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0217.666] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0217.666] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0217.666] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0217.666] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0217.666] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0217.666] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0217.666] LocalFree (hMem=0x416cb8) returned 0x0 [0217.666] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0217.666] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0217.666] LocalFree (hMem=0x416cb8) returned 0x0 [0217.666] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0217.666] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0217.666] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0217.667] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0217.667] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0217.667] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0217.667] GetCurrentObject (hdc=0x45010810, type=0x1) returned 0x1b00017 [0217.667] GetCurrentObject (hdc=0x45010810, type=0x2) returned 0x1900010 [0217.667] GetCurrentObject (hdc=0x45010810, type=0x7) returned 0x490500d1 [0217.667] GetCurrentObject (hdc=0x45010810, type=0x6) returned 0x18a002e [0217.667] SaveDC (hdc=0x45010810) returned 1 [0217.667] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x68040246 [0217.667] GetClipRgn (hdc=0x45010810, hrgn=0x68040246) returned 0 [0217.667] SelectClipRgn (hdc=0x45010810, hrgn=0x87040813) returned 2 [0217.667] DeleteObject (ho=0x68040246) returned 1 [0217.667] DeleteObject (ho=0x87040813) returned 1 [0217.667] OffsetViewportOrgEx (in: hdc=0x45010810, x=0, y=0, lppt=0x269562c | out: lppt=0x269562c) returned 1 [0217.667] IsAppThemed () returned 0x1 [0217.667] GetThemeAppProperties () returned 0x3 [0217.667] GetThemeAppProperties () returned 0x3 [0217.667] GetThemeBackgroundContentRect () returned 0x0 [0217.667] RestoreDC (hdc=0x45010810, nSavedDC=-1) returned 1 [0217.667] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010810) returned 0x0 [0217.667] IsAppThemed () returned 0x1 [0217.667] GetThemeAppProperties () returned 0x3 [0217.667] GetThemeAppProperties () returned 0x3 [0217.667] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0217.668] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0217.668] GetCurrentObject (hdc=0x45010810, type=0x1) returned 0x1b00017 [0217.668] GetCurrentObject (hdc=0x45010810, type=0x2) returned 0x1900010 [0217.668] GetCurrentObject (hdc=0x45010810, type=0x7) returned 0x490500d1 [0217.668] GetCurrentObject (hdc=0x45010810, type=0x6) returned 0x18a002e [0217.668] SaveDC (hdc=0x45010810) returned 1 [0217.668] GetTextAlign (hdc=0x45010810) returned 0x0 [0217.668] GetTextColor (hdc=0x45010810) returned 0x0 [0217.668] GetCurrentObject (hdc=0x45010810, type=0x6) returned 0x18a002e [0217.668] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0217.668] SelectObject (hdc=0x45010810, h=0x220a081a) returned 0x18a002e [0217.668] GetBkMode (hdc=0x45010810) returned 2 [0217.668] SetBkMode (hdc=0x45010810, mode=1) returned 2 [0217.668] DrawTextExW (in: hdc=0x45010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26959c0 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0217.668] DrawTextExW (in: hdc=0x45010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26959c0 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0217.668] RestoreDC (hdc=0x45010810, nSavedDC=-1) returned 1 [0217.668] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010810) returned 0x0 [0217.669] GetFocus () returned 0x201d0 [0217.669] IsAppThemed () returned 0x1 [0217.669] GetThemeAppProperties () returned 0x3 [0217.669] GetThemeAppProperties () returned 0x3 [0217.669] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0217.669] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x45010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0217.669] GdipReleaseDC (graphics=0x504fbc8, hdc=0x45010810) returned 0x0 [0217.669] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0217.669] SelectObject (hdc=0x45010810, h=0x185000f) returned 0x490500d1 [0217.669] DeleteDC (hdc=0x45010810) returned 1 [0217.669] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0217.669] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0217.669] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2695abc, cPoints=0x1 | out: lpPoints=0x2695abc) returned 42533703 [0217.669] WindowFromPoint (Point=0x383) returned 0x201d0 [0217.669] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0217.669] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0217.669] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0217.669] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0217.669] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0217.669] GetSystemMetrics (nIndex=42) returned 0 [0217.669] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0217.669] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0217.670] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0217.670] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0217.670] GetCapture () returned 0x201d0 [0217.670] ReleaseCapture () returned 1 [0217.670] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0217.670] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0217.670] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0217.670] IsWindowUnicode (hWnd=0x201d0) returned 1 [0217.670] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0217.670] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2950383) returned 0x1 [0217.670] SetCursor (hCursor=0x10003) returned 0x10003 [0217.670] TranslateMessage (lpMsg=0x1ef250) returned 0 [0217.670] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0217.670] GetKeyState (nVirtKey=1) returned 0 [0217.670] GetKeyState (nVirtKey=2) returned 0 [0217.670] GetKeyState (nVirtKey=4) returned 0 [0217.670] GetKeyState (nVirtKey=5) returned 0 [0217.670] GetKeyState (nVirtKey=6) returned 0 [0217.670] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0217.670] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0217.670] WaitMessage () returned 1 [0220.698] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0220.698] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x297038e) returned 0x1 [0220.698] IsWindowUnicode (hWnd=0x201d0) returned 1 [0220.699] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0220.699] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x297038e) returned 0x1 [0220.699] SetCursor (hCursor=0x10003) returned 0x10003 [0220.699] TranslateMessage (lpMsg=0x1ef250) returned 0 [0220.699] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0220.699] GetKeyState (nVirtKey=1) returned 0 [0220.699] GetKeyState (nVirtKey=2) returned 0 [0220.699] GetKeyState (nVirtKey=4) returned 0 [0220.699] GetKeyState (nVirtKey=5) returned 0 [0220.699] GetKeyState (nVirtKey=6) returned 0 [0220.699] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0220.699] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0220.699] WaitMessage () returned 1 [0220.776] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0220.776] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x297038e) returned 0x1 [0220.776] IsWindowUnicode (hWnd=0x201d0) returned 1 [0220.776] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0220.776] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x297038e) returned 0x1 [0220.776] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0220.777] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e60249) returned 0x0 [0220.777] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0220.777] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0220.777] SetCursor (hCursor=0x10003) returned 0x10003 [0220.777] TranslateMessage (lpMsg=0x1ef250) returned 0 [0220.777] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0220.777] GetKeyState (nVirtKey=1) returned -127 [0220.777] GetKeyState (nVirtKey=2) returned 0 [0220.777] GetKeyState (nVirtKey=4) returned 0 [0220.777] GetKeyState (nVirtKey=5) returned 0 [0220.777] GetKeyState (nVirtKey=6) returned 0 [0220.777] IsWindowVisible (hWnd=0x201d0) returned 1 [0220.777] IsWindowEnabled (hWnd=0x201d0) returned 1 [0220.777] SetFocus (hWnd=0x201d0) returned 0x201d0 [0220.777] GetFocus () returned 0x201d0 [0220.777] GetFocus () returned 0x201d0 [0220.777] GetFocus () returned 0x201d0 [0220.777] GetKeyState (nVirtKey=1) returned -127 [0220.777] GetKeyState (nVirtKey=2) returned 0 [0220.777] GetKeyState (nVirtKey=4) returned 0 [0220.777] GetKeyState (nVirtKey=5) returned 0 [0220.777] GetKeyState (nVirtKey=6) returned 0 [0220.777] GetCapture () returned 0x0 [0220.777] SetCapture (hWnd=0x201d0) returned 0x0 [0220.777] GetKeyState (nVirtKey=1) returned -127 [0220.777] GetKeyState (nVirtKey=2) returned 0 [0220.777] GetKeyState (nVirtKey=4) returned 0 [0220.777] GetKeyState (nVirtKey=5) returned 0 [0220.777] GetKeyState (nVirtKey=6) returned 0 [0220.777] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0220.777] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0220.777] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0220.778] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0220.778] TranslateMessage (lpMsg=0x1ef250) returned 0 [0220.778] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0220.778] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0220.778] IsWindowUnicode (hWnd=0x201d0) returned 1 [0220.778] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0220.778] TranslateMessage (lpMsg=0x1ef250) returned 0 [0220.778] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0220.778] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2695be0, cPoints=0x1 | out: lpPoints=0x2695be0) returned 42533703 [0220.778] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0220.778] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0220.778] UpdateWindow (hWnd=0x201d0) returned 1 [0220.778] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0220.778] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0220.778] CreateCompatibleDC (hdc=0x160107c7) returned 0x46010810 [0220.778] SelectObject (hdc=0x46010810, h=0x490500d1) returned 0x185000f [0220.778] GdipCreateFromHDC (hdc=0x46010810, graphics=0x1eea5c) returned 0x0 [0220.778] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0220.778] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0220.778] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0220.778] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0220.778] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0220.779] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0220.779] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0220.779] LocalFree (hMem=0x416cb8) returned 0x0 [0220.779] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0220.779] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0220.779] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0220.779] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0220.779] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0220.779] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd0d0dbd) returned 0x0 [0220.779] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0220.779] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0220.779] GetCurrentObject (hdc=0x46010810, type=0x1) returned 0x1b00017 [0220.779] GetCurrentObject (hdc=0x46010810, type=0x2) returned 0x1900010 [0220.779] GetCurrentObject (hdc=0x46010810, type=0x7) returned 0x490500d1 [0220.779] GetCurrentObject (hdc=0x46010810, type=0x6) returned 0x18a002e [0220.779] SaveDC (hdc=0x46010810) returned 1 [0220.779] GetNearestColor (hdc=0x46010810, color=0xf5f5f5) returned 0xf5f5f5 [0220.779] GetNearestColor (hdc=0x46010810, color=0x515151) returned 0x515151 [0220.779] GetNearestColor (hdc=0x46010810, color=0x0) returned 0x0 [0220.779] GetNearestColor (hdc=0x46010810, color=0x515151) returned 0x515151 [0220.780] GetNearestColor (hdc=0x46010810, color=0x0) returned 0x0 [0220.780] GetNearestColor (hdc=0x46010810, color=0xfafafa) returned 0xfafafa [0220.780] GetNearestColor (hdc=0x46010810, color=0xe0e0e0) returned 0xe0e0e0 [0220.780] GetNearestColor (hdc=0x46010810, color=0xdcdcdc) returned 0xdcdcdc [0220.780] GetNearestColor (hdc=0x46010810, color=0x0) returned 0x0 [0220.780] RestoreDC (hdc=0x46010810, nSavedDC=-1) returned 1 [0220.780] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010810) returned 0x0 [0220.780] IsAppThemed () returned 0x1 [0220.780] GetThemeAppProperties () returned 0x3 [0220.780] GetThemeAppProperties () returned 0x3 [0220.780] IsAppThemed () returned 0x1 [0220.780] GetThemeAppProperties () returned 0x3 [0220.780] GetThemeAppProperties () returned 0x3 [0220.780] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26962e4 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0220.780] IsAppThemed () returned 0x1 [0220.780] GetThemeAppProperties () returned 0x3 [0220.780] GetThemeAppProperties () returned 0x3 [0220.780] IsAppThemed () returned 0x1 [0220.780] GetThemeAppProperties () returned 0x3 [0220.780] GetThemeAppProperties () returned 0x3 [0220.780] IsAppThemed () returned 0x1 [0220.780] GetThemeAppProperties () returned 0x3 [0220.780] GetThemeAppProperties () returned 0x3 [0220.780] IsAppThemed () returned 0x1 [0220.781] GetThemeAppProperties () returned 0x3 [0220.781] GetThemeAppProperties () returned 0x3 [0220.781] IsThemePartDefined () returned 0x1 [0220.781] IsAppThemed () returned 0x1 [0220.781] GetThemeAppProperties () returned 0x3 [0220.781] GetThemeAppProperties () returned 0x3 [0220.781] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0220.781] IsAppThemed () returned 0x1 [0220.781] GetThemeAppProperties () returned 0x3 [0220.781] GetThemeAppProperties () returned 0x3 [0220.781] IsAppThemed () returned 0x1 [0220.781] GetThemeAppProperties () returned 0x3 [0220.781] GetThemeAppProperties () returned 0x3 [0220.781] IsThemePartDefined () returned 0x1 [0220.781] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0220.781] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0220.781] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0220.781] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0220.781] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0220.781] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0220.781] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0220.781] LocalFree (hMem=0x416cb8) returned 0x0 [0220.781] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0220.781] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0220.781] LocalFree (hMem=0x416cb8) returned 0x0 [0220.781] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0220.781] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0220.781] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0220.781] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0220.781] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0220.782] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0220.782] GetCurrentObject (hdc=0x46010810, type=0x1) returned 0x1b00017 [0220.782] GetCurrentObject (hdc=0x46010810, type=0x2) returned 0x1900010 [0220.782] GetCurrentObject (hdc=0x46010810, type=0x7) returned 0x490500d1 [0220.782] GetCurrentObject (hdc=0x46010810, type=0x6) returned 0x18a002e [0220.782] SaveDC (hdc=0x46010810) returned 1 [0220.782] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x88040813 [0220.782] GetClipRgn (hdc=0x46010810, hrgn=0x88040813) returned 0 [0220.782] SelectClipRgn (hdc=0x46010810, hrgn=0x6c040246) returned 2 [0220.782] DeleteObject (ho=0x88040813) returned 1 [0220.782] DeleteObject (ho=0x6c040246) returned 1 [0220.782] OffsetViewportOrgEx (in: hdc=0x46010810, x=0, y=0, lppt=0x2696994 | out: lppt=0x2696994) returned 1 [0220.782] DrawThemeParentBackground () returned 0x0 [0220.782] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0220.782] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0220.782] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0220.782] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0220.782] GetSystemMetrics (nIndex=42) returned 0 [0220.782] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0220.782] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0220.782] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0220.782] GetCurrentObject (hdc=0x46010810, type=0x1) returned 0x1b00017 [0220.782] GetCurrentObject (hdc=0x46010810, type=0x2) returned 0x1900010 [0220.783] GetCurrentObject (hdc=0x46010810, type=0x7) returned 0x490500d1 [0220.783] GetCurrentObject (hdc=0x46010810, type=0x6) returned 0x18a002e [0220.783] SaveDC (hdc=0x46010810) returned 2 [0220.783] GetNearestColor (hdc=0x46010810, color=0xf5f5f5) returned 0xf5f5f5 [0220.783] CreateSolidBrush (color=0xf5f5f5) returned 0xb0100244 [0220.783] FillRect (hDC=0x46010810, lprc=0x1ee2d0, hbr=0xb0100244) returned 1 [0220.783] DeleteObject (ho=0xb0100244) returned 1 [0220.783] RestoreDC (hdc=0x46010810, nSavedDC=-1) returned 1 [0220.783] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0220.783] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0220.783] GetSystemMetrics (nIndex=42) returned 0 [0220.783] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0220.783] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0220.783] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0220.783] GetCurrentObject (hdc=0x46010810, type=0x1) returned 0x1b00017 [0220.783] GetCurrentObject (hdc=0x46010810, type=0x2) returned 0x1900010 [0220.783] GetCurrentObject (hdc=0x46010810, type=0x7) returned 0x490500d1 [0220.783] GetCurrentObject (hdc=0x46010810, type=0x6) returned 0x18a002e [0220.783] SaveDC (hdc=0x46010810) returned 2 [0220.783] GetNearestColor (hdc=0x46010810, color=0xf5f5f5) returned 0xf5f5f5 [0220.784] CreateSolidBrush (color=0xf5f5f5) returned 0xb1100244 [0220.784] FillRect (hDC=0x46010810, lprc=0x1ee270, hbr=0xb1100244) returned 1 [0220.784] DeleteObject (ho=0xb1100244) returned 1 [0220.784] RestoreDC (hdc=0x46010810, nSavedDC=-1) returned 1 [0220.784] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0220.784] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0220.784] GetSystemMetrics (nIndex=42) returned 0 [0220.784] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0220.784] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0220.784] RestoreDC (hdc=0x46010810, nSavedDC=-1) returned 1 [0220.784] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010810) returned 0x0 [0220.784] IsAppThemed () returned 0x1 [0220.784] GetThemeAppProperties () returned 0x3 [0220.784] GetThemeAppProperties () returned 0x3 [0220.784] IsAppThemed () returned 0x1 [0220.784] GetThemeAppProperties () returned 0x3 [0220.784] GetThemeAppProperties () returned 0x3 [0220.784] IsThemePartDefined () returned 0x1 [0220.784] GdipCreateRegion (region=0x1ee764) returned 0x0 [0220.784] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0220.784] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0220.784] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0220.784] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0220.784] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0220.784] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0220.785] LocalFree (hMem=0x416cb8) returned 0x0 [0220.785] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0220.785] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0220.785] LocalFree (hMem=0x416cb8) returned 0x0 [0220.785] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0220.785] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0220.785] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0220.785] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0220.785] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0220.785] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0220.785] GetCurrentObject (hdc=0x46010810, type=0x1) returned 0x1b00017 [0220.785] GetCurrentObject (hdc=0x46010810, type=0x2) returned 0x1900010 [0220.785] GetCurrentObject (hdc=0x46010810, type=0x7) returned 0x490500d1 [0220.785] GetCurrentObject (hdc=0x46010810, type=0x6) returned 0x18a002e [0220.785] SaveDC (hdc=0x46010810) returned 1 [0220.785] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d040246 [0220.785] GetClipRgn (hdc=0x46010810, hrgn=0x6d040246) returned 0 [0220.785] SelectClipRgn (hdc=0x46010810, hrgn=0x8a040813) returned 2 [0220.785] DeleteObject (ho=0x6d040246) returned 1 [0220.785] DeleteObject (ho=0x8a040813) returned 1 [0220.785] OffsetViewportOrgEx (in: hdc=0x46010810, x=0, y=0, lppt=0x26971d4 | out: lppt=0x26971d4) returned 1 [0220.785] IsAppThemed () returned 0x1 [0220.785] GetThemeAppProperties () returned 0x3 [0220.785] GetThemeAppProperties () returned 0x3 [0220.785] DrawThemeBackground () returned 0x0 [0220.786] RestoreDC (hdc=0x46010810, nSavedDC=-1) returned 1 [0220.786] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010810) returned 0x0 [0220.786] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0220.786] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0220.786] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0220.786] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0220.786] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0220.786] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0220.786] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0220.786] LocalFree (hMem=0x416cb8) returned 0x0 [0220.786] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0220.786] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0220.786] LocalFree (hMem=0x416cb8) returned 0x0 [0220.786] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0220.786] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0220.786] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0220.786] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0220.786] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0220.786] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0220.786] GetCurrentObject (hdc=0x46010810, type=0x1) returned 0x1b00017 [0220.786] GetCurrentObject (hdc=0x46010810, type=0x2) returned 0x1900010 [0220.786] GetCurrentObject (hdc=0x46010810, type=0x7) returned 0x490500d1 [0220.786] GetCurrentObject (hdc=0x46010810, type=0x6) returned 0x18a002e [0220.787] SaveDC (hdc=0x46010810) returned 1 [0220.787] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8b040813 [0220.787] GetClipRgn (hdc=0x46010810, hrgn=0x8b040813) returned 0 [0220.787] SelectClipRgn (hdc=0x46010810, hrgn=0x6e040246) returned 2 [0220.787] DeleteObject (ho=0x8b040813) returned 1 [0220.787] DeleteObject (ho=0x6e040246) returned 1 [0220.787] OffsetViewportOrgEx (in: hdc=0x46010810, x=0, y=0, lppt=0x26974a8 | out: lppt=0x26974a8) returned 1 [0220.787] IsAppThemed () returned 0x1 [0220.787] GetThemeAppProperties () returned 0x3 [0220.787] GetThemeAppProperties () returned 0x3 [0220.787] GetThemeBackgroundContentRect () returned 0x0 [0220.787] RestoreDC (hdc=0x46010810, nSavedDC=-1) returned 1 [0220.787] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010810) returned 0x0 [0220.787] IsAppThemed () returned 0x1 [0220.787] GetThemeAppProperties () returned 0x3 [0220.787] GetThemeAppProperties () returned 0x3 [0220.787] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0220.787] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0220.787] GetCurrentObject (hdc=0x46010810, type=0x1) returned 0x1b00017 [0220.787] GetCurrentObject (hdc=0x46010810, type=0x2) returned 0x1900010 [0220.787] GetCurrentObject (hdc=0x46010810, type=0x7) returned 0x490500d1 [0220.787] GetCurrentObject (hdc=0x46010810, type=0x6) returned 0x18a002e [0220.787] SaveDC (hdc=0x46010810) returned 1 [0220.787] GetTextAlign (hdc=0x46010810) returned 0x0 [0220.787] GetTextColor (hdc=0x46010810) returned 0x0 [0220.788] GetCurrentObject (hdc=0x46010810, type=0x6) returned 0x18a002e [0220.788] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0220.788] SelectObject (hdc=0x46010810, h=0x220a081a) returned 0x18a002e [0220.788] GetBkMode (hdc=0x46010810) returned 2 [0220.788] SetBkMode (hdc=0x46010810, mode=1) returned 2 [0220.788] DrawTextExW (in: hdc=0x46010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x269783c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0220.788] DrawTextExW (in: hdc=0x46010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x269783c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0220.788] RestoreDC (hdc=0x46010810, nSavedDC=-1) returned 1 [0220.788] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010810) returned 0x0 [0220.788] GetFocus () returned 0x201d0 [0220.788] IsAppThemed () returned 0x1 [0220.788] GetThemeAppProperties () returned 0x3 [0220.788] GetThemeAppProperties () returned 0x3 [0220.788] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0220.788] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x46010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0220.788] GdipReleaseDC (graphics=0x504fbc8, hdc=0x46010810) returned 0x0 [0220.789] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0220.789] SelectObject (hdc=0x46010810, h=0x185000f) returned 0x490500d1 [0220.789] DeleteDC (hdc=0x46010810) returned 1 [0220.789] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0220.789] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0220.789] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2697938, cPoints=0x1 | out: lpPoints=0x2697938) returned 42533703 [0220.789] WindowFromPoint (Point=0x38e) returned 0x201d0 [0220.789] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x297038e) returned 0x1 [0220.789] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0220.789] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0220.789] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0220.789] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0220.789] GetSystemMetrics (nIndex=42) returned 0 [0220.789] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0220.789] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0220.789] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0220.789] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0220.789] GetCapture () returned 0x201d0 [0220.789] ReleaseCapture () returned 1 [0220.789] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0220.789] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0220.789] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x297038e) returned 0x1 [0220.790] IsWindowUnicode (hWnd=0x201d0) returned 1 [0220.790] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0220.790] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x297038e) returned 0x1 [0220.790] SetCursor (hCursor=0x10003) returned 0x10003 [0220.790] TranslateMessage (lpMsg=0x1ef250) returned 0 [0220.790] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0220.790] GetKeyState (nVirtKey=1) returned 1 [0220.790] GetKeyState (nVirtKey=2) returned 0 [0220.790] GetKeyState (nVirtKey=4) returned 0 [0220.790] GetKeyState (nVirtKey=5) returned 0 [0220.790] GetKeyState (nVirtKey=6) returned 0 [0220.790] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0220.790] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0220.790] WaitMessage () returned 1 [0223.805] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0223.806] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0389) returned 0x1 [0223.806] IsWindowUnicode (hWnd=0x201d0) returned 1 [0223.806] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0223.806] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0389) returned 0x1 [0223.806] SetCursor (hCursor=0x10003) returned 0x10003 [0223.806] TranslateMessage (lpMsg=0x1ef250) returned 0 [0223.806] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0223.806] GetKeyState (nVirtKey=1) returned 1 [0223.806] GetKeyState (nVirtKey=2) returned 0 [0223.806] GetKeyState (nVirtKey=4) returned 0 [0223.806] GetKeyState (nVirtKey=5) returned 0 [0223.806] GetKeyState (nVirtKey=6) returned 0 [0223.806] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0223.806] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0223.806] WaitMessage () returned 1 [0223.872] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0223.873] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0389) returned 0x1 [0223.873] IsWindowUnicode (hWnd=0x201d0) returned 1 [0223.873] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0223.873] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0389) returned 0x1 [0223.873] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0223.873] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1de0244) returned 0x0 [0223.874] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0223.874] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0223.874] SetCursor (hCursor=0x10003) returned 0x10003 [0223.874] TranslateMessage (lpMsg=0x1ef250) returned 0 [0223.874] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0223.874] GetKeyState (nVirtKey=1) returned -128 [0223.874] GetKeyState (nVirtKey=2) returned 0 [0223.874] GetKeyState (nVirtKey=4) returned 0 [0223.874] GetKeyState (nVirtKey=5) returned 0 [0223.874] GetKeyState (nVirtKey=6) returned 0 [0223.874] IsWindowVisible (hWnd=0x201d0) returned 1 [0223.874] IsWindowEnabled (hWnd=0x201d0) returned 1 [0223.874] SetFocus (hWnd=0x201d0) returned 0x201d0 [0223.874] GetFocus () returned 0x201d0 [0223.874] GetFocus () returned 0x201d0 [0223.874] GetFocus () returned 0x201d0 [0223.874] GetKeyState (nVirtKey=1) returned -128 [0223.874] GetKeyState (nVirtKey=2) returned 0 [0223.874] GetKeyState (nVirtKey=4) returned 0 [0223.874] GetKeyState (nVirtKey=5) returned 0 [0223.874] GetKeyState (nVirtKey=6) returned 0 [0223.874] GetCapture () returned 0x0 [0223.875] SetCapture (hWnd=0x201d0) returned 0x0 [0223.875] GetKeyState (nVirtKey=1) returned -128 [0223.875] GetKeyState (nVirtKey=2) returned 0 [0223.875] GetKeyState (nVirtKey=4) returned 0 [0223.875] GetKeyState (nVirtKey=5) returned 0 [0223.875] GetKeyState (nVirtKey=6) returned 0 [0223.875] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0223.875] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0223.875] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0223.875] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0223.875] TranslateMessage (lpMsg=0x1ef250) returned 0 [0223.875] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0223.875] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0223.875] IsWindowUnicode (hWnd=0x201d0) returned 1 [0223.875] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0223.876] TranslateMessage (lpMsg=0x1ef250) returned 0 [0223.876] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0223.876] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x2697a5c, cPoints=0x1 | out: lpPoints=0x2697a5c) returned 42533703 [0223.876] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0223.876] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0223.876] UpdateWindow (hWnd=0x201d0) returned 1 [0223.876] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0223.876] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0223.876] CreateCompatibleDC (hdc=0x160107c7) returned 0x47010810 [0223.877] SelectObject (hdc=0x47010810, h=0x490500d1) returned 0x185000f [0223.877] GdipCreateFromHDC (hdc=0x47010810, graphics=0x1eea5c) returned 0x0 [0223.877] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0223.877] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0223.877] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0223.877] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0223.877] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0223.877] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0223.877] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0223.877] LocalFree (hMem=0x416cb8) returned 0x0 [0223.877] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0223.878] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0223.878] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0223.878] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0223.878] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0223.878] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd0b0dbd) returned 0x0 [0223.878] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0223.878] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0223.878] GetCurrentObject (hdc=0x47010810, type=0x1) returned 0x1b00017 [0223.878] GetCurrentObject (hdc=0x47010810, type=0x2) returned 0x1900010 [0223.878] GetCurrentObject (hdc=0x47010810, type=0x7) returned 0x490500d1 [0223.878] GetCurrentObject (hdc=0x47010810, type=0x6) returned 0x18a002e [0223.878] SaveDC (hdc=0x47010810) returned 1 [0223.878] GetNearestColor (hdc=0x47010810, color=0xf5f5f5) returned 0xf5f5f5 [0223.878] GetNearestColor (hdc=0x47010810, color=0x515151) returned 0x515151 [0223.878] GetNearestColor (hdc=0x47010810, color=0x0) returned 0x0 [0223.879] GetNearestColor (hdc=0x47010810, color=0x515151) returned 0x515151 [0223.879] GetNearestColor (hdc=0x47010810, color=0x0) returned 0x0 [0223.879] GetNearestColor (hdc=0x47010810, color=0xfafafa) returned 0xfafafa [0223.879] GetNearestColor (hdc=0x47010810, color=0xe0e0e0) returned 0xe0e0e0 [0223.879] GetNearestColor (hdc=0x47010810, color=0xdcdcdc) returned 0xdcdcdc [0223.879] GetNearestColor (hdc=0x47010810, color=0x0) returned 0x0 [0223.879] RestoreDC (hdc=0x47010810, nSavedDC=-1) returned 1 [0223.879] GdipReleaseDC (graphics=0x504fbc8, hdc=0x47010810) returned 0x0 [0223.879] IsAppThemed () returned 0x1 [0223.879] GetThemeAppProperties () returned 0x3 [0223.879] GetThemeAppProperties () returned 0x3 [0223.879] IsAppThemed () returned 0x1 [0223.880] GetThemeAppProperties () returned 0x3 [0223.880] GetThemeAppProperties () returned 0x3 [0223.880] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2698160 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0223.880] IsAppThemed () returned 0x1 [0223.880] GetThemeAppProperties () returned 0x3 [0223.880] GetThemeAppProperties () returned 0x3 [0223.880] IsAppThemed () returned 0x1 [0223.880] GetThemeAppProperties () returned 0x3 [0223.880] GetThemeAppProperties () returned 0x3 [0223.880] IsAppThemed () returned 0x1 [0223.880] GetThemeAppProperties () returned 0x3 [0223.880] GetThemeAppProperties () returned 0x3 [0223.880] IsAppThemed () returned 0x1 [0223.880] GetThemeAppProperties () returned 0x3 [0223.880] GetThemeAppProperties () returned 0x3 [0223.880] IsThemePartDefined () returned 0x1 [0223.881] IsAppThemed () returned 0x1 [0223.881] GetThemeAppProperties () returned 0x3 [0223.881] GetThemeAppProperties () returned 0x3 [0223.881] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0223.881] IsAppThemed () returned 0x1 [0223.881] GetThemeAppProperties () returned 0x3 [0223.881] GetThemeAppProperties () returned 0x3 [0223.881] IsAppThemed () returned 0x1 [0223.881] GetThemeAppProperties () returned 0x3 [0223.881] GetThemeAppProperties () returned 0x3 [0223.881] IsThemePartDefined () returned 0x1 [0223.881] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0223.881] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0223.881] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0223.881] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0223.881] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0223.881] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0223.881] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0223.881] LocalFree (hMem=0x416cb8) returned 0x0 [0223.881] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0223.881] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0223.881] LocalFree (hMem=0x416cb8) returned 0x0 [0223.881] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0223.882] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0223.882] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0223.882] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0223.882] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0223.882] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0223.882] GetCurrentObject (hdc=0x47010810, type=0x1) returned 0x1b00017 [0223.882] GetCurrentObject (hdc=0x47010810, type=0x2) returned 0x1900010 [0223.882] GetCurrentObject (hdc=0x47010810, type=0x7) returned 0x490500d1 [0223.882] GetCurrentObject (hdc=0x47010810, type=0x6) returned 0x18a002e [0223.882] SaveDC (hdc=0x47010810) returned 1 [0223.882] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f040246 [0223.882] GetClipRgn (hdc=0x47010810, hrgn=0x6f040246) returned 0 [0223.882] SelectClipRgn (hdc=0x47010810, hrgn=0x8f040813) returned 2 [0223.882] DeleteObject (ho=0x6f040246) returned 1 [0223.882] DeleteObject (ho=0x8f040813) returned 1 [0223.882] OffsetViewportOrgEx (in: hdc=0x47010810, x=0, y=0, lppt=0x2698810 | out: lppt=0x2698810) returned 1 [0223.883] DrawThemeParentBackground () returned 0x0 [0223.883] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0223.883] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0223.883] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0223.883] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0223.883] GetSystemMetrics (nIndex=42) returned 0 [0223.883] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0223.883] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0223.883] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0223.883] GetCurrentObject (hdc=0x47010810, type=0x1) returned 0x1b00017 [0223.883] GetCurrentObject (hdc=0x47010810, type=0x2) returned 0x1900010 [0223.883] GetCurrentObject (hdc=0x47010810, type=0x7) returned 0x490500d1 [0223.883] GetCurrentObject (hdc=0x47010810, type=0x6) returned 0x18a002e [0223.883] SaveDC (hdc=0x47010810) returned 2 [0223.883] GetNearestColor (hdc=0x47010810, color=0xf5f5f5) returned 0xf5f5f5 [0223.884] CreateSolidBrush (color=0xf5f5f5) returned 0xb2100244 [0223.884] FillRect (hDC=0x47010810, lprc=0x1ee2d0, hbr=0xb2100244) returned 1 [0223.884] DeleteObject (ho=0xb2100244) returned 1 [0223.884] RestoreDC (hdc=0x47010810, nSavedDC=-1) returned 1 [0223.884] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0223.884] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0223.884] GetSystemMetrics (nIndex=42) returned 0 [0223.884] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0223.884] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0223.884] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0223.884] GetCurrentObject (hdc=0x47010810, type=0x1) returned 0x1b00017 [0223.885] GetCurrentObject (hdc=0x47010810, type=0x2) returned 0x1900010 [0223.885] GetCurrentObject (hdc=0x47010810, type=0x7) returned 0x490500d1 [0223.885] GetCurrentObject (hdc=0x47010810, type=0x6) returned 0x18a002e [0223.885] SaveDC (hdc=0x47010810) returned 2 [0223.885] GetNearestColor (hdc=0x47010810, color=0xf5f5f5) returned 0xf5f5f5 [0223.885] CreateSolidBrush (color=0xf5f5f5) returned 0xb3100244 [0223.885] FillRect (hDC=0x47010810, lprc=0x1ee270, hbr=0xb3100244) returned 1 [0223.885] DeleteObject (ho=0xb3100244) returned 1 [0223.885] RestoreDC (hdc=0x47010810, nSavedDC=-1) returned 1 [0223.885] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0223.885] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0223.885] GetSystemMetrics (nIndex=42) returned 0 [0223.885] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0223.885] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0223.885] RestoreDC (hdc=0x47010810, nSavedDC=-1) returned 1 [0223.885] GdipReleaseDC (graphics=0x504fbc8, hdc=0x47010810) returned 0x0 [0223.886] IsAppThemed () returned 0x1 [0223.886] GetThemeAppProperties () returned 0x3 [0223.886] GetThemeAppProperties () returned 0x3 [0223.886] IsAppThemed () returned 0x1 [0223.886] GetThemeAppProperties () returned 0x3 [0223.886] GetThemeAppProperties () returned 0x3 [0223.886] IsThemePartDefined () returned 0x1 [0223.886] GdipCreateRegion (region=0x1ee764) returned 0x0 [0223.886] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0223.886] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0223.886] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0223.886] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0223.886] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0223.886] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0223.886] LocalFree (hMem=0x416cb8) returned 0x0 [0223.886] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0223.886] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0223.886] LocalFree (hMem=0x416cb8) returned 0x0 [0223.886] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0223.886] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0223.886] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0223.887] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0223.887] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0223.887] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0223.887] GetCurrentObject (hdc=0x47010810, type=0x1) returned 0x1b00017 [0223.887] GetCurrentObject (hdc=0x47010810, type=0x2) returned 0x1900010 [0223.887] GetCurrentObject (hdc=0x47010810, type=0x7) returned 0x490500d1 [0223.887] GetCurrentObject (hdc=0x47010810, type=0x6) returned 0x18a002e [0223.887] SaveDC (hdc=0x47010810) returned 1 [0223.887] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x90040813 [0223.887] GetClipRgn (hdc=0x47010810, hrgn=0x90040813) returned 0 [0223.887] SelectClipRgn (hdc=0x47010810, hrgn=0x71040246) returned 2 [0223.887] DeleteObject (ho=0x90040813) returned 1 [0223.887] DeleteObject (ho=0x71040246) returned 1 [0223.887] OffsetViewportOrgEx (in: hdc=0x47010810, x=0, y=0, lppt=0x2699050 | out: lppt=0x2699050) returned 1 [0223.887] IsAppThemed () returned 0x1 [0223.887] GetThemeAppProperties () returned 0x3 [0223.887] GetThemeAppProperties () returned 0x3 [0223.887] DrawThemeBackground () returned 0x0 [0223.888] RestoreDC (hdc=0x47010810, nSavedDC=-1) returned 1 [0223.888] GdipReleaseDC (graphics=0x504fbc8, hdc=0x47010810) returned 0x0 [0223.888] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0223.888] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0223.888] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0223.888] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0223.888] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0223.888] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0223.888] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0223.888] LocalFree (hMem=0x416cb8) returned 0x0 [0223.888] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0223.888] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0223.888] LocalFree (hMem=0x416cb8) returned 0x0 [0223.888] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0223.889] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0223.889] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0223.889] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0223.889] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0223.889] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0223.889] GetCurrentObject (hdc=0x47010810, type=0x1) returned 0x1b00017 [0223.889] GetCurrentObject (hdc=0x47010810, type=0x2) returned 0x1900010 [0223.889] GetCurrentObject (hdc=0x47010810, type=0x7) returned 0x490500d1 [0223.889] GetCurrentObject (hdc=0x47010810, type=0x6) returned 0x18a002e [0223.889] SaveDC (hdc=0x47010810) returned 1 [0223.889] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x72040246 [0223.889] GetClipRgn (hdc=0x47010810, hrgn=0x72040246) returned 0 [0223.889] SelectClipRgn (hdc=0x47010810, hrgn=0x91040813) returned 2 [0223.889] DeleteObject (ho=0x72040246) returned 1 [0223.889] DeleteObject (ho=0x91040813) returned 1 [0223.889] OffsetViewportOrgEx (in: hdc=0x47010810, x=0, y=0, lppt=0x2699324 | out: lppt=0x2699324) returned 1 [0223.889] IsAppThemed () returned 0x1 [0223.890] GetThemeAppProperties () returned 0x3 [0223.890] GetThemeAppProperties () returned 0x3 [0223.890] GetThemeBackgroundContentRect () returned 0x0 [0223.890] RestoreDC (hdc=0x47010810, nSavedDC=-1) returned 1 [0223.890] GdipReleaseDC (graphics=0x504fbc8, hdc=0x47010810) returned 0x0 [0223.890] IsAppThemed () returned 0x1 [0223.890] GetThemeAppProperties () returned 0x3 [0223.890] GetThemeAppProperties () returned 0x3 [0223.890] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0223.890] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0223.890] GetCurrentObject (hdc=0x47010810, type=0x1) returned 0x1b00017 [0223.890] GetCurrentObject (hdc=0x47010810, type=0x2) returned 0x1900010 [0223.890] GetCurrentObject (hdc=0x47010810, type=0x7) returned 0x490500d1 [0223.890] GetCurrentObject (hdc=0x47010810, type=0x6) returned 0x18a002e [0223.890] SaveDC (hdc=0x47010810) returned 1 [0223.890] GetTextAlign (hdc=0x47010810) returned 0x0 [0223.890] GetTextColor (hdc=0x47010810) returned 0x0 [0223.890] GetCurrentObject (hdc=0x47010810, type=0x6) returned 0x18a002e [0223.890] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0223.891] SelectObject (hdc=0x47010810, h=0x220a081a) returned 0x18a002e [0223.891] GetBkMode (hdc=0x47010810) returned 2 [0223.891] SetBkMode (hdc=0x47010810, mode=1) returned 2 [0223.891] DrawTextExW (in: hdc=0x47010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26996b8 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0223.891] DrawTextExW (in: hdc=0x47010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26996b8 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0223.892] RestoreDC (hdc=0x47010810, nSavedDC=-1) returned 1 [0223.892] GdipReleaseDC (graphics=0x504fbc8, hdc=0x47010810) returned 0x0 [0223.892] GetFocus () returned 0x201d0 [0223.892] IsAppThemed () returned 0x1 [0223.892] GetThemeAppProperties () returned 0x3 [0223.892] GetThemeAppProperties () returned 0x3 [0223.892] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0223.892] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x47010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0223.893] GdipReleaseDC (graphics=0x504fbc8, hdc=0x47010810) returned 0x0 [0223.893] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0223.893] SelectObject (hdc=0x47010810, h=0x185000f) returned 0x490500d1 [0223.893] DeleteDC (hdc=0x47010810) returned 1 [0223.893] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0223.893] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0223.893] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26997b4, cPoints=0x1 | out: lpPoints=0x26997b4) returned 42533703 [0223.893] WindowFromPoint (Point=0x389) returned 0x201d0 [0223.893] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0389) returned 0x1 [0223.893] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0223.893] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0223.893] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0223.893] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0223.893] GetSystemMetrics (nIndex=42) returned 0 [0223.894] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0223.894] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0223.894] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0223.894] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0223.894] GetCapture () returned 0x201d0 [0223.894] ReleaseCapture () returned 1 [0223.894] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0223.894] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0223.894] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0389) returned 0x1 [0223.894] IsWindowUnicode (hWnd=0x201d0) returned 1 [0223.894] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0223.894] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f0389) returned 0x1 [0223.894] SetCursor (hCursor=0x10003) returned 0x10003 [0223.894] TranslateMessage (lpMsg=0x1ef250) returned 0 [0223.894] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0223.894] GetKeyState (nVirtKey=1) returned 0 [0223.894] GetKeyState (nVirtKey=2) returned 0 [0223.894] GetKeyState (nVirtKey=4) returned 0 [0223.894] GetKeyState (nVirtKey=5) returned 0 [0223.895] GetKeyState (nVirtKey=6) returned 0 [0223.895] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0223.895] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0223.895] WaitMessage () returned 1 [0226.912] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0226.912] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c9) returned 0x1 [0226.912] IsWindowUnicode (hWnd=0x201d0) returned 1 [0226.912] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0226.912] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c9) returned 0x1 [0226.913] SetCursor (hCursor=0x10003) returned 0x10003 [0226.913] TranslateMessage (lpMsg=0x1ef250) returned 0 [0226.913] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0226.913] GetKeyState (nVirtKey=1) returned 0 [0226.913] GetKeyState (nVirtKey=2) returned 0 [0226.913] GetKeyState (nVirtKey=4) returned 0 [0226.913] GetKeyState (nVirtKey=5) returned 0 [0226.913] GetKeyState (nVirtKey=6) returned 0 [0226.913] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0226.913] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0226.913] WaitMessage () returned 1 [0226.985] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0226.985] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c9) returned 0x1 [0226.985] IsWindowUnicode (hWnd=0x201d0) returned 1 [0226.985] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0226.985] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c9) returned 0x1 [0226.986] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0226.986] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1dd0284) returned 0x0 [0226.986] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0226.986] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0226.986] SetCursor (hCursor=0x10003) returned 0x10003 [0226.986] TranslateMessage (lpMsg=0x1ef250) returned 0 [0226.986] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0226.986] GetKeyState (nVirtKey=1) returned -127 [0226.986] GetKeyState (nVirtKey=2) returned 0 [0226.986] GetKeyState (nVirtKey=4) returned 0 [0226.986] GetKeyState (nVirtKey=5) returned 0 [0226.986] GetKeyState (nVirtKey=6) returned 0 [0226.986] IsWindowVisible (hWnd=0x201d0) returned 1 [0226.986] IsWindowEnabled (hWnd=0x201d0) returned 1 [0226.986] SetFocus (hWnd=0x201d0) returned 0x201d0 [0226.986] GetFocus () returned 0x201d0 [0226.986] GetFocus () returned 0x201d0 [0226.986] GetFocus () returned 0x201d0 [0226.986] GetKeyState (nVirtKey=1) returned -127 [0226.986] GetKeyState (nVirtKey=2) returned 0 [0226.987] GetKeyState (nVirtKey=4) returned 0 [0226.987] GetKeyState (nVirtKey=5) returned 0 [0226.987] GetKeyState (nVirtKey=6) returned 0 [0226.987] GetCapture () returned 0x0 [0226.987] SetCapture (hWnd=0x201d0) returned 0x0 [0226.987] GetKeyState (nVirtKey=1) returned -127 [0226.987] GetKeyState (nVirtKey=2) returned 0 [0226.987] GetKeyState (nVirtKey=4) returned 0 [0226.987] GetKeyState (nVirtKey=5) returned 0 [0226.987] GetKeyState (nVirtKey=6) returned 0 [0226.987] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0226.987] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0226.987] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0226.987] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0226.987] TranslateMessage (lpMsg=0x1ef250) returned 0 [0226.987] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0226.987] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0226.987] IsWindowUnicode (hWnd=0x201d0) returned 1 [0226.987] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0226.987] TranslateMessage (lpMsg=0x1ef250) returned 0 [0226.987] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0226.987] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26998d8, cPoints=0x1 | out: lpPoints=0x26998d8) returned 42533703 [0226.987] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0226.987] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0226.987] UpdateWindow (hWnd=0x201d0) returned 1 [0226.987] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0226.987] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0226.987] CreateCompatibleDC (hdc=0x160107c7) returned 0x48010810 [0226.987] SelectObject (hdc=0x48010810, h=0x490500d1) returned 0x185000f [0226.988] GdipCreateFromHDC (hdc=0x48010810, graphics=0x1eea5c) returned 0x0 [0226.988] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0226.988] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0226.988] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0226.988] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0226.988] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0226.988] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0226.988] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0226.988] LocalFree (hMem=0x416cb8) returned 0x0 [0226.988] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0226.988] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0226.988] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0226.988] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0226.988] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0226.988] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd090dbd) returned 0x0 [0226.988] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0226.988] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0226.988] GetCurrentObject (hdc=0x48010810, type=0x1) returned 0x1b00017 [0226.988] GetCurrentObject (hdc=0x48010810, type=0x2) returned 0x1900010 [0226.988] GetCurrentObject (hdc=0x48010810, type=0x7) returned 0x490500d1 [0226.988] GetCurrentObject (hdc=0x48010810, type=0x6) returned 0x18a002e [0226.989] SaveDC (hdc=0x48010810) returned 1 [0226.989] GetNearestColor (hdc=0x48010810, color=0xf5f5f5) returned 0xf5f5f5 [0226.989] GetNearestColor (hdc=0x48010810, color=0x515151) returned 0x515151 [0226.989] GetNearestColor (hdc=0x48010810, color=0x0) returned 0x0 [0226.989] GetNearestColor (hdc=0x48010810, color=0x515151) returned 0x515151 [0226.989] GetNearestColor (hdc=0x48010810, color=0x0) returned 0x0 [0226.989] GetNearestColor (hdc=0x48010810, color=0xfafafa) returned 0xfafafa [0226.989] GetNearestColor (hdc=0x48010810, color=0xe0e0e0) returned 0xe0e0e0 [0226.989] GetNearestColor (hdc=0x48010810, color=0xdcdcdc) returned 0xdcdcdc [0226.989] GetNearestColor (hdc=0x48010810, color=0x0) returned 0x0 [0226.989] RestoreDC (hdc=0x48010810, nSavedDC=-1) returned 1 [0226.989] GdipReleaseDC (graphics=0x504fbc8, hdc=0x48010810) returned 0x0 [0226.989] IsAppThemed () returned 0x1 [0226.989] GetThemeAppProperties () returned 0x3 [0226.989] GetThemeAppProperties () returned 0x3 [0226.989] IsAppThemed () returned 0x1 [0226.989] GetThemeAppProperties () returned 0x3 [0226.989] GetThemeAppProperties () returned 0x3 [0226.989] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x2699fdc | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0226.990] IsAppThemed () returned 0x1 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] IsAppThemed () returned 0x1 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] IsAppThemed () returned 0x1 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] IsAppThemed () returned 0x1 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] IsThemePartDefined () returned 0x1 [0226.990] IsAppThemed () returned 0x1 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0226.990] IsAppThemed () returned 0x1 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] IsAppThemed () returned 0x1 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] GetThemeAppProperties () returned 0x3 [0226.990] IsThemePartDefined () returned 0x1 [0226.990] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0226.990] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0226.990] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0226.990] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0226.990] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0226.990] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0226.990] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0226.990] LocalFree (hMem=0x416cb8) returned 0x0 [0226.991] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0226.991] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0226.991] LocalFree (hMem=0x416cb8) returned 0x0 [0226.991] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0226.991] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0226.991] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0226.991] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0226.991] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0226.991] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0226.991] GetCurrentObject (hdc=0x48010810, type=0x1) returned 0x1b00017 [0226.991] GetCurrentObject (hdc=0x48010810, type=0x2) returned 0x1900010 [0226.991] GetCurrentObject (hdc=0x48010810, type=0x7) returned 0x490500d1 [0226.991] GetCurrentObject (hdc=0x48010810, type=0x6) returned 0x18a002e [0226.991] SaveDC (hdc=0x48010810) returned 1 [0226.991] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x92040813 [0226.991] GetClipRgn (hdc=0x48010810, hrgn=0x92040813) returned 0 [0226.991] SelectClipRgn (hdc=0x48010810, hrgn=0x76040246) returned 2 [0226.991] DeleteObject (ho=0x92040813) returned 1 [0226.991] DeleteObject (ho=0x76040246) returned 1 [0226.991] OffsetViewportOrgEx (in: hdc=0x48010810, x=0, y=0, lppt=0x269a68c | out: lppt=0x269a68c) returned 1 [0226.991] DrawThemeParentBackground () returned 0x0 [0226.992] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0226.992] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0226.992] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0226.992] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0226.992] GetSystemMetrics (nIndex=42) returned 0 [0226.992] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0226.992] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0226.992] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0226.992] GetCurrentObject (hdc=0x48010810, type=0x1) returned 0x1b00017 [0226.992] GetCurrentObject (hdc=0x48010810, type=0x2) returned 0x1900010 [0226.992] GetCurrentObject (hdc=0x48010810, type=0x7) returned 0x490500d1 [0226.992] GetCurrentObject (hdc=0x48010810, type=0x6) returned 0x18a002e [0226.992] SaveDC (hdc=0x48010810) returned 2 [0226.992] GetNearestColor (hdc=0x48010810, color=0xf5f5f5) returned 0xf5f5f5 [0226.992] CreateSolidBrush (color=0xf5f5f5) returned 0xb4100244 [0226.992] FillRect (hDC=0x48010810, lprc=0x1ee2d0, hbr=0xb4100244) returned 1 [0226.992] DeleteObject (ho=0xb4100244) returned 1 [0226.992] RestoreDC (hdc=0x48010810, nSavedDC=-1) returned 1 [0226.992] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0226.992] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0226.992] GetSystemMetrics (nIndex=42) returned 0 [0226.992] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0226.992] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0226.993] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0226.993] GetCurrentObject (hdc=0x48010810, type=0x1) returned 0x1b00017 [0226.993] GetCurrentObject (hdc=0x48010810, type=0x2) returned 0x1900010 [0226.993] GetCurrentObject (hdc=0x48010810, type=0x7) returned 0x490500d1 [0226.993] GetCurrentObject (hdc=0x48010810, type=0x6) returned 0x18a002e [0226.993] SaveDC (hdc=0x48010810) returned 2 [0226.993] GetNearestColor (hdc=0x48010810, color=0xf5f5f5) returned 0xf5f5f5 [0226.993] CreateSolidBrush (color=0xf5f5f5) returned 0xb5100244 [0226.993] FillRect (hDC=0x48010810, lprc=0x1ee270, hbr=0xb5100244) returned 1 [0226.993] DeleteObject (ho=0xb5100244) returned 1 [0226.993] RestoreDC (hdc=0x48010810, nSavedDC=-1) returned 1 [0226.993] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0226.993] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0226.993] GetSystemMetrics (nIndex=42) returned 0 [0226.993] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0226.993] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0226.993] RestoreDC (hdc=0x48010810, nSavedDC=-1) returned 1 [0226.993] GdipReleaseDC (graphics=0x504fbc8, hdc=0x48010810) returned 0x0 [0226.993] IsAppThemed () returned 0x1 [0226.993] GetThemeAppProperties () returned 0x3 [0226.993] GetThemeAppProperties () returned 0x3 [0226.993] IsAppThemed () returned 0x1 [0226.993] GetThemeAppProperties () returned 0x3 [0226.993] GetThemeAppProperties () returned 0x3 [0226.993] IsThemePartDefined () returned 0x1 [0226.993] GdipCreateRegion (region=0x1ee764) returned 0x0 [0226.994] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0226.994] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0226.994] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0226.994] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0226.994] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0226.994] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0226.994] LocalFree (hMem=0x416cb8) returned 0x0 [0226.994] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0226.994] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0226.994] LocalFree (hMem=0x416cb8) returned 0x0 [0226.994] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0226.994] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0226.994] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0226.994] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0226.994] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0226.994] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0226.994] GetCurrentObject (hdc=0x48010810, type=0x1) returned 0x1b00017 [0226.994] GetCurrentObject (hdc=0x48010810, type=0x2) returned 0x1900010 [0226.994] GetCurrentObject (hdc=0x48010810, type=0x7) returned 0x490500d1 [0226.994] GetCurrentObject (hdc=0x48010810, type=0x6) returned 0x18a002e [0226.994] SaveDC (hdc=0x48010810) returned 1 [0226.994] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x77040246 [0226.994] GetClipRgn (hdc=0x48010810, hrgn=0x77040246) returned 0 [0226.995] SelectClipRgn (hdc=0x48010810, hrgn=0x94040813) returned 2 [0226.995] DeleteObject (ho=0x77040246) returned 1 [0226.995] DeleteObject (ho=0x94040813) returned 1 [0226.995] OffsetViewportOrgEx (in: hdc=0x48010810, x=0, y=0, lppt=0x269aecc | out: lppt=0x269aecc) returned 1 [0226.995] IsAppThemed () returned 0x1 [0226.995] GetThemeAppProperties () returned 0x3 [0226.995] GetThemeAppProperties () returned 0x3 [0226.995] DrawThemeBackground () returned 0x0 [0226.995] RestoreDC (hdc=0x48010810, nSavedDC=-1) returned 1 [0226.995] GdipReleaseDC (graphics=0x504fbc8, hdc=0x48010810) returned 0x0 [0226.995] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0226.995] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0226.995] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0226.995] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0226.995] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0226.995] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0226.995] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0226.995] LocalFree (hMem=0x416cb8) returned 0x0 [0226.995] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0226.995] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0226.995] LocalFree (hMem=0x416cb8) returned 0x0 [0226.995] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0226.995] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0226.995] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0226.996] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0226.996] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0226.996] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0226.996] GetCurrentObject (hdc=0x48010810, type=0x1) returned 0x1b00017 [0226.996] GetCurrentObject (hdc=0x48010810, type=0x2) returned 0x1900010 [0226.996] GetCurrentObject (hdc=0x48010810, type=0x7) returned 0x490500d1 [0226.996] GetCurrentObject (hdc=0x48010810, type=0x6) returned 0x18a002e [0226.996] SaveDC (hdc=0x48010810) returned 1 [0226.996] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x95040813 [0226.996] GetClipRgn (hdc=0x48010810, hrgn=0x95040813) returned 0 [0226.996] SelectClipRgn (hdc=0x48010810, hrgn=0x78040246) returned 2 [0226.996] DeleteObject (ho=0x95040813) returned 1 [0226.996] DeleteObject (ho=0x78040246) returned 1 [0226.996] OffsetViewportOrgEx (in: hdc=0x48010810, x=0, y=0, lppt=0x269b1a0 | out: lppt=0x269b1a0) returned 1 [0226.996] IsAppThemed () returned 0x1 [0226.996] GetThemeAppProperties () returned 0x3 [0226.996] GetThemeAppProperties () returned 0x3 [0226.996] GetThemeBackgroundContentRect () returned 0x0 [0226.996] RestoreDC (hdc=0x48010810, nSavedDC=-1) returned 1 [0226.996] GdipReleaseDC (graphics=0x504fbc8, hdc=0x48010810) returned 0x0 [0226.996] IsAppThemed () returned 0x1 [0226.996] GetThemeAppProperties () returned 0x3 [0226.996] GetThemeAppProperties () returned 0x3 [0226.996] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0226.996] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0226.997] GetCurrentObject (hdc=0x48010810, type=0x1) returned 0x1b00017 [0226.997] GetCurrentObject (hdc=0x48010810, type=0x2) returned 0x1900010 [0226.997] GetCurrentObject (hdc=0x48010810, type=0x7) returned 0x490500d1 [0226.997] GetCurrentObject (hdc=0x48010810, type=0x6) returned 0x18a002e [0226.997] SaveDC (hdc=0x48010810) returned 1 [0226.997] GetTextAlign (hdc=0x48010810) returned 0x0 [0226.997] GetTextColor (hdc=0x48010810) returned 0x0 [0226.997] GetCurrentObject (hdc=0x48010810, type=0x6) returned 0x18a002e [0226.997] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0226.997] SelectObject (hdc=0x48010810, h=0x220a081a) returned 0x18a002e [0226.997] GetBkMode (hdc=0x48010810) returned 2 [0226.997] SetBkMode (hdc=0x48010810, mode=1) returned 2 [0226.997] DrawTextExW (in: hdc=0x48010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x269b534 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0226.997] DrawTextExW (in: hdc=0x48010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x269b534 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0226.997] RestoreDC (hdc=0x48010810, nSavedDC=-1) returned 1 [0226.997] GdipReleaseDC (graphics=0x504fbc8, hdc=0x48010810) returned 0x0 [0226.997] GetFocus () returned 0x201d0 [0226.997] IsAppThemed () returned 0x1 [0226.997] GetThemeAppProperties () returned 0x3 [0226.997] GetThemeAppProperties () returned 0x3 [0226.998] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0226.998] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x48010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0226.998] GdipReleaseDC (graphics=0x504fbc8, hdc=0x48010810) returned 0x0 [0226.998] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0226.998] SelectObject (hdc=0x48010810, h=0x185000f) returned 0x490500d1 [0226.998] DeleteDC (hdc=0x48010810) returned 1 [0226.998] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0226.998] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0226.998] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x269b630, cPoints=0x1 | out: lpPoints=0x269b630) returned 42533703 [0226.998] WindowFromPoint (Point=0x3c9) returned 0x201d0 [0226.998] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c9) returned 0x1 [0226.998] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0226.998] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0226.998] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0226.998] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0226.998] GetSystemMetrics (nIndex=42) returned 0 [0226.998] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0226.998] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0226.998] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0226.998] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0226.998] GetCapture () returned 0x201d0 [0226.998] ReleaseCapture () returned 1 [0226.998] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0226.999] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0226.999] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c9) returned 0x1 [0226.999] IsWindowUnicode (hWnd=0x201d0) returned 1 [0226.999] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0226.999] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28e03c9) returned 0x1 [0226.999] SetCursor (hCursor=0x10003) returned 0x10003 [0226.999] TranslateMessage (lpMsg=0x1ef250) returned 0 [0226.999] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0226.999] GetKeyState (nVirtKey=1) returned 1 [0226.999] GetKeyState (nVirtKey=2) returned 0 [0226.999] GetKeyState (nVirtKey=4) returned 0 [0226.999] GetKeyState (nVirtKey=5) returned 0 [0226.999] GetKeyState (nVirtKey=6) returned 0 [0226.999] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0226.999] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0226.999] WaitMessage () returned 1 [0229.940] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0229.940] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c5) returned 0x1 [0229.940] IsWindowUnicode (hWnd=0x201d0) returned 1 [0229.940] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0229.940] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c5) returned 0x1 [0229.941] SetCursor (hCursor=0x10003) returned 0x10003 [0229.941] TranslateMessage (lpMsg=0x1ef250) returned 0 [0229.941] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0229.941] GetKeyState (nVirtKey=1) returned 1 [0229.941] GetKeyState (nVirtKey=2) returned 0 [0229.941] GetKeyState (nVirtKey=4) returned 0 [0229.941] GetKeyState (nVirtKey=5) returned 0 [0229.941] GetKeyState (nVirtKey=6) returned 0 [0229.941] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0229.941] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0229.941] WaitMessage () returned 1 [0230.013] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0230.013] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c5) returned 0x1 [0230.013] IsWindowUnicode (hWnd=0x201d0) returned 1 [0230.013] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0230.013] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c5) returned 0x1 [0230.013] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0230.013] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1de0280) returned 0x0 [0230.013] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0230.014] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0230.014] SetCursor (hCursor=0x10003) returned 0x10003 [0230.014] TranslateMessage (lpMsg=0x1ef250) returned 0 [0230.014] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0230.014] GetKeyState (nVirtKey=1) returned -128 [0230.014] GetKeyState (nVirtKey=2) returned 0 [0230.014] GetKeyState (nVirtKey=4) returned 0 [0230.014] GetKeyState (nVirtKey=5) returned 0 [0230.014] GetKeyState (nVirtKey=6) returned 0 [0230.014] IsWindowVisible (hWnd=0x201d0) returned 1 [0230.014] IsWindowEnabled (hWnd=0x201d0) returned 1 [0230.014] SetFocus (hWnd=0x201d0) returned 0x201d0 [0230.014] GetFocus () returned 0x201d0 [0230.014] GetFocus () returned 0x201d0 [0230.014] GetFocus () returned 0x201d0 [0230.014] GetKeyState (nVirtKey=1) returned -128 [0230.014] GetKeyState (nVirtKey=2) returned 0 [0230.014] GetKeyState (nVirtKey=4) returned 0 [0230.014] GetKeyState (nVirtKey=5) returned 0 [0230.014] GetKeyState (nVirtKey=6) returned 0 [0230.014] GetCapture () returned 0x0 [0230.014] SetCapture (hWnd=0x201d0) returned 0x0 [0230.014] GetKeyState (nVirtKey=1) returned -128 [0230.014] GetKeyState (nVirtKey=2) returned 0 [0230.014] GetKeyState (nVirtKey=4) returned 0 [0230.014] GetKeyState (nVirtKey=5) returned 0 [0230.014] GetKeyState (nVirtKey=6) returned 0 [0230.014] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0230.014] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0230.014] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0230.014] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0230.014] TranslateMessage (lpMsg=0x1ef250) returned 0 [0230.014] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0230.015] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0230.015] IsWindowUnicode (hWnd=0x201d0) returned 1 [0230.015] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0230.015] TranslateMessage (lpMsg=0x1ef250) returned 0 [0230.015] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0230.015] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x269b754, cPoints=0x1 | out: lpPoints=0x269b754) returned 42533703 [0230.015] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0230.015] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0230.015] UpdateWindow (hWnd=0x201d0) returned 1 [0230.015] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0230.015] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0230.015] CreateCompatibleDC (hdc=0x160107c7) returned 0x49010810 [0230.015] SelectObject (hdc=0x49010810, h=0x490500d1) returned 0x185000f [0230.015] GdipCreateFromHDC (hdc=0x49010810, graphics=0x1eea5c) returned 0x0 [0230.015] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0230.015] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0230.015] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0230.015] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0230.015] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0230.015] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0230.015] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0230.015] LocalFree (hMem=0x416cb8) returned 0x0 [0230.016] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0230.016] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0230.016] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0230.016] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0230.016] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0230.016] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd070dbd) returned 0x0 [0230.016] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0230.016] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0230.016] GetCurrentObject (hdc=0x49010810, type=0x1) returned 0x1b00017 [0230.016] GetCurrentObject (hdc=0x49010810, type=0x2) returned 0x1900010 [0230.016] GetCurrentObject (hdc=0x49010810, type=0x7) returned 0x490500d1 [0230.016] GetCurrentObject (hdc=0x49010810, type=0x6) returned 0x18a002e [0230.016] SaveDC (hdc=0x49010810) returned 1 [0230.016] GetNearestColor (hdc=0x49010810, color=0xf5f5f5) returned 0xf5f5f5 [0230.016] GetNearestColor (hdc=0x49010810, color=0x515151) returned 0x515151 [0230.016] GetNearestColor (hdc=0x49010810, color=0x0) returned 0x0 [0230.016] GetNearestColor (hdc=0x49010810, color=0x515151) returned 0x515151 [0230.016] GetNearestColor (hdc=0x49010810, color=0x0) returned 0x0 [0230.016] GetNearestColor (hdc=0x49010810, color=0xfafafa) returned 0xfafafa [0230.016] GetNearestColor (hdc=0x49010810, color=0xe0e0e0) returned 0xe0e0e0 [0230.017] GetNearestColor (hdc=0x49010810, color=0xdcdcdc) returned 0xdcdcdc [0230.017] GetNearestColor (hdc=0x49010810, color=0x0) returned 0x0 [0230.017] RestoreDC (hdc=0x49010810, nSavedDC=-1) returned 1 [0230.017] GdipReleaseDC (graphics=0x504fbc8, hdc=0x49010810) returned 0x0 [0230.017] IsAppThemed () returned 0x1 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] IsAppThemed () returned 0x1 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x269be58 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0230.017] IsAppThemed () returned 0x1 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] IsAppThemed () returned 0x1 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] IsAppThemed () returned 0x1 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] IsAppThemed () returned 0x1 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] IsThemePartDefined () returned 0x1 [0230.017] IsAppThemed () returned 0x1 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0230.017] IsAppThemed () returned 0x1 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] GetThemeAppProperties () returned 0x3 [0230.017] IsAppThemed () returned 0x1 [0230.018] GetThemeAppProperties () returned 0x3 [0230.018] GetThemeAppProperties () returned 0x3 [0230.018] IsThemePartDefined () returned 0x1 [0230.018] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0230.018] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0230.018] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0230.018] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0230.018] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0230.018] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0230.018] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0230.018] LocalFree (hMem=0x416cb8) returned 0x0 [0230.018] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0230.018] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0230.018] LocalFree (hMem=0x416cb8) returned 0x0 [0230.018] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0230.018] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0230.018] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0230.018] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0230.018] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0230.018] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0230.018] GetCurrentObject (hdc=0x49010810, type=0x1) returned 0x1b00017 [0230.018] GetCurrentObject (hdc=0x49010810, type=0x2) returned 0x1900010 [0230.018] GetCurrentObject (hdc=0x49010810, type=0x7) returned 0x490500d1 [0230.018] GetCurrentObject (hdc=0x49010810, type=0x6) returned 0x18a002e [0230.019] SaveDC (hdc=0x49010810) returned 1 [0230.019] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x79040246 [0230.019] GetClipRgn (hdc=0x49010810, hrgn=0x79040246) returned 0 [0230.019] SelectClipRgn (hdc=0x49010810, hrgn=0x99040813) returned 2 [0230.019] DeleteObject (ho=0x79040246) returned 1 [0230.019] DeleteObject (ho=0x99040813) returned 1 [0230.019] OffsetViewportOrgEx (in: hdc=0x49010810, x=0, y=0, lppt=0x269c508 | out: lppt=0x269c508) returned 1 [0230.019] DrawThemeParentBackground () returned 0x0 [0230.019] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0230.019] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0230.019] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0230.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0230.019] GetSystemMetrics (nIndex=42) returned 0 [0230.019] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0230.019] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0230.019] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0230.019] GetCurrentObject (hdc=0x49010810, type=0x1) returned 0x1b00017 [0230.019] GetCurrentObject (hdc=0x49010810, type=0x2) returned 0x1900010 [0230.019] GetCurrentObject (hdc=0x49010810, type=0x7) returned 0x490500d1 [0230.019] GetCurrentObject (hdc=0x49010810, type=0x6) returned 0x18a002e [0230.019] SaveDC (hdc=0x49010810) returned 2 [0230.020] GetNearestColor (hdc=0x49010810, color=0xf5f5f5) returned 0xf5f5f5 [0230.020] CreateSolidBrush (color=0xf5f5f5) returned 0xb6100244 [0230.020] FillRect (hDC=0x49010810, lprc=0x1ee2d0, hbr=0xb6100244) returned 1 [0230.020] DeleteObject (ho=0xb6100244) returned 1 [0230.020] RestoreDC (hdc=0x49010810, nSavedDC=-1) returned 1 [0230.020] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0230.020] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0230.020] GetSystemMetrics (nIndex=42) returned 0 [0230.020] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0230.020] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0230.020] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0230.020] GetCurrentObject (hdc=0x49010810, type=0x1) returned 0x1b00017 [0230.020] GetCurrentObject (hdc=0x49010810, type=0x2) returned 0x1900010 [0230.020] GetCurrentObject (hdc=0x49010810, type=0x7) returned 0x490500d1 [0230.020] GetCurrentObject (hdc=0x49010810, type=0x6) returned 0x18a002e [0230.020] SaveDC (hdc=0x49010810) returned 2 [0230.020] GetNearestColor (hdc=0x49010810, color=0xf5f5f5) returned 0xf5f5f5 [0230.020] CreateSolidBrush (color=0xf5f5f5) returned 0xb7100244 [0230.020] FillRect (hDC=0x49010810, lprc=0x1ee270, hbr=0xb7100244) returned 1 [0230.020] DeleteObject (ho=0xb7100244) returned 1 [0230.020] RestoreDC (hdc=0x49010810, nSavedDC=-1) returned 1 [0230.021] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0230.021] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0230.021] GetSystemMetrics (nIndex=42) returned 0 [0230.021] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0230.021] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0230.021] RestoreDC (hdc=0x49010810, nSavedDC=-1) returned 1 [0230.021] GdipReleaseDC (graphics=0x504fbc8, hdc=0x49010810) returned 0x0 [0230.021] IsAppThemed () returned 0x1 [0230.021] GetThemeAppProperties () returned 0x3 [0230.021] GetThemeAppProperties () returned 0x3 [0230.021] IsAppThemed () returned 0x1 [0230.021] GetThemeAppProperties () returned 0x3 [0230.021] GetThemeAppProperties () returned 0x3 [0230.021] IsThemePartDefined () returned 0x1 [0230.021] GdipCreateRegion (region=0x1ee764) returned 0x0 [0230.021] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0230.021] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0230.021] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0230.021] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0230.021] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0230.021] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0230.021] LocalFree (hMem=0x416cb8) returned 0x0 [0230.021] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0230.021] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0230.021] LocalFree (hMem=0x416cb8) returned 0x0 [0230.021] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0230.022] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0230.022] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0230.022] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0230.022] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0230.022] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0230.022] GetCurrentObject (hdc=0x49010810, type=0x1) returned 0x1b00017 [0230.022] GetCurrentObject (hdc=0x49010810, type=0x2) returned 0x1900010 [0230.022] GetCurrentObject (hdc=0x49010810, type=0x7) returned 0x490500d1 [0230.022] GetCurrentObject (hdc=0x49010810, type=0x6) returned 0x18a002e [0230.022] SaveDC (hdc=0x49010810) returned 1 [0230.022] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a040813 [0230.022] GetClipRgn (hdc=0x49010810, hrgn=0x9a040813) returned 0 [0230.022] SelectClipRgn (hdc=0x49010810, hrgn=0x7b040246) returned 2 [0230.022] DeleteObject (ho=0x9a040813) returned 1 [0230.022] DeleteObject (ho=0x7b040246) returned 1 [0230.022] OffsetViewportOrgEx (in: hdc=0x49010810, x=0, y=0, lppt=0x269cd48 | out: lppt=0x269cd48) returned 1 [0230.022] IsAppThemed () returned 0x1 [0230.022] GetThemeAppProperties () returned 0x3 [0230.022] GetThemeAppProperties () returned 0x3 [0230.022] DrawThemeBackground () returned 0x0 [0230.022] RestoreDC (hdc=0x49010810, nSavedDC=-1) returned 1 [0230.022] GdipReleaseDC (graphics=0x504fbc8, hdc=0x49010810) returned 0x0 [0230.022] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0230.022] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0230.023] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0230.023] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0230.023] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0230.023] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0230.023] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0230.023] LocalFree (hMem=0x416cb8) returned 0x0 [0230.023] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0230.023] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0230.023] LocalFree (hMem=0x416cb8) returned 0x0 [0230.023] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0230.023] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0230.023] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0230.023] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0230.023] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0230.023] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0230.023] GetCurrentObject (hdc=0x49010810, type=0x1) returned 0x1b00017 [0230.023] GetCurrentObject (hdc=0x49010810, type=0x2) returned 0x1900010 [0230.023] GetCurrentObject (hdc=0x49010810, type=0x7) returned 0x490500d1 [0230.023] GetCurrentObject (hdc=0x49010810, type=0x6) returned 0x18a002e [0230.023] SaveDC (hdc=0x49010810) returned 1 [0230.023] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c040246 [0230.023] GetClipRgn (hdc=0x49010810, hrgn=0x7c040246) returned 0 [0230.023] SelectClipRgn (hdc=0x49010810, hrgn=0x9b040813) returned 2 [0230.024] DeleteObject (ho=0x7c040246) returned 1 [0230.024] DeleteObject (ho=0x9b040813) returned 1 [0230.024] OffsetViewportOrgEx (in: hdc=0x49010810, x=0, y=0, lppt=0x269d01c | out: lppt=0x269d01c) returned 1 [0230.024] IsAppThemed () returned 0x1 [0230.024] GetThemeAppProperties () returned 0x3 [0230.024] GetThemeAppProperties () returned 0x3 [0230.024] GetThemeBackgroundContentRect () returned 0x0 [0230.024] RestoreDC (hdc=0x49010810, nSavedDC=-1) returned 1 [0230.024] GdipReleaseDC (graphics=0x504fbc8, hdc=0x49010810) returned 0x0 [0230.024] IsAppThemed () returned 0x1 [0230.024] GetThemeAppProperties () returned 0x3 [0230.024] GetThemeAppProperties () returned 0x3 [0230.024] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0230.024] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0230.024] GetCurrentObject (hdc=0x49010810, type=0x1) returned 0x1b00017 [0230.024] GetCurrentObject (hdc=0x49010810, type=0x2) returned 0x1900010 [0230.024] GetCurrentObject (hdc=0x49010810, type=0x7) returned 0x490500d1 [0230.024] GetCurrentObject (hdc=0x49010810, type=0x6) returned 0x18a002e [0230.024] SaveDC (hdc=0x49010810) returned 1 [0230.024] GetTextAlign (hdc=0x49010810) returned 0x0 [0230.024] GetTextColor (hdc=0x49010810) returned 0x0 [0230.024] GetCurrentObject (hdc=0x49010810, type=0x6) returned 0x18a002e [0230.024] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0230.024] SelectObject (hdc=0x49010810, h=0x220a081a) returned 0x18a002e [0230.025] GetBkMode (hdc=0x49010810) returned 2 [0230.025] SetBkMode (hdc=0x49010810, mode=1) returned 2 [0230.025] DrawTextExW (in: hdc=0x49010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x269d3b0 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0230.025] DrawTextExW (in: hdc=0x49010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x269d3b0 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0230.025] RestoreDC (hdc=0x49010810, nSavedDC=-1) returned 1 [0230.025] GdipReleaseDC (graphics=0x504fbc8, hdc=0x49010810) returned 0x0 [0230.025] GetFocus () returned 0x201d0 [0230.025] IsAppThemed () returned 0x1 [0230.025] GetThemeAppProperties () returned 0x3 [0230.025] GetThemeAppProperties () returned 0x3 [0230.025] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0230.025] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x49010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0230.025] GdipReleaseDC (graphics=0x504fbc8, hdc=0x49010810) returned 0x0 [0230.025] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0230.025] SelectObject (hdc=0x49010810, h=0x185000f) returned 0x490500d1 [0230.025] DeleteDC (hdc=0x49010810) returned 1 [0230.025] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0230.025] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0230.026] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x269d4ac, cPoints=0x1 | out: lpPoints=0x269d4ac) returned 42533703 [0230.026] WindowFromPoint (Point=0x3c5) returned 0x201d0 [0230.026] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c5) returned 0x1 [0230.026] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0230.026] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0230.026] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0230.026] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0230.026] GetSystemMetrics (nIndex=42) returned 0 [0230.026] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0230.026] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0230.026] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0230.026] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0230.026] GetCapture () returned 0x201d0 [0230.026] ReleaseCapture () returned 1 [0230.026] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0230.026] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0230.026] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c5) returned 0x1 [0230.026] IsWindowUnicode (hWnd=0x201d0) returned 1 [0230.026] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0230.026] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03c5) returned 0x1 [0230.026] SetCursor (hCursor=0x10003) returned 0x10003 [0230.027] TranslateMessage (lpMsg=0x1ef250) returned 0 [0230.027] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0230.027] GetKeyState (nVirtKey=1) returned 0 [0230.027] GetKeyState (nVirtKey=2) returned 0 [0230.027] GetKeyState (nVirtKey=4) returned 0 [0230.027] GetKeyState (nVirtKey=5) returned 0 [0230.027] GetKeyState (nVirtKey=6) returned 0 [0230.027] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0230.027] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0230.027] WaitMessage () returned 1 [0233.053] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0233.053] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03ca) returned 0x1 [0233.053] IsWindowUnicode (hWnd=0x201d0) returned 1 [0233.053] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0233.053] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03ca) returned 0x1 [0233.053] SetCursor (hCursor=0x10003) returned 0x10003 [0233.053] TranslateMessage (lpMsg=0x1ef250) returned 0 [0233.053] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0233.053] GetKeyState (nVirtKey=1) returned 0 [0233.053] GetKeyState (nVirtKey=2) returned 0 [0233.053] GetKeyState (nVirtKey=4) returned 0 [0233.054] GetKeyState (nVirtKey=5) returned 0 [0233.054] GetKeyState (nVirtKey=6) returned 0 [0233.054] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0233.054] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0233.054] WaitMessage () returned 1 [0233.132] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0233.132] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03ca) returned 0x1 [0233.132] IsWindowUnicode (hWnd=0x201d0) returned 1 [0233.132] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0233.132] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03ca) returned 0x1 [0233.132] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0233.132] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1de0285) returned 0x0 [0233.132] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0233.132] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0233.132] SetCursor (hCursor=0x10003) returned 0x10003 [0233.132] TranslateMessage (lpMsg=0x1ef250) returned 0 [0233.132] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0233.132] GetKeyState (nVirtKey=1) returned -127 [0233.132] GetKeyState (nVirtKey=2) returned 0 [0233.132] GetKeyState (nVirtKey=4) returned 0 [0233.132] GetKeyState (nVirtKey=5) returned 0 [0233.132] GetKeyState (nVirtKey=6) returned 0 [0233.132] IsWindowVisible (hWnd=0x201d0) returned 1 [0233.133] IsWindowEnabled (hWnd=0x201d0) returned 1 [0233.133] SetFocus (hWnd=0x201d0) returned 0x201d0 [0233.133] GetFocus () returned 0x201d0 [0233.133] GetFocus () returned 0x201d0 [0233.133] GetFocus () returned 0x201d0 [0233.133] GetKeyState (nVirtKey=1) returned -127 [0233.133] GetKeyState (nVirtKey=2) returned 0 [0233.133] GetKeyState (nVirtKey=4) returned 0 [0233.133] GetKeyState (nVirtKey=5) returned 0 [0233.133] GetKeyState (nVirtKey=6) returned 0 [0233.134] GetCapture () returned 0x0 [0233.134] SetCapture (hWnd=0x201d0) returned 0x0 [0233.134] GetKeyState (nVirtKey=1) returned -127 [0233.134] GetKeyState (nVirtKey=2) returned 0 [0233.134] GetKeyState (nVirtKey=4) returned 0 [0233.134] GetKeyState (nVirtKey=5) returned 0 [0233.134] GetKeyState (nVirtKey=6) returned 0 [0233.134] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0233.134] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0233.134] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0233.134] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0233.134] TranslateMessage (lpMsg=0x1ef250) returned 0 [0233.134] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0233.134] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0233.134] IsWindowUnicode (hWnd=0x201d0) returned 1 [0233.134] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0233.134] TranslateMessage (lpMsg=0x1ef250) returned 0 [0233.134] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0233.134] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x269d5d0, cPoints=0x1 | out: lpPoints=0x269d5d0) returned 42533703 [0233.134] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0233.134] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0233.134] UpdateWindow (hWnd=0x201d0) returned 1 [0233.134] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0233.134] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0233.134] CreateCompatibleDC (hdc=0x160107c7) returned 0x4a010810 [0233.134] SelectObject (hdc=0x4a010810, h=0x490500d1) returned 0x185000f [0233.134] GdipCreateFromHDC (hdc=0x4a010810, graphics=0x1eea5c) returned 0x0 [0233.134] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0233.135] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0233.135] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0233.135] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0233.135] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0233.135] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0233.135] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0233.135] LocalFree (hMem=0x416cb8) returned 0x0 [0233.135] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0233.135] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0233.135] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0233.135] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0233.135] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0233.135] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd050dbd) returned 0x0 [0233.135] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0233.135] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0233.135] GetCurrentObject (hdc=0x4a010810, type=0x1) returned 0x1b00017 [0233.135] GetCurrentObject (hdc=0x4a010810, type=0x2) returned 0x1900010 [0233.135] GetCurrentObject (hdc=0x4a010810, type=0x7) returned 0x490500d1 [0233.135] GetCurrentObject (hdc=0x4a010810, type=0x6) returned 0x18a002e [0233.135] SaveDC (hdc=0x4a010810) returned 1 [0233.135] GetNearestColor (hdc=0x4a010810, color=0xf5f5f5) returned 0xf5f5f5 [0233.136] GetNearestColor (hdc=0x4a010810, color=0x515151) returned 0x515151 [0233.136] GetNearestColor (hdc=0x4a010810, color=0x0) returned 0x0 [0233.136] GetNearestColor (hdc=0x4a010810, color=0x515151) returned 0x515151 [0233.136] GetNearestColor (hdc=0x4a010810, color=0x0) returned 0x0 [0233.136] GetNearestColor (hdc=0x4a010810, color=0xfafafa) returned 0xfafafa [0233.136] GetNearestColor (hdc=0x4a010810, color=0xe0e0e0) returned 0xe0e0e0 [0233.136] GetNearestColor (hdc=0x4a010810, color=0xdcdcdc) returned 0xdcdcdc [0233.136] GetNearestColor (hdc=0x4a010810, color=0x0) returned 0x0 [0233.136] RestoreDC (hdc=0x4a010810, nSavedDC=-1) returned 1 [0233.136] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4a010810) returned 0x0 [0233.136] IsAppThemed () returned 0x1 [0233.136] GetThemeAppProperties () returned 0x3 [0233.136] GetThemeAppProperties () returned 0x3 [0233.136] IsAppThemed () returned 0x1 [0233.136] GetThemeAppProperties () returned 0x3 [0233.136] GetThemeAppProperties () returned 0x3 [0233.136] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x269dcd4 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0233.136] IsAppThemed () returned 0x1 [0233.136] GetThemeAppProperties () returned 0x3 [0233.136] GetThemeAppProperties () returned 0x3 [0233.136] IsAppThemed () returned 0x1 [0233.136] GetThemeAppProperties () returned 0x3 [0233.136] GetThemeAppProperties () returned 0x3 [0233.136] IsAppThemed () returned 0x1 [0233.137] GetThemeAppProperties () returned 0x3 [0233.137] GetThemeAppProperties () returned 0x3 [0233.137] IsAppThemed () returned 0x1 [0233.137] GetThemeAppProperties () returned 0x3 [0233.137] GetThemeAppProperties () returned 0x3 [0233.137] IsThemePartDefined () returned 0x1 [0233.137] IsAppThemed () returned 0x1 [0233.137] GetThemeAppProperties () returned 0x3 [0233.137] GetThemeAppProperties () returned 0x3 [0233.137] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0233.137] IsAppThemed () returned 0x1 [0233.137] GetThemeAppProperties () returned 0x3 [0233.137] GetThemeAppProperties () returned 0x3 [0233.137] IsAppThemed () returned 0x1 [0233.137] GetThemeAppProperties () returned 0x3 [0233.137] GetThemeAppProperties () returned 0x3 [0233.137] IsThemePartDefined () returned 0x1 [0233.137] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0233.137] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0233.137] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0233.137] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0233.137] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0233.137] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0233.137] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0233.137] LocalFree (hMem=0x416cb8) returned 0x0 [0233.137] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0233.137] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0233.137] LocalFree (hMem=0x416cb8) returned 0x0 [0233.137] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0233.137] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0233.137] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0233.137] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0233.137] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0233.138] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0233.138] GetCurrentObject (hdc=0x4a010810, type=0x1) returned 0x1b00017 [0233.138] GetCurrentObject (hdc=0x4a010810, type=0x2) returned 0x1900010 [0233.138] GetCurrentObject (hdc=0x4a010810, type=0x7) returned 0x490500d1 [0233.138] GetCurrentObject (hdc=0x4a010810, type=0x6) returned 0x18a002e [0233.138] SaveDC (hdc=0x4a010810) returned 1 [0233.138] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9c040813 [0233.138] GetClipRgn (hdc=0x4a010810, hrgn=0x9c040813) returned 0 [0233.138] SelectClipRgn (hdc=0x4a010810, hrgn=0x80040246) returned 2 [0233.138] DeleteObject (ho=0x9c040813) returned 1 [0233.138] DeleteObject (ho=0x80040246) returned 1 [0233.138] OffsetViewportOrgEx (in: hdc=0x4a010810, x=0, y=0, lppt=0x269e384 | out: lppt=0x269e384) returned 1 [0233.138] DrawThemeParentBackground () returned 0x0 [0233.138] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0233.138] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0233.138] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0233.138] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0233.138] GetSystemMetrics (nIndex=42) returned 0 [0233.138] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0233.138] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0233.138] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0233.139] GetCurrentObject (hdc=0x4a010810, type=0x1) returned 0x1b00017 [0233.139] GetCurrentObject (hdc=0x4a010810, type=0x2) returned 0x1900010 [0233.139] GetCurrentObject (hdc=0x4a010810, type=0x7) returned 0x490500d1 [0233.139] GetCurrentObject (hdc=0x4a010810, type=0x6) returned 0x18a002e [0233.139] SaveDC (hdc=0x4a010810) returned 2 [0233.139] GetNearestColor (hdc=0x4a010810, color=0xf5f5f5) returned 0xf5f5f5 [0233.139] CreateSolidBrush (color=0xf5f5f5) returned 0xb8100244 [0233.139] FillRect (hDC=0x4a010810, lprc=0x1ee2d0, hbr=0xb8100244) returned 1 [0233.139] DeleteObject (ho=0xb8100244) returned 1 [0233.139] RestoreDC (hdc=0x4a010810, nSavedDC=-1) returned 1 [0233.139] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0233.139] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0233.139] GetSystemMetrics (nIndex=42) returned 0 [0233.139] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0233.139] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0233.139] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0233.139] GetCurrentObject (hdc=0x4a010810, type=0x1) returned 0x1b00017 [0233.139] GetCurrentObject (hdc=0x4a010810, type=0x2) returned 0x1900010 [0233.139] GetCurrentObject (hdc=0x4a010810, type=0x7) returned 0x490500d1 [0233.139] GetCurrentObject (hdc=0x4a010810, type=0x6) returned 0x18a002e [0233.139] SaveDC (hdc=0x4a010810) returned 2 [0233.140] GetNearestColor (hdc=0x4a010810, color=0xf5f5f5) returned 0xf5f5f5 [0233.140] CreateSolidBrush (color=0xf5f5f5) returned 0xb9100244 [0233.140] FillRect (hDC=0x4a010810, lprc=0x1ee270, hbr=0xb9100244) returned 1 [0233.140] DeleteObject (ho=0xb9100244) returned 1 [0233.140] RestoreDC (hdc=0x4a010810, nSavedDC=-1) returned 1 [0233.140] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0233.140] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0233.140] GetSystemMetrics (nIndex=42) returned 0 [0233.140] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0233.140] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0233.140] RestoreDC (hdc=0x4a010810, nSavedDC=-1) returned 1 [0233.140] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4a010810) returned 0x0 [0233.140] IsAppThemed () returned 0x1 [0233.140] GetThemeAppProperties () returned 0x3 [0233.140] GetThemeAppProperties () returned 0x3 [0233.140] IsAppThemed () returned 0x1 [0233.140] GetThemeAppProperties () returned 0x3 [0233.140] GetThemeAppProperties () returned 0x3 [0233.140] IsThemePartDefined () returned 0x1 [0233.140] GdipCreateRegion (region=0x1ee764) returned 0x0 [0233.140] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0233.140] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0233.140] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0233.140] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0233.140] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0233.140] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0233.141] LocalFree (hMem=0x416cb8) returned 0x0 [0233.141] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0233.141] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0233.141] LocalFree (hMem=0x416cb8) returned 0x0 [0233.141] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0233.141] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0233.141] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0233.141] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0233.141] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0233.141] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0233.141] GetCurrentObject (hdc=0x4a010810, type=0x1) returned 0x1b00017 [0233.141] GetCurrentObject (hdc=0x4a010810, type=0x2) returned 0x1900010 [0233.141] GetCurrentObject (hdc=0x4a010810, type=0x7) returned 0x490500d1 [0233.141] GetCurrentObject (hdc=0x4a010810, type=0x6) returned 0x18a002e [0233.141] SaveDC (hdc=0x4a010810) returned 1 [0233.141] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x81040246 [0233.141] GetClipRgn (hdc=0x4a010810, hrgn=0x81040246) returned 0 [0233.141] SelectClipRgn (hdc=0x4a010810, hrgn=0x9e040813) returned 2 [0233.141] DeleteObject (ho=0x81040246) returned 1 [0233.141] DeleteObject (ho=0x9e040813) returned 1 [0233.141] OffsetViewportOrgEx (in: hdc=0x4a010810, x=0, y=0, lppt=0x269ebc4 | out: lppt=0x269ebc4) returned 1 [0233.141] IsAppThemed () returned 0x1 [0233.141] GetThemeAppProperties () returned 0x3 [0233.142] GetThemeAppProperties () returned 0x3 [0233.142] DrawThemeBackground () returned 0x0 [0233.142] RestoreDC (hdc=0x4a010810, nSavedDC=-1) returned 1 [0233.142] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4a010810) returned 0x0 [0233.142] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0233.142] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0233.142] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0233.142] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0233.142] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0233.142] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0233.142] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0233.142] LocalFree (hMem=0x416cb8) returned 0x0 [0233.142] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0233.142] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0233.142] LocalFree (hMem=0x416cb8) returned 0x0 [0233.142] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0233.142] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0233.142] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0233.142] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0233.142] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0233.142] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0233.142] GetCurrentObject (hdc=0x4a010810, type=0x1) returned 0x1b00017 [0233.142] GetCurrentObject (hdc=0x4a010810, type=0x2) returned 0x1900010 [0233.142] GetCurrentObject (hdc=0x4a010810, type=0x7) returned 0x490500d1 [0233.143] GetCurrentObject (hdc=0x4a010810, type=0x6) returned 0x18a002e [0233.143] SaveDC (hdc=0x4a010810) returned 1 [0233.143] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9f040813 [0233.143] GetClipRgn (hdc=0x4a010810, hrgn=0x9f040813) returned 0 [0233.143] SelectClipRgn (hdc=0x4a010810, hrgn=0x82040246) returned 2 [0233.143] DeleteObject (ho=0x9f040813) returned 1 [0233.143] DeleteObject (ho=0x82040246) returned 1 [0233.143] OffsetViewportOrgEx (in: hdc=0x4a010810, x=0, y=0, lppt=0x269ee98 | out: lppt=0x269ee98) returned 1 [0233.143] IsAppThemed () returned 0x1 [0233.143] GetThemeAppProperties () returned 0x3 [0233.143] GetThemeAppProperties () returned 0x3 [0233.143] GetThemeBackgroundContentRect () returned 0x0 [0233.143] RestoreDC (hdc=0x4a010810, nSavedDC=-1) returned 1 [0233.143] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4a010810) returned 0x0 [0233.143] IsAppThemed () returned 0x1 [0233.143] GetThemeAppProperties () returned 0x3 [0233.143] GetThemeAppProperties () returned 0x3 [0233.143] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0233.143] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0233.143] GetCurrentObject (hdc=0x4a010810, type=0x1) returned 0x1b00017 [0233.143] GetCurrentObject (hdc=0x4a010810, type=0x2) returned 0x1900010 [0233.143] GetCurrentObject (hdc=0x4a010810, type=0x7) returned 0x490500d1 [0233.143] GetCurrentObject (hdc=0x4a010810, type=0x6) returned 0x18a002e [0233.143] SaveDC (hdc=0x4a010810) returned 1 [0233.143] GetTextAlign (hdc=0x4a010810) returned 0x0 [0233.144] GetTextColor (hdc=0x4a010810) returned 0x0 [0233.144] GetCurrentObject (hdc=0x4a010810, type=0x6) returned 0x18a002e [0233.144] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0233.144] SelectObject (hdc=0x4a010810, h=0x220a081a) returned 0x18a002e [0233.144] GetBkMode (hdc=0x4a010810) returned 2 [0233.144] SetBkMode (hdc=0x4a010810, mode=1) returned 2 [0233.144] DrawTextExW (in: hdc=0x4a010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x269f22c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0233.144] DrawTextExW (in: hdc=0x4a010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x269f22c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0233.144] RestoreDC (hdc=0x4a010810, nSavedDC=-1) returned 1 [0233.144] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4a010810) returned 0x0 [0233.144] GetFocus () returned 0x201d0 [0233.144] IsAppThemed () returned 0x1 [0233.144] GetThemeAppProperties () returned 0x3 [0233.144] GetThemeAppProperties () returned 0x3 [0233.144] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0233.144] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x4a010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0233.144] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4a010810) returned 0x0 [0233.144] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0233.145] SelectObject (hdc=0x4a010810, h=0x185000f) returned 0x490500d1 [0233.145] DeleteDC (hdc=0x4a010810) returned 1 [0233.145] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0233.145] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0233.145] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x269f328, cPoints=0x1 | out: lpPoints=0x269f328) returned 42533703 [0233.145] WindowFromPoint (Point=0x3ca) returned 0x201d0 [0233.145] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03ca) returned 0x1 [0233.145] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0233.145] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0233.145] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0233.145] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0233.145] GetSystemMetrics (nIndex=42) returned 0 [0233.145] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0233.145] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0233.145] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0233.145] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0233.145] GetCapture () returned 0x201d0 [0233.145] ReleaseCapture () returned 1 [0233.145] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0233.145] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0233.145] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03ca) returned 0x1 [0233.145] IsWindowUnicode (hWnd=0x201d0) returned 1 [0233.146] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0233.146] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x28f03ca) returned 0x1 [0233.146] SetCursor (hCursor=0x10003) returned 0x10003 [0233.146] TranslateMessage (lpMsg=0x1ef250) returned 0 [0233.146] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0233.146] GetKeyState (nVirtKey=1) returned 1 [0233.146] GetKeyState (nVirtKey=2) returned 0 [0233.146] GetKeyState (nVirtKey=4) returned 0 [0233.146] GetKeyState (nVirtKey=5) returned 0 [0233.146] GetKeyState (nVirtKey=6) returned 0 [0233.146] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0233.146] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0233.146] WaitMessage () returned 1 [0236.174] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0236.175] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960396) returned 0x1 [0236.175] IsWindowUnicode (hWnd=0x201d0) returned 1 [0236.175] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0236.175] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960396) returned 0x1 [0236.175] SetCursor (hCursor=0x10003) returned 0x10003 [0236.175] TranslateMessage (lpMsg=0x1ef250) returned 0 [0236.176] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0236.176] GetKeyState (nVirtKey=1) returned 1 [0236.176] GetKeyState (nVirtKey=2) returned 0 [0236.176] GetKeyState (nVirtKey=4) returned 0 [0236.176] GetKeyState (nVirtKey=5) returned 0 [0236.176] GetKeyState (nVirtKey=6) returned 0 [0236.176] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0236.176] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0236.176] WaitMessage () returned 1 [0236.236] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0236.236] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960396) returned 0x1 [0236.236] IsWindowUnicode (hWnd=0x201d0) returned 1 [0236.236] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0236.236] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960396) returned 0x1 [0236.237] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0236.237] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e50251) returned 0x0 [0236.237] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0236.237] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0236.237] SetCursor (hCursor=0x10003) returned 0x10003 [0236.237] TranslateMessage (lpMsg=0x1ef250) returned 0 [0236.237] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0236.237] GetKeyState (nVirtKey=1) returned -128 [0236.238] GetKeyState (nVirtKey=2) returned 0 [0236.238] GetKeyState (nVirtKey=4) returned 0 [0236.238] GetKeyState (nVirtKey=5) returned 0 [0236.238] GetKeyState (nVirtKey=6) returned 0 [0236.238] IsWindowVisible (hWnd=0x201d0) returned 1 [0236.238] IsWindowEnabled (hWnd=0x201d0) returned 1 [0236.238] SetFocus (hWnd=0x201d0) returned 0x201d0 [0236.238] GetFocus () returned 0x201d0 [0236.238] GetFocus () returned 0x201d0 [0236.238] GetFocus () returned 0x201d0 [0236.238] GetKeyState (nVirtKey=1) returned -128 [0236.238] GetKeyState (nVirtKey=2) returned 0 [0236.238] GetKeyState (nVirtKey=4) returned 0 [0236.238] GetKeyState (nVirtKey=5) returned 0 [0236.238] GetKeyState (nVirtKey=6) returned 0 [0236.238] GetCapture () returned 0x0 [0236.238] SetCapture (hWnd=0x201d0) returned 0x0 [0236.238] GetKeyState (nVirtKey=1) returned -128 [0236.238] GetKeyState (nVirtKey=2) returned 0 [0236.238] GetKeyState (nVirtKey=4) returned 0 [0236.238] GetKeyState (nVirtKey=5) returned 0 [0236.238] GetKeyState (nVirtKey=6) returned 0 [0236.239] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0236.239] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0236.239] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0236.239] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0236.239] TranslateMessage (lpMsg=0x1ef250) returned 0 [0236.239] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0236.239] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0236.239] IsWindowUnicode (hWnd=0x201d0) returned 1 [0236.239] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0236.239] TranslateMessage (lpMsg=0x1ef250) returned 0 [0236.239] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0236.239] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x269f44c, cPoints=0x1 | out: lpPoints=0x269f44c) returned 42533703 [0236.239] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0236.239] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0236.239] UpdateWindow (hWnd=0x201d0) returned 1 [0236.240] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0236.240] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0236.240] CreateCompatibleDC (hdc=0x160107c7) returned 0x4b010810 [0236.240] SelectObject (hdc=0x4b010810, h=0x490500d1) returned 0x185000f [0236.240] GdipCreateFromHDC (hdc=0x4b010810, graphics=0x1eea5c) returned 0x0 [0236.241] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0236.241] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0236.241] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0236.241] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0236.241] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0236.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0236.242] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0236.242] LocalFree (hMem=0x416cb8) returned 0x0 [0236.242] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0236.242] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0236.242] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0236.242] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0236.242] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0236.242] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd030dbd) returned 0x0 [0236.242] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0236.242] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0236.242] GetCurrentObject (hdc=0x4b010810, type=0x1) returned 0x1b00017 [0236.243] GetCurrentObject (hdc=0x4b010810, type=0x2) returned 0x1900010 [0236.243] GetCurrentObject (hdc=0x4b010810, type=0x7) returned 0x490500d1 [0236.243] GetCurrentObject (hdc=0x4b010810, type=0x6) returned 0x18a002e [0236.243] SaveDC (hdc=0x4b010810) returned 1 [0236.243] GetNearestColor (hdc=0x4b010810, color=0xf5f5f5) returned 0xf5f5f5 [0236.243] GetNearestColor (hdc=0x4b010810, color=0x515151) returned 0x515151 [0236.243] GetNearestColor (hdc=0x4b010810, color=0x0) returned 0x0 [0236.243] GetNearestColor (hdc=0x4b010810, color=0x515151) returned 0x515151 [0236.243] GetNearestColor (hdc=0x4b010810, color=0x0) returned 0x0 [0236.243] GetNearestColor (hdc=0x4b010810, color=0xfafafa) returned 0xfafafa [0236.243] GetNearestColor (hdc=0x4b010810, color=0xe0e0e0) returned 0xe0e0e0 [0236.243] GetNearestColor (hdc=0x4b010810, color=0xdcdcdc) returned 0xdcdcdc [0236.243] GetNearestColor (hdc=0x4b010810, color=0x0) returned 0x0 [0236.243] RestoreDC (hdc=0x4b010810, nSavedDC=-1) returned 1 [0236.244] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4b010810) returned 0x0 [0236.244] IsAppThemed () returned 0x1 [0236.244] GetThemeAppProperties () returned 0x3 [0236.244] GetThemeAppProperties () returned 0x3 [0236.244] IsAppThemed () returned 0x1 [0236.244] GetThemeAppProperties () returned 0x3 [0236.244] GetThemeAppProperties () returned 0x3 [0236.244] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x269fb50 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0236.244] IsAppThemed () returned 0x1 [0236.244] GetThemeAppProperties () returned 0x3 [0236.244] GetThemeAppProperties () returned 0x3 [0236.244] IsAppThemed () returned 0x1 [0236.244] GetThemeAppProperties () returned 0x3 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] IsAppThemed () returned 0x1 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] IsAppThemed () returned 0x1 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] IsThemePartDefined () returned 0x1 [0236.245] IsAppThemed () returned 0x1 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0236.245] IsAppThemed () returned 0x1 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] IsAppThemed () returned 0x1 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] GetThemeAppProperties () returned 0x3 [0236.245] IsThemePartDefined () returned 0x1 [0236.245] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0236.245] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0236.245] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0236.245] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0236.245] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0236.245] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0236.245] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0236.245] LocalFree (hMem=0x416cb8) returned 0x0 [0236.245] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0236.245] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0236.246] LocalFree (hMem=0x416cb8) returned 0x0 [0236.246] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0236.246] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0236.246] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0236.246] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0236.246] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0236.246] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0236.246] GetCurrentObject (hdc=0x4b010810, type=0x1) returned 0x1b00017 [0236.246] GetCurrentObject (hdc=0x4b010810, type=0x2) returned 0x1900010 [0236.246] GetCurrentObject (hdc=0x4b010810, type=0x7) returned 0x490500d1 [0236.246] GetCurrentObject (hdc=0x4b010810, type=0x6) returned 0x18a002e [0236.246] SaveDC (hdc=0x4b010810) returned 1 [0236.246] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x83040246 [0236.246] GetClipRgn (hdc=0x4b010810, hrgn=0x83040246) returned 0 [0236.246] SelectClipRgn (hdc=0x4b010810, hrgn=0xa3040813) returned 2 [0236.246] DeleteObject (ho=0x83040246) returned 1 [0236.246] DeleteObject (ho=0xa3040813) returned 1 [0236.246] OffsetViewportOrgEx (in: hdc=0x4b010810, x=0, y=0, lppt=0x26a0200 | out: lppt=0x26a0200) returned 1 [0236.246] DrawThemeParentBackground () returned 0x0 [0236.247] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0236.247] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0236.247] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0236.247] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0236.247] GetSystemMetrics (nIndex=42) returned 0 [0236.247] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0236.247] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0236.247] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0236.247] GetCurrentObject (hdc=0x4b010810, type=0x1) returned 0x1b00017 [0236.247] GetCurrentObject (hdc=0x4b010810, type=0x2) returned 0x1900010 [0236.247] GetCurrentObject (hdc=0x4b010810, type=0x7) returned 0x490500d1 [0236.247] GetCurrentObject (hdc=0x4b010810, type=0x6) returned 0x18a002e [0236.247] SaveDC (hdc=0x4b010810) returned 2 [0236.247] GetNearestColor (hdc=0x4b010810, color=0xf5f5f5) returned 0xf5f5f5 [0236.247] CreateSolidBrush (color=0xf5f5f5) returned 0xba100244 [0236.247] FillRect (hDC=0x4b010810, lprc=0x1ee2d0, hbr=0xba100244) returned 1 [0236.248] DeleteObject (ho=0xba100244) returned 1 [0236.248] RestoreDC (hdc=0x4b010810, nSavedDC=-1) returned 1 [0236.248] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0236.248] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0236.248] GetSystemMetrics (nIndex=42) returned 0 [0236.248] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0236.248] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0236.248] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0236.248] GetCurrentObject (hdc=0x4b010810, type=0x1) returned 0x1b00017 [0236.248] GetCurrentObject (hdc=0x4b010810, type=0x2) returned 0x1900010 [0236.248] GetCurrentObject (hdc=0x4b010810, type=0x7) returned 0x490500d1 [0236.248] GetCurrentObject (hdc=0x4b010810, type=0x6) returned 0x18a002e [0236.248] SaveDC (hdc=0x4b010810) returned 2 [0236.249] GetNearestColor (hdc=0x4b010810, color=0xf5f5f5) returned 0xf5f5f5 [0236.249] CreateSolidBrush (color=0xf5f5f5) returned 0xbb100244 [0236.249] FillRect (hDC=0x4b010810, lprc=0x1ee270, hbr=0xbb100244) returned 1 [0236.249] DeleteObject (ho=0xbb100244) returned 1 [0236.249] RestoreDC (hdc=0x4b010810, nSavedDC=-1) returned 1 [0236.249] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0236.249] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0236.249] GetSystemMetrics (nIndex=42) returned 0 [0236.249] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0236.249] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0236.249] RestoreDC (hdc=0x4b010810, nSavedDC=-1) returned 1 [0236.249] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4b010810) returned 0x0 [0236.249] IsAppThemed () returned 0x1 [0236.249] GetThemeAppProperties () returned 0x3 [0236.249] GetThemeAppProperties () returned 0x3 [0236.249] IsAppThemed () returned 0x1 [0236.249] GetThemeAppProperties () returned 0x3 [0236.249] GetThemeAppProperties () returned 0x3 [0236.249] IsThemePartDefined () returned 0x1 [0236.250] GdipCreateRegion (region=0x1ee764) returned 0x0 [0236.250] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0236.250] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0236.250] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0236.250] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0236.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0236.250] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0236.250] LocalFree (hMem=0x416cb8) returned 0x0 [0236.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0236.250] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0236.250] LocalFree (hMem=0x416cb8) returned 0x0 [0236.250] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0236.250] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0236.250] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0236.250] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0236.250] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0236.251] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0236.251] GetCurrentObject (hdc=0x4b010810, type=0x1) returned 0x1b00017 [0236.251] GetCurrentObject (hdc=0x4b010810, type=0x2) returned 0x1900010 [0236.251] GetCurrentObject (hdc=0x4b010810, type=0x7) returned 0x490500d1 [0236.251] GetCurrentObject (hdc=0x4b010810, type=0x6) returned 0x18a002e [0236.251] SaveDC (hdc=0x4b010810) returned 1 [0236.251] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa4040813 [0236.251] GetClipRgn (hdc=0x4b010810, hrgn=0xa4040813) returned 0 [0236.251] SelectClipRgn (hdc=0x4b010810, hrgn=0x85040246) returned 2 [0236.251] DeleteObject (ho=0xa4040813) returned 1 [0236.251] DeleteObject (ho=0x85040246) returned 1 [0236.251] OffsetViewportOrgEx (in: hdc=0x4b010810, x=0, y=0, lppt=0x26a0a40 | out: lppt=0x26a0a40) returned 1 [0236.251] IsAppThemed () returned 0x1 [0236.251] GetThemeAppProperties () returned 0x3 [0236.251] GetThemeAppProperties () returned 0x3 [0236.251] DrawThemeBackground () returned 0x0 [0236.251] RestoreDC (hdc=0x4b010810, nSavedDC=-1) returned 1 [0236.251] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4b010810) returned 0x0 [0236.252] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0236.252] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0236.252] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0236.252] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0236.252] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0236.252] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0236.252] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0236.252] LocalFree (hMem=0x416cb8) returned 0x0 [0236.252] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0236.252] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0236.252] LocalFree (hMem=0x416cb8) returned 0x0 [0236.252] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0236.252] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0236.252] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0236.252] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0236.252] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0236.252] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0236.252] GetCurrentObject (hdc=0x4b010810, type=0x1) returned 0x1b00017 [0236.253] GetCurrentObject (hdc=0x4b010810, type=0x2) returned 0x1900010 [0236.253] GetCurrentObject (hdc=0x4b010810, type=0x7) returned 0x490500d1 [0236.253] GetCurrentObject (hdc=0x4b010810, type=0x6) returned 0x18a002e [0236.253] SaveDC (hdc=0x4b010810) returned 1 [0236.253] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x86040246 [0236.253] GetClipRgn (hdc=0x4b010810, hrgn=0x86040246) returned 0 [0236.253] SelectClipRgn (hdc=0x4b010810, hrgn=0xa5040813) returned 2 [0236.253] DeleteObject (ho=0x86040246) returned 1 [0236.253] DeleteObject (ho=0xa5040813) returned 1 [0236.253] OffsetViewportOrgEx (in: hdc=0x4b010810, x=0, y=0, lppt=0x26a0d14 | out: lppt=0x26a0d14) returned 1 [0236.253] IsAppThemed () returned 0x1 [0236.253] GetThemeAppProperties () returned 0x3 [0236.253] GetThemeAppProperties () returned 0x3 [0236.253] GetThemeBackgroundContentRect () returned 0x0 [0236.253] RestoreDC (hdc=0x4b010810, nSavedDC=-1) returned 1 [0236.253] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4b010810) returned 0x0 [0236.253] IsAppThemed () returned 0x1 [0236.253] GetThemeAppProperties () returned 0x3 [0236.253] GetThemeAppProperties () returned 0x3 [0236.254] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0236.254] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0236.254] GetCurrentObject (hdc=0x4b010810, type=0x1) returned 0x1b00017 [0236.254] GetCurrentObject (hdc=0x4b010810, type=0x2) returned 0x1900010 [0236.254] GetCurrentObject (hdc=0x4b010810, type=0x7) returned 0x490500d1 [0236.254] GetCurrentObject (hdc=0x4b010810, type=0x6) returned 0x18a002e [0236.254] SaveDC (hdc=0x4b010810) returned 1 [0236.254] GetTextAlign (hdc=0x4b010810) returned 0x0 [0236.254] GetTextColor (hdc=0x4b010810) returned 0x0 [0236.254] GetCurrentObject (hdc=0x4b010810, type=0x6) returned 0x18a002e [0236.254] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0236.254] SelectObject (hdc=0x4b010810, h=0x220a081a) returned 0x18a002e [0236.254] GetBkMode (hdc=0x4b010810) returned 2 [0236.254] SetBkMode (hdc=0x4b010810, mode=1) returned 2 [0236.255] DrawTextExW (in: hdc=0x4b010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26a10a8 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0236.255] DrawTextExW (in: hdc=0x4b010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26a10a8 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0236.255] RestoreDC (hdc=0x4b010810, nSavedDC=-1) returned 1 [0236.255] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4b010810) returned 0x0 [0236.255] GetFocus () returned 0x201d0 [0236.255] IsAppThemed () returned 0x1 [0236.255] GetThemeAppProperties () returned 0x3 [0236.255] GetThemeAppProperties () returned 0x3 [0236.255] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0236.255] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x4b010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0236.255] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4b010810) returned 0x0 [0236.256] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0236.256] SelectObject (hdc=0x4b010810, h=0x185000f) returned 0x490500d1 [0236.256] DeleteDC (hdc=0x4b010810) returned 1 [0236.256] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0236.256] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0236.256] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26a11a4, cPoints=0x1 | out: lpPoints=0x26a11a4) returned 42533703 [0236.256] WindowFromPoint (Point=0x396) returned 0x201d0 [0236.256] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960396) returned 0x1 [0236.256] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0236.256] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0236.256] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0236.256] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0236.257] GetSystemMetrics (nIndex=42) returned 0 [0236.257] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0236.257] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0236.257] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0236.257] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0236.257] GetCapture () returned 0x201d0 [0236.257] ReleaseCapture () returned 1 [0236.257] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0236.257] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0236.257] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960396) returned 0x1 [0236.257] IsWindowUnicode (hWnd=0x201d0) returned 1 [0236.257] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0236.257] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x2960396) returned 0x1 [0236.257] SetCursor (hCursor=0x10003) returned 0x10003 [0236.258] TranslateMessage (lpMsg=0x1ef250) returned 0 [0236.258] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0236.258] GetKeyState (nVirtKey=1) returned 0 [0236.258] GetKeyState (nVirtKey=2) returned 0 [0236.258] GetKeyState (nVirtKey=4) returned 0 [0236.258] GetKeyState (nVirtKey=5) returned 0 [0236.258] GetKeyState (nVirtKey=6) returned 0 [0236.258] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0236.258] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0236.258] WaitMessage () returned 1 [0239.186] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0239.186] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303ba) returned 0x1 [0239.186] IsWindowUnicode (hWnd=0x201d0) returned 1 [0239.186] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0239.186] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303ba) returned 0x1 [0239.186] SetCursor (hCursor=0x10003) returned 0x10003 [0239.186] TranslateMessage (lpMsg=0x1ef250) returned 0 [0239.186] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0239.186] GetKeyState (nVirtKey=1) returned 0 [0239.186] GetKeyState (nVirtKey=2) returned 0 [0239.186] GetKeyState (nVirtKey=4) returned 0 [0239.186] GetKeyState (nVirtKey=5) returned 0 [0239.186] GetKeyState (nVirtKey=6) returned 0 [0239.186] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0239.186] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0239.186] WaitMessage () returned 1 [0239.262] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0239.262] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303ba) returned 0x1 [0239.262] IsWindowUnicode (hWnd=0x201d0) returned 1 [0239.262] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0239.262] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303ba) returned 0x1 [0239.262] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0239.262] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e20275) returned 0x0 [0239.262] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0239.262] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0239.262] SetCursor (hCursor=0x10003) returned 0x10003 [0239.262] TranslateMessage (lpMsg=0x1ef250) returned 0 [0239.262] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0239.263] GetKeyState (nVirtKey=1) returned -127 [0239.263] GetKeyState (nVirtKey=2) returned 0 [0239.263] GetKeyState (nVirtKey=4) returned 0 [0239.263] GetKeyState (nVirtKey=5) returned 0 [0239.263] GetKeyState (nVirtKey=6) returned 0 [0239.263] IsWindowVisible (hWnd=0x201d0) returned 1 [0239.263] IsWindowEnabled (hWnd=0x201d0) returned 1 [0239.263] SetFocus (hWnd=0x201d0) returned 0x201d0 [0239.263] GetFocus () returned 0x201d0 [0239.263] GetFocus () returned 0x201d0 [0239.263] GetFocus () returned 0x201d0 [0239.263] GetKeyState (nVirtKey=1) returned -127 [0239.263] GetKeyState (nVirtKey=2) returned 0 [0239.263] GetKeyState (nVirtKey=4) returned 0 [0239.263] GetKeyState (nVirtKey=5) returned 0 [0239.263] GetKeyState (nVirtKey=6) returned 0 [0239.263] GetCapture () returned 0x0 [0239.263] SetCapture (hWnd=0x201d0) returned 0x0 [0239.263] GetKeyState (nVirtKey=1) returned -127 [0239.263] GetKeyState (nVirtKey=2) returned 0 [0239.263] GetKeyState (nVirtKey=4) returned 0 [0239.263] GetKeyState (nVirtKey=5) returned 0 [0239.263] GetKeyState (nVirtKey=6) returned 0 [0239.263] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0239.263] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0239.263] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0239.263] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0239.263] TranslateMessage (lpMsg=0x1ef250) returned 0 [0239.263] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0239.263] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0239.263] IsWindowUnicode (hWnd=0x201d0) returned 1 [0239.263] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0239.264] TranslateMessage (lpMsg=0x1ef250) returned 0 [0239.264] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0239.264] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26a12c8, cPoints=0x1 | out: lpPoints=0x26a12c8) returned 42533703 [0239.264] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0239.264] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0239.264] UpdateWindow (hWnd=0x201d0) returned 1 [0239.264] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0239.264] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0239.264] CreateCompatibleDC (hdc=0x160107c7) returned 0x4e010810 [0239.264] SelectObject (hdc=0x4e010810, h=0x490500d1) returned 0x185000f [0239.264] GdipCreateFromHDC (hdc=0x4e010810, graphics=0x1eea5c) returned 0x0 [0239.264] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0239.264] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0239.264] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0239.264] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0239.264] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0239.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0239.264] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0239.264] LocalFree (hMem=0x416cb8) returned 0x0 [0239.264] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0239.265] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0239.265] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0239.265] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0239.265] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0239.265] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfd010dbd) returned 0x0 [0239.265] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0239.265] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0239.265] GetCurrentObject (hdc=0x4e010810, type=0x1) returned 0x1b00017 [0239.265] GetCurrentObject (hdc=0x4e010810, type=0x2) returned 0x1900010 [0239.265] GetCurrentObject (hdc=0x4e010810, type=0x7) returned 0x490500d1 [0239.265] GetCurrentObject (hdc=0x4e010810, type=0x6) returned 0x18a002e [0239.265] SaveDC (hdc=0x4e010810) returned 1 [0239.265] GetNearestColor (hdc=0x4e010810, color=0xf5f5f5) returned 0xf5f5f5 [0239.265] GetNearestColor (hdc=0x4e010810, color=0x515151) returned 0x515151 [0239.265] GetNearestColor (hdc=0x4e010810, color=0x0) returned 0x0 [0239.265] GetNearestColor (hdc=0x4e010810, color=0x515151) returned 0x515151 [0239.265] GetNearestColor (hdc=0x4e010810, color=0x0) returned 0x0 [0239.265] GetNearestColor (hdc=0x4e010810, color=0xfafafa) returned 0xfafafa [0239.265] GetNearestColor (hdc=0x4e010810, color=0xe0e0e0) returned 0xe0e0e0 [0239.265] GetNearestColor (hdc=0x4e010810, color=0xdcdcdc) returned 0xdcdcdc [0239.266] GetNearestColor (hdc=0x4e010810, color=0x0) returned 0x0 [0239.266] RestoreDC (hdc=0x4e010810, nSavedDC=-1) returned 1 [0239.266] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4e010810) returned 0x0 [0239.266] IsAppThemed () returned 0x1 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] IsAppThemed () returned 0x1 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26a19cc | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0239.266] IsAppThemed () returned 0x1 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] IsAppThemed () returned 0x1 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] IsAppThemed () returned 0x1 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] IsAppThemed () returned 0x1 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] IsThemePartDefined () returned 0x1 [0239.266] IsAppThemed () returned 0x1 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0239.266] IsAppThemed () returned 0x1 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] IsAppThemed () returned 0x1 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] GetThemeAppProperties () returned 0x3 [0239.266] IsThemePartDefined () returned 0x1 [0239.267] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0239.267] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0239.267] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0239.267] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0239.267] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0239.267] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0239.267] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0239.267] LocalFree (hMem=0x416cb8) returned 0x0 [0239.267] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0239.267] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0239.267] LocalFree (hMem=0x416cb8) returned 0x0 [0239.267] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0239.267] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0239.267] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0239.267] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0239.267] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0239.267] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0239.267] GetCurrentObject (hdc=0x4e010810, type=0x1) returned 0x1b00017 [0239.267] GetCurrentObject (hdc=0x4e010810, type=0x2) returned 0x1900010 [0239.267] GetCurrentObject (hdc=0x4e010810, type=0x7) returned 0x490500d1 [0239.267] GetCurrentObject (hdc=0x4e010810, type=0x6) returned 0x18a002e [0239.267] SaveDC (hdc=0x4e010810) returned 1 [0239.267] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa6040813 [0239.268] GetClipRgn (hdc=0x4e010810, hrgn=0xa6040813) returned 0 [0239.268] SelectClipRgn (hdc=0x4e010810, hrgn=0x8a040246) returned 2 [0239.268] DeleteObject (ho=0xa6040813) returned 1 [0239.268] DeleteObject (ho=0x8a040246) returned 1 [0239.268] OffsetViewportOrgEx (in: hdc=0x4e010810, x=0, y=0, lppt=0x26a207c | out: lppt=0x26a207c) returned 1 [0239.268] DrawThemeParentBackground () returned 0x0 [0239.268] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0239.268] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0239.268] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0239.268] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0239.268] GetSystemMetrics (nIndex=42) returned 0 [0239.268] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0239.268] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0239.268] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0239.268] GetCurrentObject (hdc=0x4e010810, type=0x1) returned 0x1b00017 [0239.268] GetCurrentObject (hdc=0x4e010810, type=0x2) returned 0x1900010 [0239.268] GetCurrentObject (hdc=0x4e010810, type=0x7) returned 0x490500d1 [0239.268] GetCurrentObject (hdc=0x4e010810, type=0x6) returned 0x18a002e [0239.268] SaveDC (hdc=0x4e010810) returned 2 [0239.268] GetNearestColor (hdc=0x4e010810, color=0xf5f5f5) returned 0xf5f5f5 [0239.268] CreateSolidBrush (color=0xf5f5f5) returned 0xbc100244 [0239.268] FillRect (hDC=0x4e010810, lprc=0x1ee2d0, hbr=0xbc100244) returned 1 [0239.268] DeleteObject (ho=0xbc100244) returned 1 [0239.269] RestoreDC (hdc=0x4e010810, nSavedDC=-1) returned 1 [0239.269] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0239.269] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0239.269] GetSystemMetrics (nIndex=42) returned 0 [0239.269] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0239.269] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0239.269] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0239.269] GetCurrentObject (hdc=0x4e010810, type=0x1) returned 0x1b00017 [0239.269] GetCurrentObject (hdc=0x4e010810, type=0x2) returned 0x1900010 [0239.269] GetCurrentObject (hdc=0x4e010810, type=0x7) returned 0x490500d1 [0239.269] GetCurrentObject (hdc=0x4e010810, type=0x6) returned 0x18a002e [0239.269] SaveDC (hdc=0x4e010810) returned 2 [0239.269] GetNearestColor (hdc=0x4e010810, color=0xf5f5f5) returned 0xf5f5f5 [0239.269] CreateSolidBrush (color=0xf5f5f5) returned 0xbd100244 [0239.269] FillRect (hDC=0x4e010810, lprc=0x1ee270, hbr=0xbd100244) returned 1 [0239.269] DeleteObject (ho=0xbd100244) returned 1 [0239.269] RestoreDC (hdc=0x4e010810, nSavedDC=-1) returned 1 [0239.269] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0239.269] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0239.269] GetSystemMetrics (nIndex=42) returned 0 [0239.269] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0239.269] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0239.270] RestoreDC (hdc=0x4e010810, nSavedDC=-1) returned 1 [0239.270] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4e010810) returned 0x0 [0239.270] IsAppThemed () returned 0x1 [0239.270] GetThemeAppProperties () returned 0x3 [0239.270] GetThemeAppProperties () returned 0x3 [0239.270] IsAppThemed () returned 0x1 [0239.270] GetThemeAppProperties () returned 0x3 [0239.270] GetThemeAppProperties () returned 0x3 [0239.270] IsThemePartDefined () returned 0x1 [0239.270] GdipCreateRegion (region=0x1ee764) returned 0x0 [0239.270] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0239.270] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0239.270] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0239.270] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0239.270] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0239.270] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0239.270] LocalFree (hMem=0x416cb8) returned 0x0 [0239.270] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0239.270] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0239.270] LocalFree (hMem=0x416cb8) returned 0x0 [0239.270] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0239.270] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0239.270] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0239.270] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0239.270] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0239.271] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0239.271] GetCurrentObject (hdc=0x4e010810, type=0x1) returned 0x1b00017 [0239.271] GetCurrentObject (hdc=0x4e010810, type=0x2) returned 0x1900010 [0239.271] GetCurrentObject (hdc=0x4e010810, type=0x7) returned 0x490500d1 [0239.271] GetCurrentObject (hdc=0x4e010810, type=0x6) returned 0x18a002e [0239.271] SaveDC (hdc=0x4e010810) returned 1 [0239.271] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8b040246 [0239.271] GetClipRgn (hdc=0x4e010810, hrgn=0x8b040246) returned 0 [0239.271] SelectClipRgn (hdc=0x4e010810, hrgn=0xa8040813) returned 2 [0239.271] DeleteObject (ho=0x8b040246) returned 1 [0239.271] DeleteObject (ho=0xa8040813) returned 1 [0239.271] OffsetViewportOrgEx (in: hdc=0x4e010810, x=0, y=0, lppt=0x26a28bc | out: lppt=0x26a28bc) returned 1 [0239.271] IsAppThemed () returned 0x1 [0239.271] GetThemeAppProperties () returned 0x3 [0239.271] GetThemeAppProperties () returned 0x3 [0239.271] DrawThemeBackground () returned 0x0 [0239.271] RestoreDC (hdc=0x4e010810, nSavedDC=-1) returned 1 [0239.271] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4e010810) returned 0x0 [0239.271] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0239.271] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0239.271] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0239.271] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0239.271] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0239.272] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0239.272] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0239.272] LocalFree (hMem=0x416cb8) returned 0x0 [0239.272] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0239.272] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0239.272] LocalFree (hMem=0x416cb8) returned 0x0 [0239.272] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0239.272] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0239.272] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0239.272] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0239.272] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0239.272] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0239.272] GetCurrentObject (hdc=0x4e010810, type=0x1) returned 0x1b00017 [0239.272] GetCurrentObject (hdc=0x4e010810, type=0x2) returned 0x1900010 [0239.272] GetCurrentObject (hdc=0x4e010810, type=0x7) returned 0x490500d1 [0239.272] GetCurrentObject (hdc=0x4e010810, type=0x6) returned 0x18a002e [0239.272] SaveDC (hdc=0x4e010810) returned 1 [0239.272] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa9040813 [0239.272] GetClipRgn (hdc=0x4e010810, hrgn=0xa9040813) returned 0 [0239.272] SelectClipRgn (hdc=0x4e010810, hrgn=0x8c040246) returned 2 [0239.272] DeleteObject (ho=0xa9040813) returned 1 [0239.272] DeleteObject (ho=0x8c040246) returned 1 [0239.272] OffsetViewportOrgEx (in: hdc=0x4e010810, x=0, y=0, lppt=0x26a2b90 | out: lppt=0x26a2b90) returned 1 [0239.272] IsAppThemed () returned 0x1 [0239.273] GetThemeAppProperties () returned 0x3 [0239.273] GetThemeAppProperties () returned 0x3 [0239.273] GetThemeBackgroundContentRect () returned 0x0 [0239.273] RestoreDC (hdc=0x4e010810, nSavedDC=-1) returned 1 [0239.273] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4e010810) returned 0x0 [0239.273] IsAppThemed () returned 0x1 [0239.273] GetThemeAppProperties () returned 0x3 [0239.273] GetThemeAppProperties () returned 0x3 [0239.273] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0239.273] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0239.273] GetCurrentObject (hdc=0x4e010810, type=0x1) returned 0x1b00017 [0239.273] GetCurrentObject (hdc=0x4e010810, type=0x2) returned 0x1900010 [0239.273] GetCurrentObject (hdc=0x4e010810, type=0x7) returned 0x490500d1 [0239.273] GetCurrentObject (hdc=0x4e010810, type=0x6) returned 0x18a002e [0239.273] SaveDC (hdc=0x4e010810) returned 1 [0239.273] GetTextAlign (hdc=0x4e010810) returned 0x0 [0239.273] GetTextColor (hdc=0x4e010810) returned 0x0 [0239.273] GetCurrentObject (hdc=0x4e010810, type=0x6) returned 0x18a002e [0239.273] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0239.273] SelectObject (hdc=0x4e010810, h=0x220a081a) returned 0x18a002e [0239.273] GetBkMode (hdc=0x4e010810) returned 2 [0239.273] SetBkMode (hdc=0x4e010810, mode=1) returned 2 [0239.273] DrawTextExW (in: hdc=0x4e010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26a2f24 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0239.274] DrawTextExW (in: hdc=0x4e010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26a2f24 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0239.274] RestoreDC (hdc=0x4e010810, nSavedDC=-1) returned 1 [0239.274] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4e010810) returned 0x0 [0239.274] GetFocus () returned 0x201d0 [0239.274] IsAppThemed () returned 0x1 [0239.274] GetThemeAppProperties () returned 0x3 [0239.274] GetThemeAppProperties () returned 0x3 [0239.274] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0239.274] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x4e010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0239.274] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4e010810) returned 0x0 [0239.274] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0239.274] SelectObject (hdc=0x4e010810, h=0x185000f) returned 0x490500d1 [0239.274] DeleteDC (hdc=0x4e010810) returned 1 [0239.274] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0239.274] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0239.274] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26a3020, cPoints=0x1 | out: lpPoints=0x26a3020) returned 42533703 [0239.274] WindowFromPoint (Point=0x3ba) returned 0x201d0 [0239.274] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303ba) returned 0x1 [0239.274] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0239.275] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0239.275] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0239.275] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0239.275] GetSystemMetrics (nIndex=42) returned 0 [0239.275] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0239.275] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0239.275] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0239.275] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0239.275] GetCapture () returned 0x201d0 [0239.275] ReleaseCapture () returned 1 [0239.275] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0239.275] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0239.275] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303ba) returned 0x1 [0239.275] IsWindowUnicode (hWnd=0x201d0) returned 1 [0239.275] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0239.275] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303ba) returned 0x1 [0239.275] SetCursor (hCursor=0x10003) returned 0x10003 [0239.275] TranslateMessage (lpMsg=0x1ef250) returned 0 [0239.275] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0239.275] GetKeyState (nVirtKey=1) returned 1 [0239.275] GetKeyState (nVirtKey=2) returned 0 [0239.275] GetKeyState (nVirtKey=4) returned 0 [0239.275] GetKeyState (nVirtKey=5) returned 0 [0239.275] GetKeyState (nVirtKey=6) returned 0 [0239.275] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0239.275] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0239.276] WaitMessage () returned 1 [0242.304] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0242.304] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ae) returned 0x1 [0242.304] IsWindowUnicode (hWnd=0x201d0) returned 1 [0242.304] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0242.304] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ae) returned 0x1 [0242.304] SetCursor (hCursor=0x10003) returned 0x10003 [0242.304] TranslateMessage (lpMsg=0x1ef250) returned 0 [0242.304] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0242.304] GetKeyState (nVirtKey=1) returned 1 [0242.304] GetKeyState (nVirtKey=2) returned 0 [0242.304] GetKeyState (nVirtKey=4) returned 0 [0242.304] GetKeyState (nVirtKey=5) returned 0 [0242.304] GetKeyState (nVirtKey=6) returned 0 [0242.304] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0242.304] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0242.305] WaitMessage () returned 1 [0242.382] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0242.382] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ae) returned 0x1 [0242.382] IsWindowUnicode (hWnd=0x201d0) returned 1 [0242.382] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0242.382] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ae) returned 0x1 [0242.382] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0242.382] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1df0269) returned 0x0 [0242.382] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0242.382] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0242.382] SetCursor (hCursor=0x10003) returned 0x10003 [0242.382] TranslateMessage (lpMsg=0x1ef250) returned 0 [0242.383] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0242.383] GetKeyState (nVirtKey=1) returned -128 [0242.383] GetKeyState (nVirtKey=2) returned 0 [0242.383] GetKeyState (nVirtKey=4) returned 0 [0242.383] GetKeyState (nVirtKey=5) returned 0 [0242.383] GetKeyState (nVirtKey=6) returned 0 [0242.383] IsWindowVisible (hWnd=0x201d0) returned 1 [0242.383] IsWindowEnabled (hWnd=0x201d0) returned 1 [0242.383] SetFocus (hWnd=0x201d0) returned 0x201d0 [0242.383] GetFocus () returned 0x201d0 [0242.383] GetFocus () returned 0x201d0 [0242.383] GetFocus () returned 0x201d0 [0242.383] GetKeyState (nVirtKey=1) returned -128 [0242.383] GetKeyState (nVirtKey=2) returned 0 [0242.383] GetKeyState (nVirtKey=4) returned 0 [0242.383] GetKeyState (nVirtKey=5) returned 0 [0242.383] GetKeyState (nVirtKey=6) returned 0 [0242.383] GetCapture () returned 0x0 [0242.383] SetCapture (hWnd=0x201d0) returned 0x0 [0242.383] GetKeyState (nVirtKey=1) returned -128 [0242.383] GetKeyState (nVirtKey=2) returned 0 [0242.383] GetKeyState (nVirtKey=4) returned 0 [0242.383] GetKeyState (nVirtKey=5) returned 0 [0242.383] GetKeyState (nVirtKey=6) returned 0 [0242.383] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0242.383] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0242.383] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0242.383] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0242.383] TranslateMessage (lpMsg=0x1ef250) returned 0 [0242.383] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0242.383] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0242.383] IsWindowUnicode (hWnd=0x201d0) returned 1 [0242.383] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0242.383] TranslateMessage (lpMsg=0x1ef250) returned 0 [0242.384] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0242.384] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26a3144, cPoints=0x1 | out: lpPoints=0x26a3144) returned 42533703 [0242.384] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0242.384] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0242.384] UpdateWindow (hWnd=0x201d0) returned 1 [0242.384] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0242.384] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0242.384] CreateCompatibleDC (hdc=0x160107c7) returned 0x4f010810 [0242.384] SelectObject (hdc=0x4f010810, h=0x490500d1) returned 0x185000f [0242.384] GdipCreateFromHDC (hdc=0x4f010810, graphics=0x1eea5c) returned 0x0 [0242.384] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0242.384] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0242.384] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0242.384] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0242.384] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0242.384] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0242.384] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0242.384] LocalFree (hMem=0x416cb8) returned 0x0 [0242.384] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0242.384] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0242.384] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0242.384] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0242.385] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0242.385] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfcff0dbd) returned 0x0 [0242.385] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0242.385] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0242.385] GetCurrentObject (hdc=0x4f010810, type=0x1) returned 0x1b00017 [0242.385] GetCurrentObject (hdc=0x4f010810, type=0x2) returned 0x1900010 [0242.385] GetCurrentObject (hdc=0x4f010810, type=0x7) returned 0x490500d1 [0242.385] GetCurrentObject (hdc=0x4f010810, type=0x6) returned 0x18a002e [0242.385] SaveDC (hdc=0x4f010810) returned 1 [0242.385] GetNearestColor (hdc=0x4f010810, color=0xf5f5f5) returned 0xf5f5f5 [0242.385] GetNearestColor (hdc=0x4f010810, color=0x515151) returned 0x515151 [0242.385] GetNearestColor (hdc=0x4f010810, color=0x0) returned 0x0 [0242.385] GetNearestColor (hdc=0x4f010810, color=0x515151) returned 0x515151 [0242.385] GetNearestColor (hdc=0x4f010810, color=0x0) returned 0x0 [0242.385] GetNearestColor (hdc=0x4f010810, color=0xfafafa) returned 0xfafafa [0242.385] GetNearestColor (hdc=0x4f010810, color=0xe0e0e0) returned 0xe0e0e0 [0242.385] GetNearestColor (hdc=0x4f010810, color=0xdcdcdc) returned 0xdcdcdc [0242.385] GetNearestColor (hdc=0x4f010810, color=0x0) returned 0x0 [0242.385] RestoreDC (hdc=0x4f010810, nSavedDC=-1) returned 1 [0242.385] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4f010810) returned 0x0 [0242.386] IsAppThemed () returned 0x1 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] IsAppThemed () returned 0x1 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26a3848 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0242.386] IsAppThemed () returned 0x1 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] IsAppThemed () returned 0x1 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] IsAppThemed () returned 0x1 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] IsAppThemed () returned 0x1 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] IsThemePartDefined () returned 0x1 [0242.386] IsAppThemed () returned 0x1 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0242.386] IsAppThemed () returned 0x1 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] IsAppThemed () returned 0x1 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] GetThemeAppProperties () returned 0x3 [0242.386] IsThemePartDefined () returned 0x1 [0242.386] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0242.386] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0242.386] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0242.386] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0242.387] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0242.387] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0242.387] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0242.387] LocalFree (hMem=0x416cb8) returned 0x0 [0242.387] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0242.387] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0242.387] LocalFree (hMem=0x416cb8) returned 0x0 [0242.387] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0242.387] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0242.387] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0242.387] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0242.387] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0242.387] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0242.387] GetCurrentObject (hdc=0x4f010810, type=0x1) returned 0x1b00017 [0242.387] GetCurrentObject (hdc=0x4f010810, type=0x2) returned 0x1900010 [0242.387] GetCurrentObject (hdc=0x4f010810, type=0x7) returned 0x490500d1 [0242.387] GetCurrentObject (hdc=0x4f010810, type=0x6) returned 0x18a002e [0242.387] SaveDC (hdc=0x4f010810) returned 1 [0242.387] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8d040246 [0242.387] GetClipRgn (hdc=0x4f010810, hrgn=0x8d040246) returned 0 [0242.387] SelectClipRgn (hdc=0x4f010810, hrgn=0xad040813) returned 2 [0242.387] DeleteObject (ho=0x8d040246) returned 1 [0242.388] DeleteObject (ho=0xad040813) returned 1 [0242.388] OffsetViewportOrgEx (in: hdc=0x4f010810, x=0, y=0, lppt=0x26a3ef8 | out: lppt=0x26a3ef8) returned 1 [0242.388] DrawThemeParentBackground () returned 0x0 [0242.388] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0242.388] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0242.388] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0242.388] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0242.388] GetSystemMetrics (nIndex=42) returned 0 [0242.388] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0242.388] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0242.388] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0242.388] GetCurrentObject (hdc=0x4f010810, type=0x1) returned 0x1b00017 [0242.388] GetCurrentObject (hdc=0x4f010810, type=0x2) returned 0x1900010 [0242.388] GetCurrentObject (hdc=0x4f010810, type=0x7) returned 0x490500d1 [0242.388] GetCurrentObject (hdc=0x4f010810, type=0x6) returned 0x18a002e [0242.388] SaveDC (hdc=0x4f010810) returned 2 [0242.388] GetNearestColor (hdc=0x4f010810, color=0xf5f5f5) returned 0xf5f5f5 [0242.388] CreateSolidBrush (color=0xf5f5f5) returned 0xbe100244 [0242.388] FillRect (hDC=0x4f010810, lprc=0x1ee2d0, hbr=0xbe100244) returned 1 [0242.388] DeleteObject (ho=0xbe100244) returned 1 [0242.388] RestoreDC (hdc=0x4f010810, nSavedDC=-1) returned 1 [0242.389] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0242.389] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0242.389] GetSystemMetrics (nIndex=42) returned 0 [0242.389] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0242.389] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0242.389] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0242.389] GetCurrentObject (hdc=0x4f010810, type=0x1) returned 0x1b00017 [0242.389] GetCurrentObject (hdc=0x4f010810, type=0x2) returned 0x1900010 [0242.389] GetCurrentObject (hdc=0x4f010810, type=0x7) returned 0x490500d1 [0242.389] GetCurrentObject (hdc=0x4f010810, type=0x6) returned 0x18a002e [0242.389] SaveDC (hdc=0x4f010810) returned 2 [0242.389] GetNearestColor (hdc=0x4f010810, color=0xf5f5f5) returned 0xf5f5f5 [0242.389] CreateSolidBrush (color=0xf5f5f5) returned 0xbf100244 [0242.389] FillRect (hDC=0x4f010810, lprc=0x1ee270, hbr=0xbf100244) returned 1 [0242.389] DeleteObject (ho=0xbf100244) returned 1 [0242.389] RestoreDC (hdc=0x4f010810, nSavedDC=-1) returned 1 [0242.389] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0242.389] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0242.389] GetSystemMetrics (nIndex=42) returned 0 [0242.389] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0242.389] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0242.389] RestoreDC (hdc=0x4f010810, nSavedDC=-1) returned 1 [0242.389] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4f010810) returned 0x0 [0242.390] IsAppThemed () returned 0x1 [0242.390] GetThemeAppProperties () returned 0x3 [0242.390] GetThemeAppProperties () returned 0x3 [0242.390] IsAppThemed () returned 0x1 [0242.390] GetThemeAppProperties () returned 0x3 [0242.390] GetThemeAppProperties () returned 0x3 [0242.390] IsThemePartDefined () returned 0x1 [0242.390] GdipCreateRegion (region=0x1ee764) returned 0x0 [0242.390] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0242.390] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0242.390] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0242.390] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0242.390] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0242.390] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0242.390] LocalFree (hMem=0x416cb8) returned 0x0 [0242.390] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0242.390] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0242.390] LocalFree (hMem=0x416cb8) returned 0x0 [0242.390] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0242.390] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0242.390] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0242.390] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0242.390] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0242.390] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0242.390] GetCurrentObject (hdc=0x4f010810, type=0x1) returned 0x1b00017 [0242.391] GetCurrentObject (hdc=0x4f010810, type=0x2) returned 0x1900010 [0242.391] GetCurrentObject (hdc=0x4f010810, type=0x7) returned 0x490500d1 [0242.391] GetCurrentObject (hdc=0x4f010810, type=0x6) returned 0x18a002e [0242.391] SaveDC (hdc=0x4f010810) returned 1 [0242.391] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xae040813 [0242.391] GetClipRgn (hdc=0x4f010810, hrgn=0xae040813) returned 0 [0242.391] SelectClipRgn (hdc=0x4f010810, hrgn=0x8f040246) returned 2 [0242.391] DeleteObject (ho=0xae040813) returned 1 [0242.391] DeleteObject (ho=0x8f040246) returned 1 [0242.391] OffsetViewportOrgEx (in: hdc=0x4f010810, x=0, y=0, lppt=0x26a4738 | out: lppt=0x26a4738) returned 1 [0242.391] IsAppThemed () returned 0x1 [0242.391] GetThemeAppProperties () returned 0x3 [0242.391] GetThemeAppProperties () returned 0x3 [0242.391] DrawThemeBackground () returned 0x0 [0242.391] RestoreDC (hdc=0x4f010810, nSavedDC=-1) returned 1 [0242.391] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4f010810) returned 0x0 [0242.391] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0242.391] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0242.391] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0242.391] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0242.391] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0242.391] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0242.391] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0242.391] LocalFree (hMem=0x416cb8) returned 0x0 [0242.392] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0242.392] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0242.392] LocalFree (hMem=0x416cb8) returned 0x0 [0242.392] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0242.392] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0242.392] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0242.392] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0242.392] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0242.392] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0242.392] GetCurrentObject (hdc=0x4f010810, type=0x1) returned 0x1b00017 [0242.392] GetCurrentObject (hdc=0x4f010810, type=0x2) returned 0x1900010 [0242.392] GetCurrentObject (hdc=0x4f010810, type=0x7) returned 0x490500d1 [0242.392] GetCurrentObject (hdc=0x4f010810, type=0x6) returned 0x18a002e [0242.392] SaveDC (hdc=0x4f010810) returned 1 [0242.392] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x90040246 [0242.392] GetClipRgn (hdc=0x4f010810, hrgn=0x90040246) returned 0 [0242.392] SelectClipRgn (hdc=0x4f010810, hrgn=0xaf040813) returned 2 [0242.392] DeleteObject (ho=0x90040246) returned 1 [0242.392] DeleteObject (ho=0xaf040813) returned 1 [0242.392] OffsetViewportOrgEx (in: hdc=0x4f010810, x=0, y=0, lppt=0x26a4a0c | out: lppt=0x26a4a0c) returned 1 [0242.392] IsAppThemed () returned 0x1 [0242.392] GetThemeAppProperties () returned 0x3 [0242.392] GetThemeAppProperties () returned 0x3 [0242.392] GetThemeBackgroundContentRect () returned 0x0 [0242.393] RestoreDC (hdc=0x4f010810, nSavedDC=-1) returned 1 [0242.393] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4f010810) returned 0x0 [0242.393] IsAppThemed () returned 0x1 [0242.393] GetThemeAppProperties () returned 0x3 [0242.393] GetThemeAppProperties () returned 0x3 [0242.393] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0242.393] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0242.393] GetCurrentObject (hdc=0x4f010810, type=0x1) returned 0x1b00017 [0242.393] GetCurrentObject (hdc=0x4f010810, type=0x2) returned 0x1900010 [0242.393] GetCurrentObject (hdc=0x4f010810, type=0x7) returned 0x490500d1 [0242.393] GetCurrentObject (hdc=0x4f010810, type=0x6) returned 0x18a002e [0242.393] SaveDC (hdc=0x4f010810) returned 1 [0242.393] GetTextAlign (hdc=0x4f010810) returned 0x0 [0242.393] GetTextColor (hdc=0x4f010810) returned 0x0 [0242.393] GetCurrentObject (hdc=0x4f010810, type=0x6) returned 0x18a002e [0242.393] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0242.393] SelectObject (hdc=0x4f010810, h=0x220a081a) returned 0x18a002e [0242.393] GetBkMode (hdc=0x4f010810) returned 2 [0242.393] SetBkMode (hdc=0x4f010810, mode=1) returned 2 [0242.393] DrawTextExW (in: hdc=0x4f010810, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26a4da0 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0242.393] DrawTextExW (in: hdc=0x4f010810, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26a4da0 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0242.394] RestoreDC (hdc=0x4f010810, nSavedDC=-1) returned 1 [0242.394] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4f010810) returned 0x0 [0242.394] GetFocus () returned 0x201d0 [0242.394] IsAppThemed () returned 0x1 [0242.394] GetThemeAppProperties () returned 0x3 [0242.394] GetThemeAppProperties () returned 0x3 [0242.394] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0242.394] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0x4f010810, x1=0, y1=0, rop=0xcc0020) returned 1 [0242.394] GdipReleaseDC (graphics=0x504fbc8, hdc=0x4f010810) returned 0x0 [0242.394] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0242.394] SelectObject (hdc=0x4f010810, h=0x185000f) returned 0x490500d1 [0242.394] DeleteDC (hdc=0x4f010810) returned 1 [0242.394] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0242.394] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0242.394] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26a4e9c, cPoints=0x1 | out: lpPoints=0x26a4e9c) returned 42533703 [0242.394] WindowFromPoint (Point=0x3ae) returned 0x201d0 [0242.394] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ae) returned 0x1 [0242.395] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0242.395] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0242.395] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0242.395] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0242.395] GetSystemMetrics (nIndex=42) returned 0 [0242.395] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0242.395] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0242.395] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0242.395] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0242.395] GetCapture () returned 0x201d0 [0242.395] ReleaseCapture () returned 1 [0242.395] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0242.395] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0242.395] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ae) returned 0x1 [0242.395] IsWindowUnicode (hWnd=0x201d0) returned 1 [0242.395] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0242.395] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ae) returned 0x1 [0242.395] SetCursor (hCursor=0x10003) returned 0x10003 [0242.395] TranslateMessage (lpMsg=0x1ef250) returned 0 [0242.395] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0242.395] GetKeyState (nVirtKey=1) returned 0 [0242.395] GetKeyState (nVirtKey=2) returned 0 [0242.395] GetKeyState (nVirtKey=4) returned 0 [0242.395] GetKeyState (nVirtKey=5) returned 0 [0242.395] GetKeyState (nVirtKey=6) returned 0 [0242.396] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0242.396] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0242.396] WaitMessage () returned 1 [0245.426] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0245.426] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bf) returned 0x1 [0245.426] IsWindowUnicode (hWnd=0x201d0) returned 1 [0245.426] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0245.426] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bf) returned 0x1 [0245.426] SetCursor (hCursor=0x10003) returned 0x10003 [0245.426] TranslateMessage (lpMsg=0x1ef250) returned 0 [0245.426] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0245.426] GetKeyState (nVirtKey=1) returned 0 [0245.426] GetKeyState (nVirtKey=2) returned 0 [0245.426] GetKeyState (nVirtKey=4) returned 0 [0245.426] GetKeyState (nVirtKey=5) returned 0 [0245.427] GetKeyState (nVirtKey=6) returned 0 [0245.427] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0245.427] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0245.427] WaitMessage () returned 1 [0245.502] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0245.502] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bf) returned 0x1 [0245.502] IsWindowUnicode (hWnd=0x201d0) returned 1 [0245.502] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0245.502] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bf) returned 0x1 [0245.502] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0245.502] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e6027a) returned 0x0 [0245.502] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0245.502] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0245.502] SetCursor (hCursor=0x10003) returned 0x10003 [0245.503] TranslateMessage (lpMsg=0x1ef250) returned 0 [0245.503] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0245.503] GetKeyState (nVirtKey=1) returned -127 [0245.503] GetKeyState (nVirtKey=2) returned 0 [0245.503] GetKeyState (nVirtKey=4) returned 0 [0245.503] GetKeyState (nVirtKey=5) returned 0 [0245.503] GetKeyState (nVirtKey=6) returned 0 [0245.503] IsWindowVisible (hWnd=0x201d0) returned 1 [0245.503] IsWindowEnabled (hWnd=0x201d0) returned 1 [0245.503] SetFocus (hWnd=0x201d0) returned 0x201d0 [0245.503] GetFocus () returned 0x201d0 [0245.503] GetFocus () returned 0x201d0 [0245.503] GetFocus () returned 0x201d0 [0245.503] GetKeyState (nVirtKey=1) returned -127 [0245.503] GetKeyState (nVirtKey=2) returned 0 [0245.503] GetKeyState (nVirtKey=4) returned 0 [0245.503] GetKeyState (nVirtKey=5) returned 0 [0245.503] GetKeyState (nVirtKey=6) returned 0 [0245.503] GetCapture () returned 0x0 [0245.503] SetCapture (hWnd=0x201d0) returned 0x0 [0245.503] GetKeyState (nVirtKey=1) returned -127 [0245.503] GetKeyState (nVirtKey=2) returned 0 [0245.503] GetKeyState (nVirtKey=4) returned 0 [0245.503] GetKeyState (nVirtKey=5) returned 0 [0245.503] GetKeyState (nVirtKey=6) returned 0 [0245.503] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0245.503] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0245.503] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0245.503] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0245.503] TranslateMessage (lpMsg=0x1ef250) returned 0 [0245.503] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0245.503] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0245.503] IsWindowUnicode (hWnd=0x201d0) returned 1 [0245.503] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0245.504] TranslateMessage (lpMsg=0x1ef250) returned 0 [0245.504] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0245.504] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26a4fc0, cPoints=0x1 | out: lpPoints=0x26a4fc0) returned 42533703 [0245.504] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0245.504] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0245.504] UpdateWindow (hWnd=0x201d0) returned 1 [0245.504] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0245.504] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0245.504] CreateCompatibleDC (hdc=0x160107c7) returned 0xa010679 [0245.504] SelectObject (hdc=0xa010679, h=0x490500d1) returned 0x185000f [0245.504] GdipCreateFromHDC (hdc=0xa010679, graphics=0x1eea5c) returned 0x0 [0245.504] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0245.504] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0245.504] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0245.504] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0245.504] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0245.504] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0245.504] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0245.505] LocalFree (hMem=0x416cb8) returned 0x0 [0245.505] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0245.505] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0245.505] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0245.505] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0245.505] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0245.505] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfcfd0dbd) returned 0x0 [0245.505] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0245.505] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0245.505] GetCurrentObject (hdc=0xa010679, type=0x1) returned 0x1b00017 [0245.505] GetCurrentObject (hdc=0xa010679, type=0x2) returned 0x1900010 [0245.505] GetCurrentObject (hdc=0xa010679, type=0x7) returned 0x490500d1 [0245.505] GetCurrentObject (hdc=0xa010679, type=0x6) returned 0x18a002e [0245.505] SaveDC (hdc=0xa010679) returned 1 [0245.505] GetNearestColor (hdc=0xa010679, color=0xf5f5f5) returned 0xf5f5f5 [0245.505] GetNearestColor (hdc=0xa010679, color=0x515151) returned 0x515151 [0245.505] GetNearestColor (hdc=0xa010679, color=0x0) returned 0x0 [0245.505] GetNearestColor (hdc=0xa010679, color=0x515151) returned 0x515151 [0245.505] GetNearestColor (hdc=0xa010679, color=0x0) returned 0x0 [0245.506] GetNearestColor (hdc=0xa010679, color=0xfafafa) returned 0xfafafa [0245.506] GetNearestColor (hdc=0xa010679, color=0xe0e0e0) returned 0xe0e0e0 [0245.506] GetNearestColor (hdc=0xa010679, color=0xdcdcdc) returned 0xdcdcdc [0245.506] GetNearestColor (hdc=0xa010679, color=0x0) returned 0x0 [0245.506] RestoreDC (hdc=0xa010679, nSavedDC=-1) returned 1 [0245.506] GdipReleaseDC (graphics=0x504fbc8, hdc=0xa010679) returned 0x0 [0245.506] IsAppThemed () returned 0x1 [0245.506] GetThemeAppProperties () returned 0x3 [0245.506] GetThemeAppProperties () returned 0x3 [0245.506] IsAppThemed () returned 0x1 [0245.506] GetThemeAppProperties () returned 0x3 [0245.506] GetThemeAppProperties () returned 0x3 [0245.506] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26a56c4 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0245.506] IsAppThemed () returned 0x1 [0245.506] GetThemeAppProperties () returned 0x3 [0245.506] GetThemeAppProperties () returned 0x3 [0245.506] IsAppThemed () returned 0x1 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] IsAppThemed () returned 0x1 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] IsAppThemed () returned 0x1 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] IsThemePartDefined () returned 0x1 [0245.507] IsAppThemed () returned 0x1 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0245.507] IsAppThemed () returned 0x1 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] IsAppThemed () returned 0x1 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] GetThemeAppProperties () returned 0x3 [0245.507] IsThemePartDefined () returned 0x1 [0245.507] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0245.507] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0245.507] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0245.507] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0245.507] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0245.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0245.507] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0245.507] LocalFree (hMem=0x416cb8) returned 0x0 [0245.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0245.507] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0245.507] LocalFree (hMem=0x416cb8) returned 0x0 [0245.507] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0245.508] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0245.508] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0245.508] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0245.508] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0245.508] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0245.508] GetCurrentObject (hdc=0xa010679, type=0x1) returned 0x1b00017 [0245.508] GetCurrentObject (hdc=0xa010679, type=0x2) returned 0x1900010 [0245.508] GetCurrentObject (hdc=0xa010679, type=0x7) returned 0x490500d1 [0245.508] GetCurrentObject (hdc=0xa010679, type=0x6) returned 0x18a002e [0245.508] SaveDC (hdc=0xa010679) returned 1 [0245.508] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb0040813 [0245.508] GetClipRgn (hdc=0xa010679, hrgn=0xb0040813) returned 0 [0245.508] SelectClipRgn (hdc=0xa010679, hrgn=0x94040246) returned 2 [0245.508] DeleteObject (ho=0xb0040813) returned 1 [0245.508] DeleteObject (ho=0x94040246) returned 1 [0245.508] OffsetViewportOrgEx (in: hdc=0xa010679, x=0, y=0, lppt=0x26a5d74 | out: lppt=0x26a5d74) returned 1 [0245.508] DrawThemeParentBackground () returned 0x0 [0245.508] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0245.508] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0245.508] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0245.508] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0245.508] GetSystemMetrics (nIndex=42) returned 0 [0245.508] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0245.509] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0245.509] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0245.509] GetCurrentObject (hdc=0xa010679, type=0x1) returned 0x1b00017 [0245.509] GetCurrentObject (hdc=0xa010679, type=0x2) returned 0x1900010 [0245.509] GetCurrentObject (hdc=0xa010679, type=0x7) returned 0x490500d1 [0245.509] GetCurrentObject (hdc=0xa010679, type=0x6) returned 0x18a002e [0245.509] SaveDC (hdc=0xa010679) returned 2 [0245.509] GetNearestColor (hdc=0xa010679, color=0xf5f5f5) returned 0xf5f5f5 [0245.509] CreateSolidBrush (color=0xf5f5f5) returned 0xc0100244 [0245.509] FillRect (hDC=0xa010679, lprc=0x1ee2d0, hbr=0xc0100244) returned 1 [0245.509] DeleteObject (ho=0xc0100244) returned 1 [0245.509] RestoreDC (hdc=0xa010679, nSavedDC=-1) returned 1 [0245.509] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0245.509] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0245.509] GetSystemMetrics (nIndex=42) returned 0 [0245.509] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0245.509] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0245.509] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0245.509] GetCurrentObject (hdc=0xa010679, type=0x1) returned 0x1b00017 [0245.509] GetCurrentObject (hdc=0xa010679, type=0x2) returned 0x1900010 [0245.509] GetCurrentObject (hdc=0xa010679, type=0x7) returned 0x490500d1 [0245.510] GetCurrentObject (hdc=0xa010679, type=0x6) returned 0x18a002e [0245.510] SaveDC (hdc=0xa010679) returned 2 [0245.510] GetNearestColor (hdc=0xa010679, color=0xf5f5f5) returned 0xf5f5f5 [0245.510] CreateSolidBrush (color=0xf5f5f5) returned 0xc1100244 [0245.510] FillRect (hDC=0xa010679, lprc=0x1ee270, hbr=0xc1100244) returned 1 [0245.510] DeleteObject (ho=0xc1100244) returned 1 [0245.510] RestoreDC (hdc=0xa010679, nSavedDC=-1) returned 1 [0245.510] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0245.510] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0245.510] GetSystemMetrics (nIndex=42) returned 0 [0245.510] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0245.510] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0245.510] RestoreDC (hdc=0xa010679, nSavedDC=-1) returned 1 [0245.510] GdipReleaseDC (graphics=0x504fbc8, hdc=0xa010679) returned 0x0 [0245.510] IsAppThemed () returned 0x1 [0245.510] GetThemeAppProperties () returned 0x3 [0245.510] GetThemeAppProperties () returned 0x3 [0245.510] IsAppThemed () returned 0x1 [0245.510] GetThemeAppProperties () returned 0x3 [0245.510] GetThemeAppProperties () returned 0x3 [0245.510] IsThemePartDefined () returned 0x1 [0245.510] GdipCreateRegion (region=0x1ee764) returned 0x0 [0245.510] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0245.510] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0245.510] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0245.511] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0245.511] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0245.511] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0245.511] LocalFree (hMem=0x416cb8) returned 0x0 [0245.511] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0245.511] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0245.511] LocalFree (hMem=0x416cb8) returned 0x0 [0245.511] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0245.511] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0245.511] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0245.511] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0245.511] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0245.511] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0245.511] GetCurrentObject (hdc=0xa010679, type=0x1) returned 0x1b00017 [0245.511] GetCurrentObject (hdc=0xa010679, type=0x2) returned 0x1900010 [0245.511] GetCurrentObject (hdc=0xa010679, type=0x7) returned 0x490500d1 [0245.511] GetCurrentObject (hdc=0xa010679, type=0x6) returned 0x18a002e [0245.511] SaveDC (hdc=0xa010679) returned 1 [0245.511] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x95040246 [0245.511] GetClipRgn (hdc=0xa010679, hrgn=0x95040246) returned 0 [0245.511] SelectClipRgn (hdc=0xa010679, hrgn=0xb2040813) returned 2 [0245.511] DeleteObject (ho=0x95040246) returned 1 [0245.512] DeleteObject (ho=0xb2040813) returned 1 [0245.512] OffsetViewportOrgEx (in: hdc=0xa010679, x=0, y=0, lppt=0x26a65b4 | out: lppt=0x26a65b4) returned 1 [0245.512] IsAppThemed () returned 0x1 [0245.512] GetThemeAppProperties () returned 0x3 [0245.512] GetThemeAppProperties () returned 0x3 [0245.512] DrawThemeBackground () returned 0x0 [0245.512] RestoreDC (hdc=0xa010679, nSavedDC=-1) returned 1 [0245.512] GdipReleaseDC (graphics=0x504fbc8, hdc=0xa010679) returned 0x0 [0245.512] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0245.512] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0245.512] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0245.512] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0245.512] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0245.512] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0245.512] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0245.512] LocalFree (hMem=0x416cb8) returned 0x0 [0245.512] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0245.512] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0245.512] LocalFree (hMem=0x416cb8) returned 0x0 [0245.512] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0245.512] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0245.512] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0245.512] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0245.512] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0245.513] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0245.513] GetCurrentObject (hdc=0xa010679, type=0x1) returned 0x1b00017 [0245.513] GetCurrentObject (hdc=0xa010679, type=0x2) returned 0x1900010 [0245.513] GetCurrentObject (hdc=0xa010679, type=0x7) returned 0x490500d1 [0245.513] GetCurrentObject (hdc=0xa010679, type=0x6) returned 0x18a002e [0245.513] SaveDC (hdc=0xa010679) returned 1 [0245.513] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb3040813 [0245.513] GetClipRgn (hdc=0xa010679, hrgn=0xb3040813) returned 0 [0245.513] SelectClipRgn (hdc=0xa010679, hrgn=0x96040246) returned 2 [0245.513] DeleteObject (ho=0xb3040813) returned 1 [0245.513] DeleteObject (ho=0x96040246) returned 1 [0245.513] OffsetViewportOrgEx (in: hdc=0xa010679, x=0, y=0, lppt=0x26a6888 | out: lppt=0x26a6888) returned 1 [0245.513] IsAppThemed () returned 0x1 [0245.513] GetThemeAppProperties () returned 0x3 [0245.513] GetThemeAppProperties () returned 0x3 [0245.513] GetThemeBackgroundContentRect () returned 0x0 [0245.513] RestoreDC (hdc=0xa010679, nSavedDC=-1) returned 1 [0245.513] GdipReleaseDC (graphics=0x504fbc8, hdc=0xa010679) returned 0x0 [0245.513] IsAppThemed () returned 0x1 [0245.513] GetThemeAppProperties () returned 0x3 [0245.513] GetThemeAppProperties () returned 0x3 [0245.513] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0245.513] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0245.513] GetCurrentObject (hdc=0xa010679, type=0x1) returned 0x1b00017 [0245.513] GetCurrentObject (hdc=0xa010679, type=0x2) returned 0x1900010 [0245.513] GetCurrentObject (hdc=0xa010679, type=0x7) returned 0x490500d1 [0245.514] GetCurrentObject (hdc=0xa010679, type=0x6) returned 0x18a002e [0245.514] SaveDC (hdc=0xa010679) returned 1 [0245.514] GetTextAlign (hdc=0xa010679) returned 0x0 [0245.514] GetTextColor (hdc=0xa010679) returned 0x0 [0245.514] GetCurrentObject (hdc=0xa010679, type=0x6) returned 0x18a002e [0245.514] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0245.514] SelectObject (hdc=0xa010679, h=0x220a081a) returned 0x18a002e [0245.514] GetBkMode (hdc=0xa010679) returned 2 [0245.514] SetBkMode (hdc=0xa010679, mode=1) returned 2 [0245.514] DrawTextExW (in: hdc=0xa010679, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26a6c1c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0245.514] DrawTextExW (in: hdc=0xa010679, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26a6c1c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0245.514] RestoreDC (hdc=0xa010679, nSavedDC=-1) returned 1 [0245.514] GdipReleaseDC (graphics=0x504fbc8, hdc=0xa010679) returned 0x0 [0245.514] GetFocus () returned 0x201d0 [0245.514] IsAppThemed () returned 0x1 [0245.514] GetThemeAppProperties () returned 0x3 [0245.514] GetThemeAppProperties () returned 0x3 [0245.514] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0245.514] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0xa010679, x1=0, y1=0, rop=0xcc0020) returned 1 [0245.515] GdipReleaseDC (graphics=0x504fbc8, hdc=0xa010679) returned 0x0 [0245.515] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0245.515] SelectObject (hdc=0xa010679, h=0x185000f) returned 0x490500d1 [0245.515] DeleteDC (hdc=0xa010679) returned 1 [0245.515] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0245.515] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0245.515] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26a6d18, cPoints=0x1 | out: lpPoints=0x26a6d18) returned 42533703 [0245.515] WindowFromPoint (Point=0x3bf) returned 0x201d0 [0245.515] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bf) returned 0x1 [0245.515] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0245.515] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0245.515] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0245.515] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0245.515] GetSystemMetrics (nIndex=42) returned 0 [0245.515] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0245.515] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0245.515] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0245.515] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0245.515] GetCapture () returned 0x201d0 [0245.515] ReleaseCapture () returned 1 [0245.515] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0245.516] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0245.516] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bf) returned 0x1 [0245.516] IsWindowUnicode (hWnd=0x201d0) returned 1 [0245.516] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0245.516] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703bf) returned 0x1 [0245.516] SetCursor (hCursor=0x10003) returned 0x10003 [0245.516] TranslateMessage (lpMsg=0x1ef250) returned 0 [0245.516] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0245.516] GetKeyState (nVirtKey=1) returned 1 [0245.516] GetKeyState (nVirtKey=2) returned 0 [0245.516] GetKeyState (nVirtKey=4) returned 0 [0245.516] GetKeyState (nVirtKey=5) returned 0 [0245.516] GetKeyState (nVirtKey=6) returned 0 [0245.516] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0245.516] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0245.516] WaitMessage () returned 1 [0248.544] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0248.544] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703df) returned 0x1 [0248.544] IsWindowUnicode (hWnd=0x201d0) returned 1 [0248.544] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0248.544] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703df) returned 0x1 [0248.544] SetCursor (hCursor=0x10003) returned 0x10003 [0248.544] TranslateMessage (lpMsg=0x1ef250) returned 0 [0248.544] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0248.544] GetKeyState (nVirtKey=1) returned 1 [0248.544] GetKeyState (nVirtKey=2) returned 0 [0248.544] GetKeyState (nVirtKey=4) returned 0 [0248.544] GetKeyState (nVirtKey=5) returned 0 [0248.544] GetKeyState (nVirtKey=6) returned 0 [0248.544] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0248.544] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0248.544] WaitMessage () returned 1 [0248.605] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0248.606] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703df) returned 0x1 [0248.606] IsWindowUnicode (hWnd=0x201d0) returned 1 [0248.606] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0248.606] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703df) returned 0x1 [0248.606] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0248.606] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e6029a) returned 0x0 [0248.606] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0248.606] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0248.606] SetCursor (hCursor=0x10003) returned 0x10003 [0248.606] TranslateMessage (lpMsg=0x1ef250) returned 0 [0248.606] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0248.606] GetKeyState (nVirtKey=1) returned -128 [0248.606] GetKeyState (nVirtKey=2) returned 0 [0248.606] GetKeyState (nVirtKey=4) returned 0 [0248.606] GetKeyState (nVirtKey=5) returned 0 [0248.606] GetKeyState (nVirtKey=6) returned 0 [0248.606] IsWindowVisible (hWnd=0x201d0) returned 1 [0248.606] IsWindowEnabled (hWnd=0x201d0) returned 1 [0248.606] SetFocus (hWnd=0x201d0) returned 0x201d0 [0248.606] GetFocus () returned 0x201d0 [0248.606] GetFocus () returned 0x201d0 [0248.606] GetFocus () returned 0x201d0 [0248.606] GetKeyState (nVirtKey=1) returned -128 [0248.606] GetKeyState (nVirtKey=2) returned 0 [0248.606] GetKeyState (nVirtKey=4) returned 0 [0248.606] GetKeyState (nVirtKey=5) returned 0 [0248.606] GetKeyState (nVirtKey=6) returned 0 [0248.607] GetCapture () returned 0x0 [0248.607] SetCapture (hWnd=0x201d0) returned 0x0 [0248.607] GetKeyState (nVirtKey=1) returned -128 [0248.607] GetKeyState (nVirtKey=2) returned 0 [0248.607] GetKeyState (nVirtKey=4) returned 0 [0248.607] GetKeyState (nVirtKey=5) returned 0 [0248.607] GetKeyState (nVirtKey=6) returned 0 [0248.607] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0248.607] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0248.607] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0248.607] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0248.607] TranslateMessage (lpMsg=0x1ef250) returned 0 [0248.607] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0248.607] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0248.607] IsWindowUnicode (hWnd=0x201d0) returned 1 [0248.607] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0248.607] TranslateMessage (lpMsg=0x1ef250) returned 0 [0248.607] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0248.607] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26a6e3c, cPoints=0x1 | out: lpPoints=0x26a6e3c) returned 42533703 [0248.607] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0248.607] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0248.607] UpdateWindow (hWnd=0x201d0) returned 1 [0248.607] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0248.607] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0248.607] CreateCompatibleDC (hdc=0x160107c7) returned 0xb010679 [0248.607] SelectObject (hdc=0xb010679, h=0x490500d1) returned 0x185000f [0248.608] GdipCreateFromHDC (hdc=0xb010679, graphics=0x1eea5c) returned 0x0 [0248.608] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0248.608] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0248.608] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0248.608] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0248.608] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0248.608] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0248.608] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0248.608] LocalFree (hMem=0x416cb8) returned 0x0 [0248.608] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0248.608] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0248.608] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0248.608] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0248.608] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0248.608] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfcfb0dbd) returned 0x0 [0248.608] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0248.608] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0248.608] GetCurrentObject (hdc=0xb010679, type=0x1) returned 0x1b00017 [0248.608] GetCurrentObject (hdc=0xb010679, type=0x2) returned 0x1900010 [0248.608] GetCurrentObject (hdc=0xb010679, type=0x7) returned 0x490500d1 [0248.608] GetCurrentObject (hdc=0xb010679, type=0x6) returned 0x18a002e [0248.608] SaveDC (hdc=0xb010679) returned 1 [0248.609] GetNearestColor (hdc=0xb010679, color=0xf5f5f5) returned 0xf5f5f5 [0248.609] GetNearestColor (hdc=0xb010679, color=0x515151) returned 0x515151 [0248.609] GetNearestColor (hdc=0xb010679, color=0x0) returned 0x0 [0248.609] GetNearestColor (hdc=0xb010679, color=0x515151) returned 0x515151 [0248.609] GetNearestColor (hdc=0xb010679, color=0x0) returned 0x0 [0248.609] GetNearestColor (hdc=0xb010679, color=0xfafafa) returned 0xfafafa [0248.609] GetNearestColor (hdc=0xb010679, color=0xe0e0e0) returned 0xe0e0e0 [0248.609] GetNearestColor (hdc=0xb010679, color=0xdcdcdc) returned 0xdcdcdc [0248.609] GetNearestColor (hdc=0xb010679, color=0x0) returned 0x0 [0248.609] RestoreDC (hdc=0xb010679, nSavedDC=-1) returned 1 [0248.609] GdipReleaseDC (graphics=0x504fbc8, hdc=0xb010679) returned 0x0 [0248.609] IsAppThemed () returned 0x1 [0248.609] GetThemeAppProperties () returned 0x3 [0248.609] GetThemeAppProperties () returned 0x3 [0248.609] IsAppThemed () returned 0x1 [0248.609] GetThemeAppProperties () returned 0x3 [0248.609] GetThemeAppProperties () returned 0x3 [0248.609] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26a7540 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0248.609] IsAppThemed () returned 0x1 [0248.609] GetThemeAppProperties () returned 0x3 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] IsAppThemed () returned 0x1 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] IsAppThemed () returned 0x1 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] IsAppThemed () returned 0x1 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] IsThemePartDefined () returned 0x1 [0248.610] IsAppThemed () returned 0x1 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0248.610] IsAppThemed () returned 0x1 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] IsAppThemed () returned 0x1 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] GetThemeAppProperties () returned 0x3 [0248.610] IsThemePartDefined () returned 0x1 [0248.610] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0248.610] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0248.610] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0248.610] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0248.610] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0248.610] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0248.610] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0248.610] LocalFree (hMem=0x416cb8) returned 0x0 [0248.610] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0248.610] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0248.610] LocalFree (hMem=0x416cb8) returned 0x0 [0248.610] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0248.610] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0248.611] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0248.611] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0248.611] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0248.611] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0248.611] GetCurrentObject (hdc=0xb010679, type=0x1) returned 0x1b00017 [0248.611] GetCurrentObject (hdc=0xb010679, type=0x2) returned 0x1900010 [0248.611] GetCurrentObject (hdc=0xb010679, type=0x7) returned 0x490500d1 [0248.611] GetCurrentObject (hdc=0xb010679, type=0x6) returned 0x18a002e [0248.611] SaveDC (hdc=0xb010679) returned 1 [0248.611] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x97040246 [0248.611] GetClipRgn (hdc=0xb010679, hrgn=0x97040246) returned 0 [0248.611] SelectClipRgn (hdc=0xb010679, hrgn=0xb7040813) returned 2 [0248.611] DeleteObject (ho=0x97040246) returned 1 [0248.611] DeleteObject (ho=0xb7040813) returned 1 [0248.611] OffsetViewportOrgEx (in: hdc=0xb010679, x=0, y=0, lppt=0x26a7bf0 | out: lppt=0x26a7bf0) returned 1 [0248.611] DrawThemeParentBackground () returned 0x0 [0248.611] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0248.611] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0248.611] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0248.611] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0248.611] GetSystemMetrics (nIndex=42) returned 0 [0248.611] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0248.611] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0248.612] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0248.612] GetCurrentObject (hdc=0xb010679, type=0x1) returned 0x1b00017 [0248.612] GetCurrentObject (hdc=0xb010679, type=0x2) returned 0x1900010 [0248.612] GetCurrentObject (hdc=0xb010679, type=0x7) returned 0x490500d1 [0248.612] GetCurrentObject (hdc=0xb010679, type=0x6) returned 0x18a002e [0248.612] SaveDC (hdc=0xb010679) returned 2 [0248.612] GetNearestColor (hdc=0xb010679, color=0xf5f5f5) returned 0xf5f5f5 [0248.612] CreateSolidBrush (color=0xf5f5f5) returned 0xc2100244 [0248.612] FillRect (hDC=0xb010679, lprc=0x1ee2d0, hbr=0xc2100244) returned 1 [0248.612] DeleteObject (ho=0xc2100244) returned 1 [0248.612] RestoreDC (hdc=0xb010679, nSavedDC=-1) returned 1 [0248.612] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0248.612] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0248.612] GetSystemMetrics (nIndex=42) returned 0 [0248.612] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0248.612] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0248.612] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0248.612] GetCurrentObject (hdc=0xb010679, type=0x1) returned 0x1b00017 [0248.612] GetCurrentObject (hdc=0xb010679, type=0x2) returned 0x1900010 [0248.612] GetCurrentObject (hdc=0xb010679, type=0x7) returned 0x490500d1 [0248.612] GetCurrentObject (hdc=0xb010679, type=0x6) returned 0x18a002e [0248.612] SaveDC (hdc=0xb010679) returned 2 [0248.613] GetNearestColor (hdc=0xb010679, color=0xf5f5f5) returned 0xf5f5f5 [0248.613] CreateSolidBrush (color=0xf5f5f5) returned 0xc3100244 [0248.613] FillRect (hDC=0xb010679, lprc=0x1ee270, hbr=0xc3100244) returned 1 [0248.613] DeleteObject (ho=0xc3100244) returned 1 [0248.613] RestoreDC (hdc=0xb010679, nSavedDC=-1) returned 1 [0248.613] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0248.613] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0248.613] GetSystemMetrics (nIndex=42) returned 0 [0248.613] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0248.613] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0248.613] RestoreDC (hdc=0xb010679, nSavedDC=-1) returned 1 [0248.613] GdipReleaseDC (graphics=0x504fbc8, hdc=0xb010679) returned 0x0 [0248.613] IsAppThemed () returned 0x1 [0248.613] GetThemeAppProperties () returned 0x3 [0248.613] GetThemeAppProperties () returned 0x3 [0248.613] IsAppThemed () returned 0x1 [0248.613] GetThemeAppProperties () returned 0x3 [0248.613] GetThemeAppProperties () returned 0x3 [0248.613] IsThemePartDefined () returned 0x1 [0248.613] GdipCreateRegion (region=0x1ee764) returned 0x0 [0248.613] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0248.613] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0248.613] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0248.613] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0248.613] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0248.613] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0248.614] LocalFree (hMem=0x416cb8) returned 0x0 [0248.614] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0248.614] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0248.614] LocalFree (hMem=0x416cb8) returned 0x0 [0248.614] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0248.614] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0248.614] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0248.614] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0248.614] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0248.614] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0248.614] GetCurrentObject (hdc=0xb010679, type=0x1) returned 0x1b00017 [0248.614] GetCurrentObject (hdc=0xb010679, type=0x2) returned 0x1900010 [0248.614] GetCurrentObject (hdc=0xb010679, type=0x7) returned 0x490500d1 [0248.614] GetCurrentObject (hdc=0xb010679, type=0x6) returned 0x18a002e [0248.614] SaveDC (hdc=0xb010679) returned 1 [0248.614] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb8040813 [0248.614] GetClipRgn (hdc=0xb010679, hrgn=0xb8040813) returned 0 [0248.614] SelectClipRgn (hdc=0xb010679, hrgn=0x99040246) returned 2 [0248.614] DeleteObject (ho=0xb8040813) returned 1 [0248.614] DeleteObject (ho=0x99040246) returned 1 [0248.614] OffsetViewportOrgEx (in: hdc=0xb010679, x=0, y=0, lppt=0x26a8430 | out: lppt=0x26a8430) returned 1 [0248.615] IsAppThemed () returned 0x1 [0248.615] GetThemeAppProperties () returned 0x3 [0248.615] GetThemeAppProperties () returned 0x3 [0248.615] DrawThemeBackground () returned 0x0 [0248.615] RestoreDC (hdc=0xb010679, nSavedDC=-1) returned 1 [0248.615] GdipReleaseDC (graphics=0x504fbc8, hdc=0xb010679) returned 0x0 [0248.615] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0248.615] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0248.615] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0248.615] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0248.615] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0248.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0248.615] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0248.615] LocalFree (hMem=0x416cb8) returned 0x0 [0248.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0248.615] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0248.615] LocalFree (hMem=0x416cb8) returned 0x0 [0248.615] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0248.615] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0248.615] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0248.615] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0248.615] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0248.615] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0248.615] GetCurrentObject (hdc=0xb010679, type=0x1) returned 0x1b00017 [0248.615] GetCurrentObject (hdc=0xb010679, type=0x2) returned 0x1900010 [0248.616] GetCurrentObject (hdc=0xb010679, type=0x7) returned 0x490500d1 [0248.616] GetCurrentObject (hdc=0xb010679, type=0x6) returned 0x18a002e [0248.616] SaveDC (hdc=0xb010679) returned 1 [0248.616] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a040246 [0248.616] GetClipRgn (hdc=0xb010679, hrgn=0x9a040246) returned 0 [0248.616] SelectClipRgn (hdc=0xb010679, hrgn=0xb9040813) returned 2 [0248.616] DeleteObject (ho=0x9a040246) returned 1 [0248.616] DeleteObject (ho=0xb9040813) returned 1 [0248.616] OffsetViewportOrgEx (in: hdc=0xb010679, x=0, y=0, lppt=0x26a8704 | out: lppt=0x26a8704) returned 1 [0248.616] IsAppThemed () returned 0x1 [0248.616] GetThemeAppProperties () returned 0x3 [0248.616] GetThemeAppProperties () returned 0x3 [0248.616] GetThemeBackgroundContentRect () returned 0x0 [0248.616] RestoreDC (hdc=0xb010679, nSavedDC=-1) returned 1 [0248.616] GdipReleaseDC (graphics=0x504fbc8, hdc=0xb010679) returned 0x0 [0248.616] IsAppThemed () returned 0x1 [0248.616] GetThemeAppProperties () returned 0x3 [0248.616] GetThemeAppProperties () returned 0x3 [0248.616] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0248.616] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0248.616] GetCurrentObject (hdc=0xb010679, type=0x1) returned 0x1b00017 [0248.616] GetCurrentObject (hdc=0xb010679, type=0x2) returned 0x1900010 [0248.616] GetCurrentObject (hdc=0xb010679, type=0x7) returned 0x490500d1 [0248.616] GetCurrentObject (hdc=0xb010679, type=0x6) returned 0x18a002e [0248.616] SaveDC (hdc=0xb010679) returned 1 [0248.616] GetTextAlign (hdc=0xb010679) returned 0x0 [0248.617] GetTextColor (hdc=0xb010679) returned 0x0 [0248.617] GetCurrentObject (hdc=0xb010679, type=0x6) returned 0x18a002e [0248.617] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0248.617] SelectObject (hdc=0xb010679, h=0x220a081a) returned 0x18a002e [0248.617] GetBkMode (hdc=0xb010679) returned 2 [0248.617] SetBkMode (hdc=0xb010679, mode=1) returned 2 [0248.617] DrawTextExW (in: hdc=0xb010679, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26a8a98 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0248.617] DrawTextExW (in: hdc=0xb010679, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26a8a98 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0248.617] RestoreDC (hdc=0xb010679, nSavedDC=-1) returned 1 [0248.617] GdipReleaseDC (graphics=0x504fbc8, hdc=0xb010679) returned 0x0 [0248.617] GetFocus () returned 0x201d0 [0248.617] IsAppThemed () returned 0x1 [0248.617] GetThemeAppProperties () returned 0x3 [0248.617] GetThemeAppProperties () returned 0x3 [0248.617] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0248.617] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0xb010679, x1=0, y1=0, rop=0xcc0020) returned 1 [0248.617] GdipReleaseDC (graphics=0x504fbc8, hdc=0xb010679) returned 0x0 [0248.617] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0248.618] SelectObject (hdc=0xb010679, h=0x185000f) returned 0x490500d1 [0248.618] DeleteDC (hdc=0xb010679) returned 1 [0248.618] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0248.618] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0248.618] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26a8b94, cPoints=0x1 | out: lpPoints=0x26a8b94) returned 42533703 [0248.618] WindowFromPoint (Point=0x3df) returned 0x201d0 [0248.618] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703df) returned 0x1 [0248.618] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0248.618] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0248.618] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0248.618] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0248.618] GetSystemMetrics (nIndex=42) returned 0 [0248.618] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0248.618] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0248.618] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0248.618] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0248.618] GetCapture () returned 0x201d0 [0248.618] ReleaseCapture () returned 1 [0248.618] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0248.618] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0248.618] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703df) returned 0x1 [0248.618] IsWindowUnicode (hWnd=0x201d0) returned 1 [0248.619] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0248.619] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29703df) returned 0x1 [0248.619] SetCursor (hCursor=0x10003) returned 0x10003 [0248.619] TranslateMessage (lpMsg=0x1ef250) returned 0 [0248.619] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0248.619] GetKeyState (nVirtKey=1) returned 0 [0248.619] GetKeyState (nVirtKey=2) returned 0 [0248.619] GetKeyState (nVirtKey=4) returned 0 [0248.619] GetKeyState (nVirtKey=5) returned 0 [0248.619] GetKeyState (nVirtKey=6) returned 0 [0248.619] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0248.619] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0248.619] WaitMessage () returned 1 [0251.670] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0251.671] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103a8) returned 0x1 [0251.671] IsWindowUnicode (hWnd=0x201d0) returned 1 [0251.671] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0251.671] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103a8) returned 0x1 [0251.671] SetCursor (hCursor=0x10003) returned 0x10003 [0251.671] TranslateMessage (lpMsg=0x1ef250) returned 0 [0251.671] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0251.671] GetKeyState (nVirtKey=1) returned 0 [0251.671] GetKeyState (nVirtKey=2) returned 0 [0251.671] GetKeyState (nVirtKey=4) returned 0 [0251.671] GetKeyState (nVirtKey=5) returned 0 [0251.671] GetKeyState (nVirtKey=6) returned 0 [0251.671] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0251.671] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0251.671] WaitMessage () returned 1 [0251.723] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0251.723] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103a8) returned 0x1 [0251.724] IsWindowUnicode (hWnd=0x201d0) returned 1 [0251.724] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0251.724] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103a8) returned 0x1 [0251.724] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0251.724] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e00263) returned 0x0 [0251.724] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0251.725] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0251.725] SetCursor (hCursor=0x10003) returned 0x10003 [0251.725] TranslateMessage (lpMsg=0x1ef250) returned 0 [0251.725] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0251.725] GetKeyState (nVirtKey=1) returned -127 [0251.725] GetKeyState (nVirtKey=2) returned 0 [0251.725] GetKeyState (nVirtKey=4) returned 0 [0251.725] GetKeyState (nVirtKey=5) returned 0 [0251.725] GetKeyState (nVirtKey=6) returned 0 [0251.725] IsWindowVisible (hWnd=0x201d0) returned 1 [0251.725] IsWindowEnabled (hWnd=0x201d0) returned 1 [0251.725] SetFocus (hWnd=0x201d0) returned 0x201d0 [0251.725] GetFocus () returned 0x201d0 [0251.725] GetFocus () returned 0x201d0 [0251.725] GetFocus () returned 0x201d0 [0251.725] GetKeyState (nVirtKey=1) returned -127 [0251.725] GetKeyState (nVirtKey=2) returned 0 [0251.725] GetKeyState (nVirtKey=4) returned 0 [0251.725] GetKeyState (nVirtKey=5) returned 0 [0251.725] GetKeyState (nVirtKey=6) returned 0 [0251.725] GetCapture () returned 0x0 [0251.725] SetCapture (hWnd=0x201d0) returned 0x0 [0251.725] GetKeyState (nVirtKey=1) returned -127 [0251.725] GetKeyState (nVirtKey=2) returned 0 [0251.725] GetKeyState (nVirtKey=4) returned 0 [0251.726] GetKeyState (nVirtKey=5) returned 0 [0251.726] GetKeyState (nVirtKey=6) returned 0 [0251.726] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0251.726] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0251.726] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0251.726] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0251.726] TranslateMessage (lpMsg=0x1ef250) returned 0 [0251.726] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0251.726] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0251.726] IsWindowUnicode (hWnd=0x201d0) returned 1 [0251.726] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0251.726] TranslateMessage (lpMsg=0x1ef250) returned 0 [0251.726] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0251.726] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26a8cb8, cPoints=0x1 | out: lpPoints=0x26a8cb8) returned 42533703 [0251.726] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0251.726] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0251.726] UpdateWindow (hWnd=0x201d0) returned 1 [0251.726] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0251.726] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0251.726] CreateCompatibleDC (hdc=0x160107c7) returned 0xc010679 [0251.726] SelectObject (hdc=0xc010679, h=0x490500d1) returned 0x185000f [0251.726] GdipCreateFromHDC (hdc=0xc010679, graphics=0x1eea5c) returned 0x0 [0251.727] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0251.727] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0251.727] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0251.727] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0251.727] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0251.727] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0251.727] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0251.727] LocalFree (hMem=0x416cb8) returned 0x0 [0251.727] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0251.727] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0251.727] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0251.727] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0251.727] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0251.727] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfcf90dbd) returned 0x0 [0251.727] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0251.727] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0251.727] GetCurrentObject (hdc=0xc010679, type=0x1) returned 0x1b00017 [0251.728] GetCurrentObject (hdc=0xc010679, type=0x2) returned 0x1900010 [0251.728] GetCurrentObject (hdc=0xc010679, type=0x7) returned 0x490500d1 [0251.728] GetCurrentObject (hdc=0xc010679, type=0x6) returned 0x18a002e [0251.728] SaveDC (hdc=0xc010679) returned 1 [0251.728] GetNearestColor (hdc=0xc010679, color=0xf5f5f5) returned 0xf5f5f5 [0251.728] GetNearestColor (hdc=0xc010679, color=0x515151) returned 0x515151 [0251.728] GetNearestColor (hdc=0xc010679, color=0x0) returned 0x0 [0251.728] GetNearestColor (hdc=0xc010679, color=0x515151) returned 0x515151 [0251.728] GetNearestColor (hdc=0xc010679, color=0x0) returned 0x0 [0251.728] GetNearestColor (hdc=0xc010679, color=0xfafafa) returned 0xfafafa [0251.728] GetNearestColor (hdc=0xc010679, color=0xe0e0e0) returned 0xe0e0e0 [0251.728] GetNearestColor (hdc=0xc010679, color=0xdcdcdc) returned 0xdcdcdc [0251.728] GetNearestColor (hdc=0xc010679, color=0x0) returned 0x0 [0251.728] RestoreDC (hdc=0xc010679, nSavedDC=-1) returned 1 [0251.728] GdipReleaseDC (graphics=0x504fbc8, hdc=0xc010679) returned 0x0 [0251.728] IsAppThemed () returned 0x1 [0251.728] GetThemeAppProperties () returned 0x3 [0251.728] GetThemeAppProperties () returned 0x3 [0251.729] IsAppThemed () returned 0x1 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26a93bc | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0251.729] IsAppThemed () returned 0x1 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] IsAppThemed () returned 0x1 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] IsAppThemed () returned 0x1 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] IsAppThemed () returned 0x1 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] IsThemePartDefined () returned 0x1 [0251.729] IsAppThemed () returned 0x1 [0251.729] GetThemeAppProperties () returned 0x3 [0251.729] GetThemeAppProperties () returned 0x3 [0251.730] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0251.730] IsAppThemed () returned 0x1 [0251.730] GetThemeAppProperties () returned 0x3 [0251.730] GetThemeAppProperties () returned 0x3 [0251.730] IsAppThemed () returned 0x1 [0251.730] GetThemeAppProperties () returned 0x3 [0251.730] GetThemeAppProperties () returned 0x3 [0251.730] IsThemePartDefined () returned 0x1 [0251.730] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0251.730] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0251.730] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0251.730] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0251.730] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0251.730] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0251.730] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0251.730] LocalFree (hMem=0x416cb8) returned 0x0 [0251.730] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0251.730] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0251.730] LocalFree (hMem=0x416cb8) returned 0x0 [0251.730] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0251.730] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0251.730] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0251.730] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0251.730] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0251.730] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0251.730] GetCurrentObject (hdc=0xc010679, type=0x1) returned 0x1b00017 [0251.730] GetCurrentObject (hdc=0xc010679, type=0x2) returned 0x1900010 [0251.730] GetCurrentObject (hdc=0xc010679, type=0x7) returned 0x490500d1 [0251.731] GetCurrentObject (hdc=0xc010679, type=0x6) returned 0x18a002e [0251.731] SaveDC (hdc=0xc010679) returned 1 [0251.731] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xba040813 [0251.731] GetClipRgn (hdc=0xc010679, hrgn=0xba040813) returned 0 [0251.731] SelectClipRgn (hdc=0xc010679, hrgn=0x9e040246) returned 2 [0251.731] DeleteObject (ho=0xba040813) returned 1 [0251.731] DeleteObject (ho=0x9e040246) returned 1 [0251.731] OffsetViewportOrgEx (in: hdc=0xc010679, x=0, y=0, lppt=0x26a9a6c | out: lppt=0x26a9a6c) returned 1 [0251.731] DrawThemeParentBackground () returned 0x0 [0251.731] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0251.731] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0251.731] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0251.731] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0251.731] GetSystemMetrics (nIndex=42) returned 0 [0251.731] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0251.732] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0251.732] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0251.732] GetCurrentObject (hdc=0xc010679, type=0x1) returned 0x1b00017 [0251.732] GetCurrentObject (hdc=0xc010679, type=0x2) returned 0x1900010 [0251.732] GetCurrentObject (hdc=0xc010679, type=0x7) returned 0x490500d1 [0251.732] GetCurrentObject (hdc=0xc010679, type=0x6) returned 0x18a002e [0251.732] SaveDC (hdc=0xc010679) returned 2 [0251.732] GetNearestColor (hdc=0xc010679, color=0xf5f5f5) returned 0xf5f5f5 [0251.732] CreateSolidBrush (color=0xf5f5f5) returned 0xc4100244 [0251.732] FillRect (hDC=0xc010679, lprc=0x1ee2d0, hbr=0xc4100244) returned 1 [0251.732] DeleteObject (ho=0xc4100244) returned 1 [0251.732] RestoreDC (hdc=0xc010679, nSavedDC=-1) returned 1 [0251.732] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0251.732] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0251.732] GetSystemMetrics (nIndex=42) returned 0 [0251.732] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0251.732] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0251.732] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0251.732] GetCurrentObject (hdc=0xc010679, type=0x1) returned 0x1b00017 [0251.732] GetCurrentObject (hdc=0xc010679, type=0x2) returned 0x1900010 [0251.732] GetCurrentObject (hdc=0xc010679, type=0x7) returned 0x490500d1 [0251.733] GetCurrentObject (hdc=0xc010679, type=0x6) returned 0x18a002e [0251.733] SaveDC (hdc=0xc010679) returned 2 [0251.733] GetNearestColor (hdc=0xc010679, color=0xf5f5f5) returned 0xf5f5f5 [0251.733] CreateSolidBrush (color=0xf5f5f5) returned 0xc5100244 [0251.733] FillRect (hDC=0xc010679, lprc=0x1ee270, hbr=0xc5100244) returned 1 [0251.733] DeleteObject (ho=0xc5100244) returned 1 [0251.733] RestoreDC (hdc=0xc010679, nSavedDC=-1) returned 1 [0251.733] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0251.733] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0251.733] GetSystemMetrics (nIndex=42) returned 0 [0251.733] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0251.733] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0251.733] RestoreDC (hdc=0xc010679, nSavedDC=-1) returned 1 [0251.733] GdipReleaseDC (graphics=0x504fbc8, hdc=0xc010679) returned 0x0 [0251.733] IsAppThemed () returned 0x1 [0251.733] GetThemeAppProperties () returned 0x3 [0251.733] GetThemeAppProperties () returned 0x3 [0251.733] IsAppThemed () returned 0x1 [0251.733] GetThemeAppProperties () returned 0x3 [0251.733] GetThemeAppProperties () returned 0x3 [0251.733] IsThemePartDefined () returned 0x1 [0251.733] GdipCreateRegion (region=0x1ee764) returned 0x0 [0251.733] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0251.733] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0251.733] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0251.734] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0251.734] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0251.734] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0251.734] LocalFree (hMem=0x416cb8) returned 0x0 [0251.734] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0251.734] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0251.734] LocalFree (hMem=0x416cb8) returned 0x0 [0251.734] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0251.734] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0251.734] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0251.734] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0251.734] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0251.734] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0251.734] GetCurrentObject (hdc=0xc010679, type=0x1) returned 0x1b00017 [0251.734] GetCurrentObject (hdc=0xc010679, type=0x2) returned 0x1900010 [0251.734] GetCurrentObject (hdc=0xc010679, type=0x7) returned 0x490500d1 [0251.734] GetCurrentObject (hdc=0xc010679, type=0x6) returned 0x18a002e [0251.734] SaveDC (hdc=0xc010679) returned 1 [0251.734] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9f040246 [0251.734] GetClipRgn (hdc=0xc010679, hrgn=0x9f040246) returned 0 [0251.734] SelectClipRgn (hdc=0xc010679, hrgn=0xbc040813) returned 2 [0251.734] DeleteObject (ho=0x9f040246) returned 1 [0251.734] DeleteObject (ho=0xbc040813) returned 1 [0251.735] OffsetViewportOrgEx (in: hdc=0xc010679, x=0, y=0, lppt=0x26aa2ac | out: lppt=0x26aa2ac) returned 1 [0251.735] IsAppThemed () returned 0x1 [0251.735] GetThemeAppProperties () returned 0x3 [0251.735] GetThemeAppProperties () returned 0x3 [0251.735] DrawThemeBackground () returned 0x0 [0251.735] RestoreDC (hdc=0xc010679, nSavedDC=-1) returned 1 [0251.735] GdipReleaseDC (graphics=0x504fbc8, hdc=0xc010679) returned 0x0 [0251.735] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0251.735] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0251.735] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0251.735] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0251.735] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0251.735] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0251.735] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0251.735] LocalFree (hMem=0x416cb8) returned 0x0 [0251.735] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0251.735] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0251.735] LocalFree (hMem=0x416cb8) returned 0x0 [0251.735] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0251.735] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0251.735] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0251.736] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0251.736] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0251.736] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0251.736] GetCurrentObject (hdc=0xc010679, type=0x1) returned 0x1b00017 [0251.736] GetCurrentObject (hdc=0xc010679, type=0x2) returned 0x1900010 [0251.736] GetCurrentObject (hdc=0xc010679, type=0x7) returned 0x490500d1 [0251.736] GetCurrentObject (hdc=0xc010679, type=0x6) returned 0x18a002e [0251.736] SaveDC (hdc=0xc010679) returned 1 [0251.736] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbd040813 [0251.736] GetClipRgn (hdc=0xc010679, hrgn=0xbd040813) returned 0 [0251.736] SelectClipRgn (hdc=0xc010679, hrgn=0xa0040246) returned 2 [0251.736] DeleteObject (ho=0xbd040813) returned 1 [0251.736] DeleteObject (ho=0xa0040246) returned 1 [0251.736] OffsetViewportOrgEx (in: hdc=0xc010679, x=0, y=0, lppt=0x26aa580 | out: lppt=0x26aa580) returned 1 [0251.736] IsAppThemed () returned 0x1 [0251.736] GetThemeAppProperties () returned 0x3 [0251.736] GetThemeAppProperties () returned 0x3 [0251.736] GetThemeBackgroundContentRect () returned 0x0 [0251.736] RestoreDC (hdc=0xc010679, nSavedDC=-1) returned 1 [0251.736] GdipReleaseDC (graphics=0x504fbc8, hdc=0xc010679) returned 0x0 [0251.736] IsAppThemed () returned 0x1 [0251.736] GetThemeAppProperties () returned 0x3 [0251.736] GetThemeAppProperties () returned 0x3 [0251.737] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0251.737] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0251.737] GetCurrentObject (hdc=0xc010679, type=0x1) returned 0x1b00017 [0251.737] GetCurrentObject (hdc=0xc010679, type=0x2) returned 0x1900010 [0251.737] GetCurrentObject (hdc=0xc010679, type=0x7) returned 0x490500d1 [0251.737] GetCurrentObject (hdc=0xc010679, type=0x6) returned 0x18a002e [0251.737] SaveDC (hdc=0xc010679) returned 1 [0251.737] GetTextAlign (hdc=0xc010679) returned 0x0 [0251.737] GetTextColor (hdc=0xc010679) returned 0x0 [0251.737] GetCurrentObject (hdc=0xc010679, type=0x6) returned 0x18a002e [0251.737] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0251.737] SelectObject (hdc=0xc010679, h=0x220a081a) returned 0x18a002e [0251.737] GetBkMode (hdc=0xc010679) returned 2 [0251.737] SetBkMode (hdc=0xc010679, mode=1) returned 2 [0251.737] DrawTextExW (in: hdc=0xc010679, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26aa914 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0251.737] DrawTextExW (in: hdc=0xc010679, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26aa914 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0251.738] RestoreDC (hdc=0xc010679, nSavedDC=-1) returned 1 [0251.738] GdipReleaseDC (graphics=0x504fbc8, hdc=0xc010679) returned 0x0 [0251.738] GetFocus () returned 0x201d0 [0251.738] IsAppThemed () returned 0x1 [0251.738] GetThemeAppProperties () returned 0x3 [0251.738] GetThemeAppProperties () returned 0x3 [0251.738] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0251.738] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0xc010679, x1=0, y1=0, rop=0xcc0020) returned 1 [0251.738] GdipReleaseDC (graphics=0x504fbc8, hdc=0xc010679) returned 0x0 [0251.738] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0251.738] SelectObject (hdc=0xc010679, h=0x185000f) returned 0x490500d1 [0251.738] DeleteDC (hdc=0xc010679) returned 1 [0251.738] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0251.738] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0251.738] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26aaa10, cPoints=0x1 | out: lpPoints=0x26aaa10) returned 42533703 [0251.738] WindowFromPoint (Point=0x3a8) returned 0x201d0 [0251.738] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103a8) returned 0x1 [0251.738] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0251.738] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0251.738] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0251.739] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0251.739] GetSystemMetrics (nIndex=42) returned 0 [0251.739] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0251.739] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0251.739] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0251.739] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0251.739] GetCapture () returned 0x201d0 [0251.739] ReleaseCapture () returned 1 [0251.739] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0251.739] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0251.739] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103a8) returned 0x1 [0251.739] IsWindowUnicode (hWnd=0x201d0) returned 1 [0251.739] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0251.739] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29103a8) returned 0x1 [0251.739] SetCursor (hCursor=0x10003) returned 0x10003 [0251.739] TranslateMessage (lpMsg=0x1ef250) returned 0 [0251.739] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0251.739] GetKeyState (nVirtKey=1) returned 1 [0251.739] GetKeyState (nVirtKey=2) returned 0 [0251.739] GetKeyState (nVirtKey=4) returned 0 [0251.739] GetKeyState (nVirtKey=5) returned 0 [0251.739] GetKeyState (nVirtKey=6) returned 0 [0251.740] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0251.740] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0251.740] WaitMessage () returned 1 [0254.784] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0254.785] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303c9) returned 0x1 [0254.785] IsWindowUnicode (hWnd=0x201d0) returned 1 [0254.785] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0254.785] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303c9) returned 0x1 [0254.785] SetCursor (hCursor=0x10003) returned 0x10003 [0254.785] TranslateMessage (lpMsg=0x1ef250) returned 0 [0254.785] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0254.785] GetKeyState (nVirtKey=1) returned 1 [0254.785] GetKeyState (nVirtKey=2) returned 0 [0254.785] GetKeyState (nVirtKey=4) returned 0 [0254.785] GetKeyState (nVirtKey=5) returned 0 [0254.785] GetKeyState (nVirtKey=6) returned 0 [0254.785] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0254.785] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0254.785] WaitMessage () returned 1 [0254.844] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0254.844] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303c9) returned 0x1 [0254.844] IsWindowUnicode (hWnd=0x201d0) returned 1 [0254.844] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0254.844] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303c9) returned 0x1 [0254.845] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0254.845] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1e20284) returned 0x0 [0254.845] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0254.845] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0254.845] SetCursor (hCursor=0x10003) returned 0x10003 [0254.845] TranslateMessage (lpMsg=0x1ef250) returned 0 [0254.845] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0254.845] GetKeyState (nVirtKey=1) returned -128 [0254.845] GetKeyState (nVirtKey=2) returned 0 [0254.845] GetKeyState (nVirtKey=4) returned 0 [0254.845] GetKeyState (nVirtKey=5) returned 0 [0254.845] GetKeyState (nVirtKey=6) returned 0 [0254.845] IsWindowVisible (hWnd=0x201d0) returned 1 [0254.845] IsWindowEnabled (hWnd=0x201d0) returned 1 [0254.845] SetFocus (hWnd=0x201d0) returned 0x201d0 [0254.845] GetFocus () returned 0x201d0 [0254.845] GetFocus () returned 0x201d0 [0254.846] GetFocus () returned 0x201d0 [0254.846] GetKeyState (nVirtKey=1) returned -128 [0254.846] GetKeyState (nVirtKey=2) returned 0 [0254.846] GetKeyState (nVirtKey=4) returned 0 [0254.846] GetKeyState (nVirtKey=5) returned 0 [0254.846] GetKeyState (nVirtKey=6) returned 0 [0254.846] GetCapture () returned 0x0 [0254.846] SetCapture (hWnd=0x201d0) returned 0x0 [0254.846] GetKeyState (nVirtKey=1) returned -128 [0254.846] GetKeyState (nVirtKey=2) returned 0 [0254.846] GetKeyState (nVirtKey=4) returned 0 [0254.846] GetKeyState (nVirtKey=5) returned 0 [0254.846] GetKeyState (nVirtKey=6) returned 0 [0254.846] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0254.846] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0254.846] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0254.846] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0254.846] TranslateMessage (lpMsg=0x1ef250) returned 0 [0254.846] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0254.846] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0254.846] IsWindowUnicode (hWnd=0x201d0) returned 1 [0254.846] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0254.846] TranslateMessage (lpMsg=0x1ef250) returned 0 [0254.846] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0254.846] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26aab34, cPoints=0x1 | out: lpPoints=0x26aab34) returned 42533703 [0254.846] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0254.846] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0254.846] UpdateWindow (hWnd=0x201d0) returned 1 [0254.846] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0254.846] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0254.846] CreateCompatibleDC (hdc=0x160107c7) returned 0xd010679 [0254.847] SelectObject (hdc=0xd010679, h=0x490500d1) returned 0x185000f [0254.847] GdipCreateFromHDC (hdc=0xd010679, graphics=0x1eea5c) returned 0x0 [0254.847] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0254.847] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0254.847] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0254.847] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0254.847] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0254.847] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0254.847] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0254.847] LocalFree (hMem=0x416cb8) returned 0x0 [0254.847] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0254.847] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0254.847] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0254.847] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0254.847] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0254.847] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfcf70dbd) returned 0x0 [0254.847] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0254.847] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0254.847] GetCurrentObject (hdc=0xd010679, type=0x1) returned 0x1b00017 [0254.847] GetCurrentObject (hdc=0xd010679, type=0x2) returned 0x1900010 [0254.848] GetCurrentObject (hdc=0xd010679, type=0x7) returned 0x490500d1 [0254.848] GetCurrentObject (hdc=0xd010679, type=0x6) returned 0x18a002e [0254.848] SaveDC (hdc=0xd010679) returned 1 [0254.848] GetNearestColor (hdc=0xd010679, color=0xf5f5f5) returned 0xf5f5f5 [0254.848] GetNearestColor (hdc=0xd010679, color=0x515151) returned 0x515151 [0254.848] GetNearestColor (hdc=0xd010679, color=0x0) returned 0x0 [0254.848] GetNearestColor (hdc=0xd010679, color=0x515151) returned 0x515151 [0254.848] GetNearestColor (hdc=0xd010679, color=0x0) returned 0x0 [0254.848] GetNearestColor (hdc=0xd010679, color=0xfafafa) returned 0xfafafa [0254.848] GetNearestColor (hdc=0xd010679, color=0xe0e0e0) returned 0xe0e0e0 [0254.848] GetNearestColor (hdc=0xd010679, color=0xdcdcdc) returned 0xdcdcdc [0254.848] GetNearestColor (hdc=0xd010679, color=0x0) returned 0x0 [0254.848] RestoreDC (hdc=0xd010679, nSavedDC=-1) returned 1 [0254.848] GdipReleaseDC (graphics=0x504fbc8, hdc=0xd010679) returned 0x0 [0254.848] IsAppThemed () returned 0x1 [0254.848] GetThemeAppProperties () returned 0x3 [0254.848] GetThemeAppProperties () returned 0x3 [0254.848] IsAppThemed () returned 0x1 [0254.848] GetThemeAppProperties () returned 0x3 [0254.848] GetThemeAppProperties () returned 0x3 [0254.848] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26ab238 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0254.849] IsAppThemed () returned 0x1 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] IsAppThemed () returned 0x1 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] IsAppThemed () returned 0x1 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] IsAppThemed () returned 0x1 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] IsThemePartDefined () returned 0x1 [0254.849] IsAppThemed () returned 0x1 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0254.849] IsAppThemed () returned 0x1 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] IsAppThemed () returned 0x1 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] GetThemeAppProperties () returned 0x3 [0254.849] IsThemePartDefined () returned 0x1 [0254.849] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0254.849] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0254.849] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0254.849] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0254.849] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0254.849] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0254.849] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0254.849] LocalFree (hMem=0x416cb8) returned 0x0 [0254.849] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0254.849] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0254.850] LocalFree (hMem=0x416cb8) returned 0x0 [0254.850] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0254.850] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0254.850] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0254.850] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0254.850] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0254.850] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0254.850] GetCurrentObject (hdc=0xd010679, type=0x1) returned 0x1b00017 [0254.850] GetCurrentObject (hdc=0xd010679, type=0x2) returned 0x1900010 [0254.850] GetCurrentObject (hdc=0xd010679, type=0x7) returned 0x490500d1 [0254.850] GetCurrentObject (hdc=0xd010679, type=0x6) returned 0x18a002e [0254.850] SaveDC (hdc=0xd010679) returned 1 [0254.850] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa1040246 [0254.850] GetClipRgn (hdc=0xd010679, hrgn=0xa1040246) returned 0 [0254.850] SelectClipRgn (hdc=0xd010679, hrgn=0xc1040813) returned 2 [0254.850] DeleteObject (ho=0xa1040246) returned 1 [0254.850] DeleteObject (ho=0xc1040813) returned 1 [0254.850] OffsetViewportOrgEx (in: hdc=0xd010679, x=0, y=0, lppt=0x26ab8e8 | out: lppt=0x26ab8e8) returned 1 [0254.850] DrawThemeParentBackground () returned 0x0 [0254.850] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0254.850] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0254.850] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0254.851] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0254.851] GetSystemMetrics (nIndex=42) returned 0 [0254.851] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0254.851] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0254.851] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0254.851] GetCurrentObject (hdc=0xd010679, type=0x1) returned 0x1b00017 [0254.851] GetCurrentObject (hdc=0xd010679, type=0x2) returned 0x1900010 [0254.851] GetCurrentObject (hdc=0xd010679, type=0x7) returned 0x490500d1 [0254.851] GetCurrentObject (hdc=0xd010679, type=0x6) returned 0x18a002e [0254.851] SaveDC (hdc=0xd010679) returned 2 [0254.851] GetNearestColor (hdc=0xd010679, color=0xf5f5f5) returned 0xf5f5f5 [0254.851] CreateSolidBrush (color=0xf5f5f5) returned 0xc6100244 [0254.851] FillRect (hDC=0xd010679, lprc=0x1ee2d0, hbr=0xc6100244) returned 1 [0254.851] DeleteObject (ho=0xc6100244) returned 1 [0254.851] RestoreDC (hdc=0xd010679, nSavedDC=-1) returned 1 [0254.851] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0254.851] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0254.851] GetSystemMetrics (nIndex=42) returned 0 [0254.851] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0254.851] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0254.851] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0254.851] GetCurrentObject (hdc=0xd010679, type=0x1) returned 0x1b00017 [0254.852] GetCurrentObject (hdc=0xd010679, type=0x2) returned 0x1900010 [0254.852] GetCurrentObject (hdc=0xd010679, type=0x7) returned 0x490500d1 [0254.852] GetCurrentObject (hdc=0xd010679, type=0x6) returned 0x18a002e [0254.852] SaveDC (hdc=0xd010679) returned 2 [0254.852] GetNearestColor (hdc=0xd010679, color=0xf5f5f5) returned 0xf5f5f5 [0254.852] CreateSolidBrush (color=0xf5f5f5) returned 0xc7100244 [0254.852] FillRect (hDC=0xd010679, lprc=0x1ee270, hbr=0xc7100244) returned 1 [0254.852] DeleteObject (ho=0xc7100244) returned 1 [0254.852] RestoreDC (hdc=0xd010679, nSavedDC=-1) returned 1 [0254.852] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0254.852] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0254.852] GetSystemMetrics (nIndex=42) returned 0 [0254.852] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0254.852] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0254.852] RestoreDC (hdc=0xd010679, nSavedDC=-1) returned 1 [0254.852] GdipReleaseDC (graphics=0x504fbc8, hdc=0xd010679) returned 0x0 [0254.852] IsAppThemed () returned 0x1 [0254.852] GetThemeAppProperties () returned 0x3 [0254.852] GetThemeAppProperties () returned 0x3 [0254.852] IsAppThemed () returned 0x1 [0254.852] GetThemeAppProperties () returned 0x3 [0254.852] GetThemeAppProperties () returned 0x3 [0254.852] IsThemePartDefined () returned 0x1 [0254.852] GdipCreateRegion (region=0x1ee764) returned 0x0 [0254.852] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0254.852] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0254.853] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0254.853] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0254.853] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0254.853] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0254.853] LocalFree (hMem=0x416cb8) returned 0x0 [0254.853] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0254.853] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0254.853] LocalFree (hMem=0x416cb8) returned 0x0 [0254.853] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0254.853] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0254.853] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0254.853] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0254.853] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0254.853] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0254.853] GetCurrentObject (hdc=0xd010679, type=0x1) returned 0x1b00017 [0254.853] GetCurrentObject (hdc=0xd010679, type=0x2) returned 0x1900010 [0254.853] GetCurrentObject (hdc=0xd010679, type=0x7) returned 0x490500d1 [0254.853] GetCurrentObject (hdc=0xd010679, type=0x6) returned 0x18a002e [0254.853] SaveDC (hdc=0xd010679) returned 1 [0254.853] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc2040813 [0254.853] GetClipRgn (hdc=0xd010679, hrgn=0xc2040813) returned 0 [0254.853] SelectClipRgn (hdc=0xd010679, hrgn=0xa3040246) returned 2 [0254.854] DeleteObject (ho=0xc2040813) returned 1 [0254.854] DeleteObject (ho=0xa3040246) returned 1 [0254.854] OffsetViewportOrgEx (in: hdc=0xd010679, x=0, y=0, lppt=0x26ac128 | out: lppt=0x26ac128) returned 1 [0254.854] IsAppThemed () returned 0x1 [0254.854] GetThemeAppProperties () returned 0x3 [0254.854] GetThemeAppProperties () returned 0x3 [0254.854] DrawThemeBackground () returned 0x0 [0254.854] RestoreDC (hdc=0xd010679, nSavedDC=-1) returned 1 [0254.854] GdipReleaseDC (graphics=0x504fbc8, hdc=0xd010679) returned 0x0 [0254.854] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0254.854] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0254.854] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0254.854] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0254.854] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0254.854] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0254.854] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0254.854] LocalFree (hMem=0x416cb8) returned 0x0 [0254.854] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0254.854] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0254.854] LocalFree (hMem=0x416cb8) returned 0x0 [0254.854] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0254.854] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0254.854] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0254.854] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0254.855] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0254.855] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0254.855] GetCurrentObject (hdc=0xd010679, type=0x1) returned 0x1b00017 [0254.855] GetCurrentObject (hdc=0xd010679, type=0x2) returned 0x1900010 [0254.855] GetCurrentObject (hdc=0xd010679, type=0x7) returned 0x490500d1 [0254.855] GetCurrentObject (hdc=0xd010679, type=0x6) returned 0x18a002e [0254.855] SaveDC (hdc=0xd010679) returned 1 [0254.855] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa4040246 [0254.855] GetClipRgn (hdc=0xd010679, hrgn=0xa4040246) returned 0 [0254.855] SelectClipRgn (hdc=0xd010679, hrgn=0xc3040813) returned 2 [0254.855] DeleteObject (ho=0xa4040246) returned 1 [0254.855] DeleteObject (ho=0xc3040813) returned 1 [0254.855] OffsetViewportOrgEx (in: hdc=0xd010679, x=0, y=0, lppt=0x26ac3fc | out: lppt=0x26ac3fc) returned 1 [0254.855] IsAppThemed () returned 0x1 [0254.855] GetThemeAppProperties () returned 0x3 [0254.855] GetThemeAppProperties () returned 0x3 [0254.855] GetThemeBackgroundContentRect () returned 0x0 [0254.855] RestoreDC (hdc=0xd010679, nSavedDC=-1) returned 1 [0254.855] GdipReleaseDC (graphics=0x504fbc8, hdc=0xd010679) returned 0x0 [0254.855] IsAppThemed () returned 0x1 [0254.855] GetThemeAppProperties () returned 0x3 [0254.855] GetThemeAppProperties () returned 0x3 [0254.855] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0254.855] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0254.856] GetCurrentObject (hdc=0xd010679, type=0x1) returned 0x1b00017 [0254.856] GetCurrentObject (hdc=0xd010679, type=0x2) returned 0x1900010 [0254.856] GetCurrentObject (hdc=0xd010679, type=0x7) returned 0x490500d1 [0254.856] GetCurrentObject (hdc=0xd010679, type=0x6) returned 0x18a002e [0254.856] SaveDC (hdc=0xd010679) returned 1 [0254.856] GetTextAlign (hdc=0xd010679) returned 0x0 [0254.856] GetTextColor (hdc=0xd010679) returned 0x0 [0254.856] GetCurrentObject (hdc=0xd010679, type=0x6) returned 0x18a002e [0254.856] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0254.856] SelectObject (hdc=0xd010679, h=0x220a081a) returned 0x18a002e [0254.856] GetBkMode (hdc=0xd010679) returned 2 [0254.856] SetBkMode (hdc=0xd010679, mode=1) returned 2 [0254.856] DrawTextExW (in: hdc=0xd010679, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26ac790 | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0254.856] DrawTextExW (in: hdc=0xd010679, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26ac790 | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0254.856] RestoreDC (hdc=0xd010679, nSavedDC=-1) returned 1 [0254.856] GdipReleaseDC (graphics=0x504fbc8, hdc=0xd010679) returned 0x0 [0254.856] GetFocus () returned 0x201d0 [0254.856] IsAppThemed () returned 0x1 [0254.857] GetThemeAppProperties () returned 0x3 [0254.857] GetThemeAppProperties () returned 0x3 [0254.857] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0254.857] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0xd010679, x1=0, y1=0, rop=0xcc0020) returned 1 [0254.857] GdipReleaseDC (graphics=0x504fbc8, hdc=0xd010679) returned 0x0 [0254.857] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0254.857] SelectObject (hdc=0xd010679, h=0x185000f) returned 0x490500d1 [0254.857] DeleteDC (hdc=0xd010679) returned 1 [0254.857] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0254.857] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0254.857] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26ac88c, cPoints=0x1 | out: lpPoints=0x26ac88c) returned 42533703 [0254.857] WindowFromPoint (Point=0x3c9) returned 0x201d0 [0254.857] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303c9) returned 0x1 [0254.857] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0254.857] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0254.857] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0254.857] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0254.857] GetSystemMetrics (nIndex=42) returned 0 [0254.857] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0254.857] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0254.857] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0254.857] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0254.858] GetCapture () returned 0x201d0 [0254.858] ReleaseCapture () returned 1 [0254.858] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0254.858] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0254.858] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303c9) returned 0x1 [0254.858] IsWindowUnicode (hWnd=0x201d0) returned 1 [0254.858] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0254.858] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29303c9) returned 0x1 [0254.858] SetCursor (hCursor=0x10003) returned 0x10003 [0254.858] TranslateMessage (lpMsg=0x1ef250) returned 0 [0254.858] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0254.858] GetKeyState (nVirtKey=1) returned 0 [0254.858] GetKeyState (nVirtKey=2) returned 0 [0254.858] GetKeyState (nVirtKey=4) returned 0 [0254.858] GetKeyState (nVirtKey=5) returned 0 [0254.858] GetKeyState (nVirtKey=6) returned 0 [0254.858] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0254.858] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0254.858] WaitMessage () returned 1 [0257.904] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0257.904] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ac) returned 0x1 [0257.904] IsWindowUnicode (hWnd=0x201d0) returned 1 [0257.904] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0257.904] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ac) returned 0x1 [0257.904] SetCursor (hCursor=0x10003) returned 0x10003 [0257.905] TranslateMessage (lpMsg=0x1ef250) returned 0 [0257.905] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0257.905] GetKeyState (nVirtKey=1) returned 0 [0257.905] GetKeyState (nVirtKey=2) returned 0 [0257.905] GetKeyState (nVirtKey=4) returned 0 [0257.905] GetKeyState (nVirtKey=5) returned 0 [0257.905] GetKeyState (nVirtKey=6) returned 0 [0257.905] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0257.905] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0257.905] WaitMessage () returned 1 [0257.967] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0257.967] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ac) returned 0x1 [0257.967] IsWindowUnicode (hWnd=0x201d0) returned 1 [0257.967] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0257.967] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ac) returned 0x1 [0257.968] GetDlgItem (hDlg=0x301ba, nIDDlgItem=0) returned 0x0 [0257.969] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x210, wParam=0x201, lParam=0x1df0267) returned 0x0 [0257.969] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0257.969] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0x21, wParam=0x301ba, lParam=0x2010001) returned 0x1 [0257.969] SetCursor (hCursor=0x10003) returned 0x10003 [0257.969] TranslateMessage (lpMsg=0x1ef250) returned 0 [0257.969] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0257.969] GetKeyState (nVirtKey=1) returned -127 [0257.969] GetKeyState (nVirtKey=2) returned 0 [0257.969] GetKeyState (nVirtKey=4) returned 0 [0257.969] GetKeyState (nVirtKey=5) returned 0 [0257.969] GetKeyState (nVirtKey=6) returned 0 [0257.969] IsWindowVisible (hWnd=0x201d0) returned 1 [0257.969] IsWindowEnabled (hWnd=0x201d0) returned 1 [0257.969] SetFocus (hWnd=0x201d0) returned 0x201d0 [0257.969] GetFocus () returned 0x201d0 [0257.969] GetFocus () returned 0x201d0 [0257.969] GetFocus () returned 0x201d0 [0257.969] GetKeyState (nVirtKey=1) returned -127 [0257.969] GetKeyState (nVirtKey=2) returned 0 [0257.969] GetKeyState (nVirtKey=4) returned 0 [0257.969] GetKeyState (nVirtKey=5) returned 0 [0257.969] GetKeyState (nVirtKey=6) returned 0 [0257.969] GetCapture () returned 0x0 [0257.969] SetCapture (hWnd=0x201d0) returned 0x0 [0257.969] GetKeyState (nVirtKey=1) returned -127 [0257.970] GetKeyState (nVirtKey=2) returned 0 [0257.970] GetKeyState (nVirtKey=4) returned 0 [0257.970] GetKeyState (nVirtKey=5) returned 0 [0257.970] GetKeyState (nVirtKey=6) returned 0 [0257.970] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0257.970] InvalidateRect (hWnd=0x201d0, lpRect=0x1eeef8, bErase=0) returned 1 [0257.970] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0257.970] GetMessageA (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0257.970] TranslateMessage (lpMsg=0x1ef250) returned 0 [0257.970] DispatchMessageA (lpMsg=0x1ef250) returned 0x0 [0257.970] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0257.970] IsWindowUnicode (hWnd=0x201d0) returned 1 [0257.970] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0257.970] TranslateMessage (lpMsg=0x1ef250) returned 0 [0257.970] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0257.970] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26ac9b0, cPoints=0x1 | out: lpPoints=0x26ac9b0) returned 42533703 [0257.970] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0257.970] InvalidateRect (hWnd=0x201d0, lpRect=0x1eee9c, bErase=0) returned 1 [0257.970] UpdateWindow (hWnd=0x201d0) returned 1 [0257.970] BeginPaint (in: hWnd=0x201d0, lpPaint=0x1eea44 | out: lpPaint=0x1eea44) returned 0x160107c7 [0257.970] SelectPalette (hdc=0x160107c7, hPal=0x25080257, bForceBkgd=1) returned 0x188000b [0257.970] CreateCompatibleDC (hdc=0x160107c7) returned 0xe010679 [0257.971] SelectObject (hdc=0xe010679, h=0x490500d1) returned 0x185000f [0257.971] GdipCreateFromHDC (hdc=0xe010679, graphics=0x1eea5c) returned 0x0 [0257.971] GdipTranslateWorldTransform (graphics=0x504fbc8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0257.971] GdipSetClipRectI (graphics=0x504fbc8, x=0, y=0, width=231, height=23, combineMode=0x0) returned 0x0 [0257.971] GdipCreateMatrix (matrix=0x1eeaa4) returned 0x0 [0257.971] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504fea8) returned 0x0 [0257.971] GdipIsMatrixIdentity (matrix=0x504fea8, result=0x1eeabc) returned 0x0 [0257.971] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0257.971] GdipGetMatrixElements (matrix=0x504fea8, matrixOut=0x416cb8) returned 0x0 [0257.971] LocalFree (hMem=0x416cb8) returned 0x0 [0257.971] GdipDeleteMatrix (matrix=0x504fea8) returned 0x0 [0257.971] GdipCreateRegion (region=0x1eeaa4) returned 0x0 [0257.971] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0257.971] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1eeab0) returned 0x0 [0257.971] GdipSaveGraphics (graphics=0x504fbc8, state=0x1eeadc) returned 0x0 [0257.971] GdipRestoreGraphics (graphics=0x504fbc8, state=0xfcf50dbd) returned 0x0 [0257.971] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0257.972] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8bc) returned 0x0 [0257.972] GetCurrentObject (hdc=0xe010679, type=0x1) returned 0x1b00017 [0257.972] GetCurrentObject (hdc=0xe010679, type=0x2) returned 0x1900010 [0257.972] GetCurrentObject (hdc=0xe010679, type=0x7) returned 0x490500d1 [0257.972] GetCurrentObject (hdc=0xe010679, type=0x6) returned 0x18a002e [0257.972] SaveDC (hdc=0xe010679) returned 1 [0257.972] GetNearestColor (hdc=0xe010679, color=0xf5f5f5) returned 0xf5f5f5 [0257.972] GetNearestColor (hdc=0xe010679, color=0x515151) returned 0x515151 [0257.972] GetNearestColor (hdc=0xe010679, color=0x0) returned 0x0 [0257.972] GetNearestColor (hdc=0xe010679, color=0x515151) returned 0x515151 [0257.972] GetNearestColor (hdc=0xe010679, color=0x0) returned 0x0 [0257.972] GetNearestColor (hdc=0xe010679, color=0xfafafa) returned 0xfafafa [0257.972] GetNearestColor (hdc=0xe010679, color=0xe0e0e0) returned 0xe0e0e0 [0257.972] GetNearestColor (hdc=0xe010679, color=0xdcdcdc) returned 0xdcdcdc [0257.972] GetNearestColor (hdc=0xe010679, color=0x0) returned 0x0 [0257.973] RestoreDC (hdc=0xe010679, nSavedDC=-1) returned 1 [0257.973] GdipReleaseDC (graphics=0x504fbc8, hdc=0xe010679) returned 0x0 [0257.973] IsAppThemed () returned 0x1 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] IsAppThemed () returned 0x1 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] DrawTextExW (in: hdc=0x17010869, lpchText="decrypt", cchText=7, lprc=0x1ee778, format=0x102415, lpdtp=0x26ad0b4 | out: lpchText="decrypt", lprc=0x1ee778) returned 13 [0257.973] IsAppThemed () returned 0x1 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] IsAppThemed () returned 0x1 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] IsAppThemed () returned 0x1 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] IsAppThemed () returned 0x1 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] IsThemePartDefined () returned 0x1 [0257.973] IsAppThemed () returned 0x1 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] GetThemeAppProperties () returned 0x3 [0257.973] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0257.974] IsAppThemed () returned 0x1 [0257.974] GetThemeAppProperties () returned 0x3 [0257.974] GetThemeAppProperties () returned 0x3 [0257.974] IsAppThemed () returned 0x1 [0257.974] GetThemeAppProperties () returned 0x3 [0257.974] GetThemeAppProperties () returned 0x3 [0257.974] IsThemePartDefined () returned 0x1 [0257.974] GdipCreateRegion (region=0x1ee7c0) returned 0x0 [0257.974] GdipGetClip (graphics=0x504fbc8, region=0x504fed8) returned 0x0 [0257.974] GdipCreateMatrix (matrix=0x1ee7c0) returned 0x0 [0257.974] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0257.974] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee7d8) returned 0x0 [0257.974] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0257.974] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0257.974] LocalFree (hMem=0x416cb8) returned 0x0 [0257.974] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0257.974] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0257.974] LocalFree (hMem=0x416cb8) returned 0x0 [0257.974] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0257.974] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee800) returned 0x0 [0257.974] GdipIsInfiniteRegion (region=0x504fed8, graphics=0x504fbc8, result=0x1ee7f0) returned 0x0 [0257.974] GdipGetRegionHRgn (region=0x504fed8, graphics=0x504fbc8, hRgn=0x1ee7f0) returned 0x0 [0257.975] GdipDeleteRegion (region=0x504fed8) returned 0x0 [0257.975] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee808) returned 0x0 [0257.975] GetCurrentObject (hdc=0xe010679, type=0x1) returned 0x1b00017 [0257.975] GetCurrentObject (hdc=0xe010679, type=0x2) returned 0x1900010 [0257.975] GetCurrentObject (hdc=0xe010679, type=0x7) returned 0x490500d1 [0257.975] GetCurrentObject (hdc=0xe010679, type=0x6) returned 0x18a002e [0257.975] SaveDC (hdc=0xe010679) returned 1 [0257.975] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc4040813 [0257.975] GetClipRgn (hdc=0xe010679, hrgn=0xc4040813) returned 0 [0257.975] SelectClipRgn (hdc=0xe010679, hrgn=0xa8040246) returned 2 [0257.975] DeleteObject (ho=0xc4040813) returned 1 [0257.975] DeleteObject (ho=0xa8040246) returned 1 [0257.975] OffsetViewportOrgEx (in: hdc=0xe010679, x=0, y=0, lppt=0x26ad764 | out: lppt=0x26ad764) returned 1 [0257.975] DrawThemeParentBackground () returned 0x0 [0257.975] GetWindowPlacement (in: hWnd=0x301ba, lpwndpl=0x1ee57c | out: lpwndpl=0x1ee57c) returned 1 [0257.975] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee528 | out: lpRect=0x1ee528) returned 1 [0257.976] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0257.976] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0257.976] GetSystemMetrics (nIndex=42) returned 0 [0257.976] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee3e8, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0257.976] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee3e8) returned 0xb [0257.976] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee430 | out: lpRect=0x1ee430) returned 1 [0257.976] GetCurrentObject (hdc=0xe010679, type=0x1) returned 0x1b00017 [0257.976] GetCurrentObject (hdc=0xe010679, type=0x2) returned 0x1900010 [0257.976] GetCurrentObject (hdc=0xe010679, type=0x7) returned 0x490500d1 [0257.976] GetCurrentObject (hdc=0xe010679, type=0x6) returned 0x18a002e [0257.976] SaveDC (hdc=0xe010679) returned 2 [0257.976] GetNearestColor (hdc=0xe010679, color=0xf5f5f5) returned 0xf5f5f5 [0257.976] CreateSolidBrush (color=0xf5f5f5) returned 0xc8100244 [0257.976] FillRect (hDC=0xe010679, lprc=0x1ee2d0, hbr=0xc8100244) returned 1 [0257.976] DeleteObject (ho=0xc8100244) returned 1 [0257.976] RestoreDC (hdc=0xe010679, nSavedDC=-1) returned 1 [0257.977] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0257.977] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0257.977] GetSystemMetrics (nIndex=42) returned 0 [0257.977] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0257.977] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0257.977] GetClientRect (in: hWnd=0x301ba, lpRect=0x1ee3d0 | out: lpRect=0x1ee3d0) returned 1 [0257.977] GetCurrentObject (hdc=0xe010679, type=0x1) returned 0x1b00017 [0257.977] GetCurrentObject (hdc=0xe010679, type=0x2) returned 0x1900010 [0257.977] GetCurrentObject (hdc=0xe010679, type=0x7) returned 0x490500d1 [0257.977] GetCurrentObject (hdc=0xe010679, type=0x6) returned 0x18a002e [0257.977] SaveDC (hdc=0xe010679) returned 2 [0257.977] GetNearestColor (hdc=0xe010679, color=0xf5f5f5) returned 0xf5f5f5 [0257.977] CreateSolidBrush (color=0xf5f5f5) returned 0xc9100244 [0257.977] FillRect (hDC=0xe010679, lprc=0x1ee270, hbr=0xc9100244) returned 1 [0257.977] DeleteObject (ho=0xc9100244) returned 1 [0257.977] RestoreDC (hdc=0xe010679, nSavedDC=-1) returned 1 [0257.977] GetWindowTextLengthW (hWnd=0x301ba) returned 11 [0257.977] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0257.977] GetSystemMetrics (nIndex=42) returned 0 [0257.977] GetWindowTextW (in: hWnd=0x301ba, lpString=0x1ee388, nMaxCount=12 | out: lpString="c0hen@admin") returned 11 [0257.977] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x301ba, Msg=0xd, wParam=0xc, lParam=0x1ee388) returned 0xb [0257.978] RestoreDC (hdc=0xe010679, nSavedDC=-1) returned 1 [0257.978] GdipReleaseDC (graphics=0x504fbc8, hdc=0xe010679) returned 0x0 [0257.978] IsAppThemed () returned 0x1 [0257.978] GetThemeAppProperties () returned 0x3 [0257.978] GetThemeAppProperties () returned 0x3 [0257.978] IsAppThemed () returned 0x1 [0257.978] GetThemeAppProperties () returned 0x3 [0257.978] GetThemeAppProperties () returned 0x3 [0257.978] IsThemePartDefined () returned 0x1 [0257.978] GdipCreateRegion (region=0x1ee764) returned 0x0 [0257.978] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0257.978] GdipCreateMatrix (matrix=0x1ee764) returned 0x0 [0257.978] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x504ff38) returned 0x0 [0257.978] GdipIsMatrixIdentity (matrix=0x504ff38, result=0x1ee77c) returned 0x0 [0257.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0257.978] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0257.978] LocalFree (hMem=0x416cb8) returned 0x0 [0257.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0257.978] GdipGetMatrixElements (matrix=0x504ff38, matrixOut=0x416cb8) returned 0x0 [0257.978] LocalFree (hMem=0x416cb8) returned 0x0 [0257.979] GdipDeleteMatrix (matrix=0x504ff38) returned 0x0 [0257.979] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee7a4) returned 0x0 [0257.979] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee794) returned 0x0 [0257.979] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee794) returned 0x0 [0257.979] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0257.979] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee7ac) returned 0x0 [0257.979] GetCurrentObject (hdc=0xe010679, type=0x1) returned 0x1b00017 [0257.979] GetCurrentObject (hdc=0xe010679, type=0x2) returned 0x1900010 [0257.979] GetCurrentObject (hdc=0xe010679, type=0x7) returned 0x490500d1 [0257.979] GetCurrentObject (hdc=0xe010679, type=0x6) returned 0x18a002e [0257.979] SaveDC (hdc=0xe010679) returned 1 [0257.979] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa9040246 [0257.979] GetClipRgn (hdc=0xe010679, hrgn=0xa9040246) returned 0 [0257.979] SelectClipRgn (hdc=0xe010679, hrgn=0xc6040813) returned 2 [0257.979] DeleteObject (ho=0xa9040246) returned 1 [0257.979] DeleteObject (ho=0xc6040813) returned 1 [0257.979] OffsetViewportOrgEx (in: hdc=0xe010679, x=0, y=0, lppt=0x26adfa4 | out: lppt=0x26adfa4) returned 1 [0257.979] IsAppThemed () returned 0x1 [0257.979] GetThemeAppProperties () returned 0x3 [0257.980] GetThemeAppProperties () returned 0x3 [0257.980] DrawThemeBackground () returned 0x0 [0257.980] RestoreDC (hdc=0xe010679, nSavedDC=-1) returned 1 [0257.980] GdipReleaseDC (graphics=0x504fbc8, hdc=0xe010679) returned 0x0 [0257.980] GdipCreateRegion (region=0x1ee74c) returned 0x0 [0257.980] GdipGetClip (graphics=0x504fbc8, region=0x504fea8) returned 0x0 [0257.980] GdipCreateMatrix (matrix=0x1ee74c) returned 0x0 [0257.980] GdipGetWorldTransform (graphics=0x504fbc8, matrix=0x4560d10) returned 0x0 [0257.980] GdipIsMatrixIdentity (matrix=0x4560d10, result=0x1ee764) returned 0x0 [0257.980] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0257.980] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0257.980] LocalFree (hMem=0x416cb8) returned 0x0 [0257.980] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x416cb8 [0257.980] GdipGetMatrixElements (matrix=0x4560d10, matrixOut=0x416cb8) returned 0x0 [0257.980] LocalFree (hMem=0x416cb8) returned 0x0 [0257.980] GdipDeleteMatrix (matrix=0x4560d10) returned 0x0 [0257.980] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee78c) returned 0x0 [0257.980] GdipIsInfiniteRegion (region=0x504fea8, graphics=0x504fbc8, result=0x1ee77c) returned 0x0 [0257.980] GdipGetRegionHRgn (region=0x504fea8, graphics=0x504fbc8, hRgn=0x1ee77c) returned 0x0 [0257.981] GdipDeleteRegion (region=0x504fea8) returned 0x0 [0257.981] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee794) returned 0x0 [0257.981] GetCurrentObject (hdc=0xe010679, type=0x1) returned 0x1b00017 [0257.981] GetCurrentObject (hdc=0xe010679, type=0x2) returned 0x1900010 [0257.981] GetCurrentObject (hdc=0xe010679, type=0x7) returned 0x490500d1 [0257.981] GetCurrentObject (hdc=0xe010679, type=0x6) returned 0x18a002e [0257.981] SaveDC (hdc=0xe010679) returned 1 [0257.981] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc7040813 [0257.981] GetClipRgn (hdc=0xe010679, hrgn=0xc7040813) returned 0 [0257.981] SelectClipRgn (hdc=0xe010679, hrgn=0xaa040246) returned 2 [0257.981] DeleteObject (ho=0xc7040813) returned 1 [0257.981] DeleteObject (ho=0xaa040246) returned 1 [0257.981] OffsetViewportOrgEx (in: hdc=0xe010679, x=0, y=0, lppt=0x26ae278 | out: lppt=0x26ae278) returned 1 [0257.981] IsAppThemed () returned 0x1 [0257.981] GetThemeAppProperties () returned 0x3 [0257.981] GetThemeAppProperties () returned 0x3 [0257.981] GetThemeBackgroundContentRect () returned 0x0 [0257.981] RestoreDC (hdc=0xe010679, nSavedDC=-1) returned 1 [0257.981] GdipReleaseDC (graphics=0x504fbc8, hdc=0xe010679) returned 0x0 [0257.982] IsAppThemed () returned 0x1 [0257.982] GetThemeAppProperties () returned 0x3 [0257.982] GetThemeAppProperties () returned 0x3 [0257.982] GdipGetTextRenderingHint (graphics=0x504fbc8, mode=0x1ee8c4) returned 0x0 [0257.982] GdipGetDC (graphics=0x504fbc8, hdc=0x1ee8b0) returned 0x0 [0257.982] GetCurrentObject (hdc=0xe010679, type=0x1) returned 0x1b00017 [0257.982] GetCurrentObject (hdc=0xe010679, type=0x2) returned 0x1900010 [0257.982] GetCurrentObject (hdc=0xe010679, type=0x7) returned 0x490500d1 [0257.982] GetCurrentObject (hdc=0xe010679, type=0x6) returned 0x18a002e [0257.982] SaveDC (hdc=0xe010679) returned 1 [0257.982] GetTextAlign (hdc=0xe010679) returned 0x0 [0257.982] GetTextColor (hdc=0xe010679) returned 0x0 [0257.982] GetCurrentObject (hdc=0xe010679, type=0x6) returned 0x18a002e [0257.982] GetObjectW (in: h=0x18a002e, c=92, pv=0x1ee5b8 | out: pv=0x1ee5b8) returned 92 [0257.982] SelectObject (hdc=0xe010679, h=0x220a081a) returned 0x18a002e [0257.982] GetBkMode (hdc=0xe010679) returned 2 [0257.983] SetBkMode (hdc=0xe010679, mode=1) returned 2 [0257.983] DrawTextExW (in: hdc=0xe010679, lpchText="decrypt", cchText=7, lprc=0x1ee68c, format=0x102415, lpdtp=0x26ae60c | out: lpchText="decrypt", lprc=0x1ee68c) returned 13 [0257.983] DrawTextExW (in: hdc=0xe010679, lpchText="decrypt", cchText=7, lprc=0x1ee844, format=0x102015, lpdtp=0x26ae60c | out: lpchText="decrypt", lprc=0x1ee844) returned 13 [0257.983] RestoreDC (hdc=0xe010679, nSavedDC=-1) returned 1 [0257.983] GdipReleaseDC (graphics=0x504fbc8, hdc=0xe010679) returned 0x0 [0257.983] GetFocus () returned 0x201d0 [0257.983] IsAppThemed () returned 0x1 [0257.983] GetThemeAppProperties () returned 0x3 [0257.983] GetThemeAppProperties () returned 0x3 [0257.983] GdipGetDC (graphics=0x504fbc8, hdc=0x1eea9c) returned 0x0 [0257.983] BitBlt (hdc=0x160107c7, x=0, y=0, cx=231, cy=23, hdcSrc=0xe010679, x1=0, y1=0, rop=0xcc0020) returned 1 [0257.983] GdipReleaseDC (graphics=0x504fbc8, hdc=0xe010679) returned 0x0 [0257.983] SelectPalette (hdc=0x160107c7, hPal=0x188000b, bForceBkgd=0) returned 0x25080257 [0257.983] SelectObject (hdc=0xe010679, h=0x185000f) returned 0x490500d1 [0257.983] DeleteDC (hdc=0xe010679) returned 1 [0257.983] GdipDeleteGraphics (graphics=0x504fbc8) returned 0x0 [0257.984] EndPaint (hWnd=0x201d0, lpPaint=0x1eea40) returned 1 [0257.984] MapWindowPoints (in: hWndFrom=0x201d0, hWndTo=0x0, lpPoints=0x26ae708, cPoints=0x1 | out: lpPoints=0x26ae708) returned 42533703 [0257.984] WindowFromPoint (Point=0x3ac) returned 0x201d0 [0257.984] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ac) returned 0x1 [0257.984] NotifyWinEvent (event=0x800a, hwnd=0x201d0, idObject=-4, idChild=0) [0257.984] NotifyWinEvent (event=0x800c, hwnd=0x201d0, idObject=-4, idChild=0) [0257.984] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0257.984] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0257.984] GetSystemMetrics (nIndex=42) returned 0 [0257.984] GetWindowTextW (in: hWnd=0x201d6, lpString=0x1eedfc, nMaxCount=1 | out: lpString="") returned 0 [0257.984] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xd, wParam=0x1, lParam=0x1eedfc) returned 0x0 [0257.984] GetWindowTextLengthW (hWnd=0x201d6) returned 0 [0257.984] CallWindowProcW (lpPrevWndFunc=0x73ce99d0, hWnd=0x201d6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0257.984] GetCapture () returned 0x201d0 [0257.984] ReleaseCapture () returned 1 [0257.984] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0257.984] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 1 [0257.984] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ac) returned 0x1 [0257.984] IsWindowUnicode (hWnd=0x201d0) returned 1 [0257.984] GetMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1ef250) returned 1 [0257.984] CallWindowProcW (lpPrevWndFunc=0x73d0b495, hWnd=0x201d0, Msg=0x84, wParam=0x0, lParam=0x29003ac) returned 0x1 [0257.985] SetCursor (hCursor=0x10003) returned 0x10003 [0257.985] TranslateMessage (lpMsg=0x1ef250) returned 0 [0257.985] DispatchMessageW (lpMsg=0x1ef250) returned 0x0 [0257.985] GetKeyState (nVirtKey=1) returned 1 [0257.985] GetKeyState (nVirtKey=2) returned 0 [0257.985] GetKeyState (nVirtKey=4) returned 0 [0257.985] GetKeyState (nVirtKey=5) returned 0 [0257.985] GetKeyState (nVirtKey=6) returned 0 [0257.985] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0257.985] PeekMessageW (in: lpMsg=0x1ef250, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1ef250) returned 0 [0257.985] WaitMessage () Thread: id = 2 os_tid = 0x954 Thread: id = 3 os_tid = 0x958 [0023.563] CoGetContextToken (in: pToken=0xf2fb1c | out: pToken=0xf2fb1c) returned 0x800401f0 [0023.563] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 4 os_tid = 0x95c Thread: id = 5 os_tid = 0x968 Thread: id = 6 os_tid = 0x998 Thread: id = 7 os_tid = 0xa6c Thread: id = 8 os_tid = 0xa70